RE: Access denied to local computer, even as ADMIN !! 2005-07-07 - By Scott Forsyth
Darren,
Does IIS work at all? It's possible that the metabase file (which is
basically the place where IIS information is stored. It's like the registry
of IIS) had certain permissions removed. It's located in
c:\windows\system32\inetsrv and is called metabase.bin on IIS5 and
metabase.xml on IIS6. Be careful to not change much, but if you reset any
disk level permissions on the system32 or inetsrv folders, they will need to
be adjusted. You can use filemon from www.sysinternals.com to check for any
access denied errors on disk.
How much configuration do you have on the server? If various permissions
have been adjusted, you may find that it's easier to uninstall and reinstall
IIS. Once you're done you should reregister asp.net too. That can be done
by running aspnet_regiis /i from the asp.net framework folder.
If that isn't an acceptable solution, I suspect that it's permissions on
disk or permissions within IIS which will need to be tracked down manually
and resolved.
Thanks,
Scott Forsyth
Microsoft MVP - ASP/ASP.NET
ASPInsider Member - MCP
http://www.orcsweb.com/
Powerful Web Hosting Solutions
#1 in Service and Support
----- Original Message -----
From: "Darren Logan" <Darrenl@(protected)>
To: <aspnet-admin@(protected)>
Sent: Tuesday, July 05, 2005 10:45 AM
Subject: [aspnet-admin] RE: Access denied to local computer, even as ADMIN
!!
> Hi Scott,
>
> Apologies.. but im getting a bit lost in the jargon here. Im not familiar
> with IIS.
> The word "METABASE" means nothing to me!!.
>
> ANYWAY...
>
> The machine DID work to begin with, but somewhere along the line this
> problem came up.
>
> Yes it's possible we have inadvertantly caused the problem ourselves. We
> did a lot of messing about
> with internet access permissions and so forth when we were testing our web
> page on it over the internet.
> Though lord knows which setting may have caused this!. Sorry, i cannot be
> any more specific on this one.
>
> regards,
> darren
>
> -----Original Message-----
> From: Scott Forsyth [mailto:scottnewsgroups@(protected)]
> Sent: 05 July 2005 15:29
> To: aspnet-admin@(protected)
> Subject: [aspnet-admin] RE: Access denied to local computer, even as
> ADMIN !!
>
>
>> AFAIK, the metabase doesn't obey NT rights (such as SeTcbPrivilege or
> SeTakeOwnershipPrivilege), but maybe it does.
>
> That's correct, the metabase has its own set of permissions that are
> stored
> in the metabase directly. If a setting is set on a particular node, it
> will
> not inherit from the root.
>
> Metabase explorer is probably the best bet. A command line option is
> metaacl.vbs.
>
> Darren, what would have changed to cause this? It's pretty (actually
> 'really') uncommon for someone to be locked out like this. Did you or
> another administrator do something that would have changed these settings?
>
>
> Scott Forsyth
> Microsoft MVP - ASP/ASP.NET
> ASPInsider Member - MCP
>
> http://www.orcsweb.com/
> Powerful Web Hosting Solutions
> #1 in Service and Support
>
>
> ----- Original Message -----
> From: "Ken Schaefer" <Ken@(protected)>
> To: <aspnet-admin@(protected)>
> Sent: Tuesday, July 05, 2005 9:29 AM
> Subject: [aspnet-admin] RE: Access denied to local computer, even as ADMIN
> !!
>
>
> AFAIK, the metabase doesn't obey NT rights (such as SeTcbPrivilege or
> SeTakeOwnershipPrivilege), but maybe it does.
>
> My suggestion: download Metabase Explorer (part of the IIS6.0 Resource
> Kit,
> but it works with IIS5.1 as well) [1]. Right-click on the root-node and
> choose "Permissions". If Administrators group is not listed, attempt to
> add
> it. If you can't add it, go to the Owner tab, and seize ownership of the
> entire heirachy, then do the preceeding step.
>
> If the metabase permissions actually honour the NT rights, then ensure
> (via
> the Local Security Policy) that your Admin account has "Take Ownership
> Privileges) [2]
>
> Cheers
> Ken
>
> [1]
> http://www.microsoft.com/downloads/details.aspx?FamilyID=56fc92ee-a71a-4c73-b
> 628-ade629c89499&DisplayLang=en
> [2] Start -> Run -> secpol.msc -> User Rights Assignment node
>
> --
> www.adOpenStatic.com/cs/blogs/ken/
>
> : -----Original Message-----
> : From: Darren Logan [mailto:Darrenl@(protected)]
> : Sent: Tuesday, 5 July 2005 11:06 PM
> : To: aspnet-admin@(protected)
> : Subject: [aspnet-admin] RE: Access denied to local computer, even as
> ADMIN
> : !!
> :
> : Hi Ken,
> :
> : Thanks for this... BUT HOW?
> :
> : Vbr,
> : Darren
> :
> : -----Original Message-----
> : From: Ken Schaefer [mailto:Ken@(protected)]
> : Sent: 05 July 2005 14:03
> : To: aspnet-admin@(protected)
> : Subject: [aspnet-admin] RE: Access denied to local computer, even as
> : ADMIN !!
> :
> :
> : Even when you are an administrator, ACLs (Access Control Lists) can be
> : configured to deny access to administrators. It's just that, by default,
> : administrators have access to most things. However, that doesn't stop
> the
> : default ACLs being modified.
> :
> : As a general rule however, Administrators can take ownership of most
> : resources (which, in turn gives them permission to alter the ACLs, given
> : them
> : access to the resource in question).
> :
> : It seems that the Administrator account doesn't have permissions to keys
> : in
> : the IIS metabase. You may need to reset the permissions on those keys.
> :
> : Cheers
> : Ken
> :
> : --
> : www.adOpenStatic.com/cs/blogs/ken/
> :
> : : -----Original Message-----
> : : From: Darren Logan [mailto:Darrenl@(protected)]
> : : Sent: Tuesday, 5 July 2005 8:19 PM
> : : To: aspnet-admin@(protected)
> : : Subject: [aspnet-admin] Access denied to local computer, even as ADMIN
> : !!
> : :
> : : Hi,
> : :
> : : I have a SBC running Windows XP Embedded with IIS5.1
> : :
> : : I log on as administrator, yet when i click to expand "Local computer"
> : in
> : : internet information services, i get a message thus "You have been
> : denied
> : : access to this machine".
> : :
> : : Errmmmm, what's that all about?
> : :
> : : This is very frustrating.. do i need to re-install windows XPE do you
> : : think?
> : :
> : : How do i access user account settings to ensure access permissions are
> : : setup correctly etc.?
> : :
> : :
> : : Best regards
> : : Darren Logan BSc(Hons)
> : : Development Engineer
> : : ________________________________________________________________
> : :
> : : MICHELL INSTRUMENTS LTD Tel: +44 (0)1223 434 854
> : : Nuffield Close Fax: +44 (0)1223 434 895
> : : Cambridge e-mail: darrenl@(protected)
> : : CB4 1SS, UK web: www.michell-instruments.com
> : :
> : : UKAS accredited: 0179 * BS EN ISO9001:2000 registered: Q6284 *
> : : Member BCAS * Investor in People
> : :
> : : --------------------------------- Dew point specialists ------------
> : : ---------------------
> : :
> : : This communication contains information which is confidential and may
> : also
> : : be privileged. It
> : : is for the exclusive use of the intended recipient(s). If you are not
> : the
> : : intended recipient(s),
> : : please note that any distribution, copying or use of this
> communication
> : or
> : : the information in
> : : it is strictly prohibited. If you have received this communication in
> : : error, please notify the
> : : sender immediately and then destroy any copies of it.
> : :
> : :
> : :
> : :
> : :
> : : Need SQL Advice? http://sqladvice.com
> : : Need RegEx Advice? http://regexadvice.com
> : : Need XML Advice? http://xmladvice.com
> :
> : Need SQL Advice? http://sqladvice.com
> : Need RegEx Advice? http://regexadvice.com
> : Need XML Advice? http://xmladvice.com
> :
> :
> : Need SQL Advice? http://sqladvice.com
> : Need RegEx Advice? http://regexadvice.com
> : Need XML Advice? http://xmladvice.com
>
> Need SQL Advice? http://sqladvice.com
> Need RegEx Advice? http://regexadvice.com
> Need XML Advice? http://xmladvice.com
>
>
>
> Need SQL Advice? http://sqladvice.com
> Need RegEx Advice? http://regexadvice.com
> Need XML Advice? http://xmladvice.com
>
>
> Need SQL Advice? http://sqladvice.com
> Need RegEx Advice? http://regexadvice.com
> Need XML Advice? http://xmladvice.com
>
Need SQL Advice? http://sqladvice.com
Need RegEx Advice? http://regexadvice.com
Need XML Advice? http://xmladvice.com
|
|
