Security :: .aspx Files Being Accessed By Wrong Account?
Jul 14, 2010
Have I done something wrong ?I am running a web-site with simple .aspx files on a standalone workgroup Windows Server 2008 called 'Max'.I had assumed that the .aspx files were accessed by the 'Network Service' account.The application pool for the website is running with 'Network Service' as the process account.I was puzzled, since 'Network Service' had no permission on these .aspx files, and I coudln't understand how these files were being accessed at the file level.So I added event level auditing to the files, and I was suprised to learn that the .aspx files were being accessed by an account called Max$ (ie the computer account).Is this correct ?Why is the Network Service account not being used ??
View 11 Replies
Similar Messages:
Aug 2, 2010
I run a simple .aspx website on a Windows Server 2008 machine.There is no impersonation, and System.Security.Principal.WindowsIdentity.GetCurrent().Name returns NT AUTHORITYNETWORK SERVICE, which it the account which the application pool runs.I tried to test the security of the application and server by removing file permissions to the .aspx files. I was greatly worried when the website continued to run without problem (it should not have been able to read the .aspx files).By turning on file level auditing, I discovered that the .aspx files were being read by the machine$ account (if the machine is called Serv1, then the files would be read by the Serv1$ account, which seems to have access to all files on the local machine).Is this a security breach or is this behaviour by design ?
View 4 Replies
Jan 25, 2010
Is there a way how I can check programmatically which user is used when my application accesses resources?
I have a production system which only our admin can access. Sometimes it is not clear what part of the system is wrong: Lets say when logging is not working. It is always possible that the web.config is wrong, but sometimes the directory is not accessible. It would make my life easier if I could be sure, that the user is used, that I expected.
View 1 Replies
Dec 8, 2010
I need an idea please, i have the task of disabling the Domain Administrator account, but we have a very messed up AC and im practilly new employee here. The administrator account has been used on several services, servers, print servers, etc. Across the network and sites. All our intersite communication is perfect.So what i want is a way to know in which devices this account is configured.Is there a way or tool, where i can input the account, and the output should be a list of servers, ip adresses or devices where the account is configured?
View 1 Replies
Dec 5, 2010
i have the following problem: i work in web application and only today. any control i put on the page, when trying to access it from behind code. it doesn't appear at all. what are the probabilities and reasons for this problem. note:i work from a thin client. they make some maintenance on their server today. and after that i find this problem.
the previous controls on my page can be accessed normally with out any problems.
View 4 Replies
Feb 17, 2010
I'm verifying e-mail address using WebMethods, however, I'm getting a 404 not found (error console) saying that it can't find activities.aspx.aspx. I am using URL-Rewriting, but I tried adding a detect for 'activities.aspx.aspx' and redirect back to .activities.aspx' but it didn't do anything.
Here is the error:
[code]....
View 3 Replies
Aug 1, 2010
I have a weird thing happening. I have two identical databases installed on one virtual machine but under two different instances of SQLServer. For some reason, periodically when saving from one it will save to the other instead. Using debug, I have verified that the connection string is correct and when the item saves, it still saves to the wrong database.I use session variable, and am of the belief that it might have something to do with it...and t hat when I go from one to the other it is still getting the connection string form the other for some reason.To make sure that it isn't a problem, I make sure that I completely close out one database before opening the other in a new IE window.I assume that when I completely close out an internet explorer window that it abandons all session states. Is that true?
View 7 Replies
Jul 13, 2010
I want to know how can I load my files (file1.aspx and file1.aspx.vb) in a container on my index.aspx. My index should have my menu and my container. My problem is that i don't know how do that... options wich i tried:
Iframes: yes work it... but in html 5 iframe will dissapear...
MasterPage: isn't the solution because this refresh all index page.
Ajax: yes.. charge my File1.aspx in the container but i can't call the functions of File1.aspx.vb...
View 2 Replies
Apr 15, 2010
I've inherited a bunch of code that has server script inside of .htm files.
On IIS, a handler mapping pumps.Htm pages though the asp.net engine.
Unfortunately, visual studio doesn't notice that they should be treated as code.
Is there any way to make VS treat .Htm files as code/aspx files?
View 3 Replies
Jun 28, 2010
I upgraded my site from asp to asp.net.This means that all of my previous asp files became obsolete.I don't want to lose my Google Ranking of the old pages.
What is the proper way to redirect?I tried to catch all of the old asp pages is my 404 and then to:
if Request.QueryString("aspxerrorpath").contains("index.asp") = true then
Response.Status = "301 Moved Permanently"
Response.AddHeader("Location", "http://www.domain.com/index.aspx")
Response.Redirect("/index.aspx")
end if
but it doesn't catch asp pages, only aspx.
View 3 Replies
Nov 9, 2010
I have a designer working on several pages in Dreamweaver. The designer is creating .aspx files with the Page directive at the top. These are getting shipped to me and I'm adding them to the Visual Studio ASP.NET WebForms Web Application Project. The problem is that there's no code-behind file by default, and I'm trying to find a shortcut to have them autogenerated as if I've added a fresh page from Visual Studio.
View 3 Replies
Feb 28, 2011
If we are deploying ASP.NET web application, Do we need to copy both *.aspx and *.aspx.cs files on the server?Also what if I am using different framework version? I mean 1.1 / 2.0 /3.0 /3.5 /4.0? What will be the answer in different .NET Framework versions?
View 5 Replies
Jul 1, 2010
I need to change the encoding from Western European... to Unicode... for every file in the project. I do not want to have to check out, open, change encoding, save and check-in every file, is there a faster way?
VS2008 + TFS 2008
View 2 Replies
Jan 20, 2010
I am trying to deploy Dundas charts in .aspx to my Godaddy hosting account, but they are not showing up. The Dundas support team said I need to do the following:
If you are not using BinaryStreaming, the ASPNET user must have enough rights to write temporary images on the server's Hard drive.If using Windows 2003, the IIS_WPG user requires Write and Modify permissions.
However, of course the Godaddy support team told me I need a dedicated server to do those things. We are on a tight budget and I have to work with what I have now.
View 4 Replies
Sep 9, 2010
I have a log in control that has this set in the aspx:
View 2 Replies
Aug 1, 2010
I have a very weird thing happening. I have two databases that have exactly the same tables but different database names on the same virtual machine, but in different instances of SQL Server. For some reason, when using one of them, it will save to the other. In debug, looking at my connection string..I have verified that it is correct, yet when I allow the save, I look in the table and it isn't there, it is in the other database that is in a table with a completely different name and in a different instance of SQL Server.
View 1 Replies
Mar 4, 2010
i use the CreateUserWizard in order to create users. Asp.net generates automatically a password which is sent to the user by email.
The emailaddress must be like this: firstname.name@ourdomain.be . If 'firstname.name' doesn't exist in our Exchange server ('ourdomain.be'), then:
1) the user is still created
2) the message page with: 'Mailbox unavailable. The server response was: 5.1.1 User unknown' appears
E.g: if user John Wayne introduces by error Jhn.Wayne@ourdomain.be , then this user must not be created, and only a simple Alert-message must appear.
I tried a lot of Try / Catch / Endtry but all my attempts fail: the user is always created and the whole message page appears. I also tried with CreateUserWizard1_SendMailError sub.1
Here the aspx file:
[Code]....
View 3 Replies
May 20, 2010
How to lock the user with the 3 times entering the wrong password?
View 10 Replies
Feb 18, 2011
I use password recovery control for testing purposes. Passwords are stored in the database as hashed format.
Control can successfully send email to user but password always wrong. whats wrong here?
[Code]....
View 2 Replies
Feb 18, 2011
After deploying our web application, one of the user was not able to login to the application. After checking, we could realize that his system date was worng, It was a greater than current date. If the system data was less than the current date we can still login. We are using asp.net membership
View 2 Replies
Nov 30, 2010
I was/am struggling with security for my first MVC applicaiton. It worked out great for me, but not for my users. I wanted to use Windows Authentication (and I seem to have that working). But when I was still trying to implement it, I was on one of our users computers where they were logged in. I navigated to the main Index page and used the supplied MVC login link and *MY* credentials. So now every time that user navigates to that page, it logs her in as me. We are using IE8, I have deleted all the cookies, passwords, forms information I can fine through Tools|Internet Options|Tool|Content|AutoComplete.
View 6 Replies
Apr 20, 2010
<siteMapNode roles="*"> <siteMapNode url="~/Default.aspx" title=" Main" description="Main" roles="*"/> <siteMapNode url="~/Items.aspx" title=" Adv" description="Adv" roles="Administrator"/>....
any user can see Adv page. That is a trouble and a qustion : why and how to hide out of role sitenodes.
little addition : <siteMapNode roles="*"> appears to all nodes If I don't do roles="*" on main node, all users can't see Main node ... And I SiteMapDataSource works only if there 1 node
View 2 Replies
Jan 16, 2011
Is it possible to SUSPEND a user account? I want to do an application in which the admin retrieves a list of all the user accounts in the database, and select a particular one to suspend it. And, that suspended account would not be able to log in to the application?
View 4 Replies
May 30, 2010
I have used membership provider to implement my system. The system administrator can list the users. What I want to do is, administrator should be able to sign-in as the selected user. I can sign out administrator by FormsAuthentication.Signout but how can I sign in as the selected user? Passwords are hashed so I can not retrieve the passwords.
View 5 Replies
Mar 2, 2010
I'm using membership provider (SQL) in my application. How do I set to de-activate user account automatically after a period not being used by the users?
View 4 Replies
