Imaging SQL 7

I am almost embarrassed to post this, but I have an NT4 sp6 machine running
SQL 7. the machine is as old as the software and I am concerned at some
point I will not be able to recover this machine. The reason for this is
that the application that uses SQL is an old legacy application that will be
replaced with in the next year, but it is not supported any longer, and no
one has any idea how to reinstall it, this was done before my time. Any ways
it is a critical reporting tool and is used daily. I was hoping that someone
out there knows of a way that I could image the server and restore the image
to a diffrent hardware, or even to a virtual machine. Most everything that I
have looked at supports imaging NT4 but not restoring the image to diffrent
hardware, or to a virtual machine. I am posting this hoping someone else may
have found a solutionYou are trying to relocate the SQL Server or the entire application? If it's
just SQL server, you can install 7.0 on a new server, and deatch and attach
the databases.
But I think you should try put it into virtual machine; we did for few older
servers. I can't personally say of issues because just SQL Server guy, but
nothing went horribly wrong for us.
--
Mohit K. Gupta
B.Sc. CS, Minor Japanese
MCTS: SQL Server 2005
"Schuml" wrote:
> I am almost embarrassed to post this, but I have an NT4 sp6 machine running
> SQL 7. the machine is as old as the software and I am concerned at some
> point I will not be able to recover this machine. The reason for this is
> that the application that uses SQL is an old legacy application that will be
> replaced with in the next year, but it is not supported any longer, and no
> one has any idea how to reinstall it, this was done before my time. Any ways
> it is a critical reporting tool and is used daily. I was hoping that someone
> out there knows of a way that I could image the server and restore the image
> to a diffrent hardware, or even to a virtual machine. Most everything that I
> have looked at supports imaging NT4 but not restoring the image to diffrent
> hardware, or to a virtual machine. I am posting this hoping someone else may
> have found a solution|||Just found this ...
http://search.techrepublic.com.com/search/Microsoft+Virtual+Server+and+Microsoft+Windows+NT+4.0.html
Might find it interseting for yaa. Thanks!
--
Mohit K. Gupta
B.Sc. CS, Minor Japanese
MCTS: SQL Server 2005
"Schuml" wrote:
> I am almost embarrassed to post this, but I have an NT4 sp6 machine running
> SQL 7. the machine is as old as the software and I am concerned at some
> point I will not be able to recover this machine. The reason for this is
> that the application that uses SQL is an old legacy application that will be
> replaced with in the next year, but it is not supported any longer, and no
> one has any idea how to reinstall it, this was done before my time. Any ways
> it is a critical reporting tool and is used daily. I was hoping that someone
> out there knows of a way that I could image the server and restore the image
> to a diffrent hardware, or even to a virtual machine. Most everything that I
> have looked at supports imaging NT4 but not restoring the image to diffrent
> hardware, or to a virtual machine. I am posting this hoping someone else may
> have found a solution|||Very good Information I think the Virtual route is the way to go, I thought
about the just moving the data, but the unfortunate thing is no one knows how
to load the application thats the sticky part but it sounds like the VSMT
with virtual server is the way to go I will pursue that route.|||Minding firing me a mail when you do this ;-). Our server ops don't tell me
anything, I get the like DBA and ServerOps don't mix >,<. I wish you best
of luck ;-).
--
Mohit K. Gupta
B.Sc. CS, Minor Japanese
MCTS: SQL Server 2005
"Schuml" wrote:
> Very good Information I think the Virtual route is the way to go, I thought
> about the just moving the data, but the unfortunate thing is no one knows how
> to load the application thats the sticky part but it sounds like the VSMT
> with virtual server is the way to go I will pursue that route.
>

Images aren't being displayed in deployed Reports

Hi everybody,

When I develop and run (preview) a report in my machine (Vs.net 2003), the report is displayed correctly, including images.

But, when I deploy the report to the server (Win2k Server), the report runs OK, but the images are not displayed!

I've already tried everything I found in the internet about this problem .... changed the way of put the image in the report (Embedded, External), tried an image with only RGB colors, changed the account for unattended execution (rsconfig) .... but nothing worked!!!

Does anybody have any idea about what might be happening?

Thanks a lot!!Make sure cookies are enabled in your browser. Images rely on sessions and sessions rely on cookies.

To better diagnose this you can right click on the missing image icon right after rendering report, go to properties and copy link for the image. Make sure you copy the entire link. Then paste it in the address bar of the same window that displays report. You'll see better error message.|||Yes, cookies are enabled.

Actually, view the properties of the image was the first step I took ...

The image link:
http://server/ReportServer?%2fOpexReports%2fReport1&rs%3aFormat=HTML4.0&rs%3aImageID=6b02dc52-73b7-489e-8dfe-730e6d9bfd6b

when I copy the link in IE, I get this error:

Reporting Services Error

---

The stream cannot be found. The stream identifier that is provided to an operation cannot be located in the report server database. (rsStreamNotFound) Get Online Help|||I SOLVED THE PROBLEM!!

I discovered that images in report rendering rely on session and cookies.
When you have and underscore "_" in the server name, this may cause some session problems.

So I update the field UseSessionCookies to 'False' in the ConfigurationInfo table, in the RS Database. The images are now displayed!

Regards!|||

Hi Rodrigo,

I am also facing the problem similar to your problem. I have followed your approach for solution, but unfortunately i am not able to get the solution.

Can you please provide me some approach for solving this problem

Regards,

Vikas Khandpur

|||

Just change the IP address to the computer name and it will work

Images aren't being displayed in deployed Reports

Hi everybody,

When I develop and run (preview) a report in my machine (Vs.net 2003), the report is displayed correctly, including images.

But, when I deploy the report to the server (Win2k Server), the report runs OK, but the images are not displayed!

I've already tried everything I found in the internet about this problem .... changed the way of put the image in the report (Embedded, External), tried an image with only RGB colors, changed the account for unattended execution (rsconfig) .... but nothing worked!!!

Does anybody have any idea about what might be happening?

Thanks a lot!!Make sure cookies are enabled in your browser. Images rely on sessions and sessions rely on cookies.

To better diagnose this you can right click on the missing image icon right after rendering report, go to properties and copy link for the image. Make sure you copy the entire link. Then paste it in the address bar of the same window that displays report. You'll see better error message.|||Yes, cookies are enabled.

Actually, view the properties of the image was the first step I took ...

The image link:
http://server/ReportServer?%2fOpexReports%2fReport1&rs%3aFormat=HTML4.0&rs%3aImageID=6b02dc52-73b7-489e-8dfe-730e6d9bfd6b

when I copy the link in IE, I get this error:

Reporting Services Error

---

The stream cannot be found. The stream identifier that is provided to an operation cannot be located in the report server database. (rsStreamNotFound) Get Online Help|||I SOLVED THE PROBLEM!!

I discovered that images in report rendering rely on session and cookies.
When you have and underscore "_" in the server name, this may cause some session problems.

So I update the field UseSessionCookies to 'False' in the ConfigurationInfo table, in the RS Database. The images are now displayed!

Regards!|||

Hi Rodrigo,

I am also facing the problem similar to your problem. I have followed your approach for solution, but unfortunately i am not able to get the solution.

Can you please provide me some approach for solving this problem

Regards,

Vikas Khandpur

|||

Just change the IP address to the computer name and it will work

Images aren't being displayed in deployed Reports

Hi everybody,

When I develop and run (preview) a report in my machine (Vs.net 2003), the report is displayed correctly, including images.

But, when I deploy the report to the server (Win2k Server), the report runs OK, but the images are not displayed!

I've already tried everything I found in the internet about this problem .... changed the way of put the image in the report (Embedded, External), tried an image with only RGB colors, changed the account for unattended execution (rsconfig) .... but nothing worked!!!

Does anybody have any idea about what might be happening?

Thanks a lot!!Make sure cookies are enabled in your browser. Images rely on sessions and sessions rely on cookies.

To better diagnose this you can right click on the missing image icon right after rendering report, go to properties and copy link for the image. Make sure you copy the entire link. Then paste it in the address bar of the same window that displays report. You'll see better error message.|||Yes, cookies are enabled.

Actually, view the properties of the image was the first step I took ...

The image link:
http://server/ReportServer?%2fOpexReports%2fReport1&rs%3aFormat=HTML4.0&rs%3aImageID=6b02dc52-73b7-489e-8dfe-730e6d9bfd6b

when I copy the link in IE, I get this error:

Reporting Services Error

---

The stream cannot be found. The stream identifier that is provided to an operation cannot be located in the report server database. (rsStreamNotFound) Get Online Help|||I SOLVED THE PROBLEM!!

I discovered that images in report rendering rely on session and cookies.
When you have and underscore "_" in the server name, this may cause some session problems.

So I update the field UseSessionCookies to 'False' in the ConfigurationInfo table, in the RS Database. The images are now displayed!

Regards!|||

Hi Rodrigo,

I am also facing the problem similar to your problem. I have followed your approach for solution, but unfortunately i am not able to get the solution.

Can you please provide me some approach for solving this problem

Regards,

Vikas Khandpur

|||

Just change the IP address to the computer name and it will work

I'm not sure why this one fails,

I used the following SQL to extract data from our Firms emplyee database and
creates a text file that gets imported into our copy machine controllers.
Output lines look like this:
A|U|4111|MPLS, PBMS|01|0||
A|U|4222|RIC, PBMS|06|0||
A|U|2036|user, name|01|0|N|1234562|
The last number is the last 7 of the persons corporate VISA card. On SQL
2000 this SQL worked:
select 'A|U|' +
RTRIM(EMPLOYEE_CODE) + '|'
+ RTRIM(EMPLOYEE_NAME) + '|'
+ rtrim(offc) + '|0|' +
case position
when 'partner' then 'P'
else 'N'
end
+ '|' , _visano , '|'
from HBM_PERSNL
where INACTIVE = 'N'
and EMPLOYEE_NAME NOT like '%CMS%'
and EMPLOYEE_NAME NOT Like '%billing%'
and EMPLOYEE_NAME NOT Like '%temp%'
On SQL 2005 it doesn't: The sql runs but only delivers those with that
VISA Numeber, where it use to give you both those with and without cards.
Any Ideas?When you don't have a credit card number, are you storing a NULL instead?
Are you getting any errors? How are you creating the file?
--
HTH,
Vyas, MVP (SQL Server)
SQL Server Articles and Code Samples @. http://vyaskn.tripod.com/
"Jay Bukstein" <JayBukstein@.discussions.microsoft.com> wrote in message
news:697B4582-6D4F-47BD-B5DF-F1AD95422D0C@.microsoft.com...
I used the following SQL to extract data from our Firms emplyee database and
creates a text file that gets imported into our copy machine controllers.
Output lines look like this:
A|U|4111|MPLS, PBMS|01|0||
A|U|4222|RIC, PBMS|06|0||
A|U|2036|user, name|01|0|N|1234562|
The last number is the last 7 of the persons corporate VISA card. On SQL
2000 this SQL worked:
select 'A|U|' +
RTRIM(EMPLOYEE_CODE) + '|'
+ RTRIM(EMPLOYEE_NAME) + '|'
+ rtrim(offc) + '|0|' +
case position
when 'partner' then 'P'
else 'N'
end
+ '|' , _visano , '|'
from HBM_PERSNL
where INACTIVE = 'N'
and EMPLOYEE_NAME NOT like '%CMS%'
and EMPLOYEE_NAME NOT Like '%billing%'
and EMPLOYEE_NAME NOT Like '%temp%'
On SQL 2005 it doesn't: The sql runs but only delivers those with that
VISA Numeber, where it use to give you both those with and without cards.
Any Ideas?|||Hi Jay
a quick question, is _visano a column in the HBM_PERSNL table?
I noticed that at the end of the query you are using a comma instead of + to
concat the string, should the query be:
select 'A|U|' +
RTRIM(EMPLOYEE_CODE) + '|'
+ RTRIM(EMPLOYEE_NAME) + '|'
+ rtrim(offc) + '|0|' +
case position
when 'partner' then 'P'
else 'N'
end
+ '|' + _visano + '|'
from HBM_PERSNL
where INACTIVE = 'N'
and EMPLOYEE_NAME NOT like '%CMS%'
and EMPLOYEE_NAME NOT Like '%billing%'
and EMPLOYEE_NAME NOT Like '%temp%'
Lucas
"Jay Bukstein" wrote:

> I used the following SQL to extract data from our Firms emplyee database a
nd
> creates a text file that gets imported into our copy machine controllers.
> Output lines look like this:
> A|U|4111|MPLS, PBMS|01|0||
> A|U|4222|RIC, PBMS|06|0||
> A|U|2036|user, name|01|0|N|1234562|
> The last number is the last 7 of the persons corporate VISA card. On SQL
> 2000 this SQL worked:
> select 'A|U|' +
> RTRIM(EMPLOYEE_CODE) + '|'
> + RTRIM(EMPLOYEE_NAME) + '|'
> + rtrim(offc) + '|0|' +
> case position
> when 'partner' then 'P'
> else 'N'
> end
> + '|' , _visano , '|'
> from HBM_PERSNL
> where INACTIVE = 'N'
> and EMPLOYEE_NAME NOT like '%CMS%'
> and EMPLOYEE_NAME NOT Like '%billing%'
> and EMPLOYEE_NAME NOT Like '%temp%'
> On SQL 2005 it doesn't: The sql runs but only delivers those with that
> VISA Numeber, where it use to give you both those with and without cards.
> Any Ideas?
>|||Sounds like your server or session defaults on '05 yield null on
concatenation; i.e., select 'a' + NULL yields NULL whereas on 2000 select
'a' + NULL yields 'a'.
Suggest to modify the query to
....
'|' + ISNULL(_visano, '') + '|'
...
In fact, this is a good practice for any columns that allow null. That way
changes to server or session settings always yield the same results.
"Jay Bukstein" <JayBukstein@.discussions.microsoft.com> wrote in message
news:697B4582-6D4F-47BD-B5DF-F1AD95422D0C@.microsoft.com...
>I used the following SQL to extract data from our Firms emplyee database
>and
> creates a text file that gets imported into our copy machine controllers.
> Output lines look like this:
> A|U|4111|MPLS, PBMS|01|0||
> A|U|4222|RIC, PBMS|06|0||
> A|U|2036|user, name|01|0|N|1234562|
> The last number is the last 7 of the persons corporate VISA card. On SQL
> 2000 this SQL worked:
> select 'A|U|' +
> RTRIM(EMPLOYEE_CODE) + '|'
> + RTRIM(EMPLOYEE_NAME) + '|'
> + rtrim(offc) + '|0|' +
> case position
> when 'partner' then 'P'
> else 'N'
> end
> + '|' , _visano , '|'
> from HBM_PERSNL
> where INACTIVE = 'N'
> and EMPLOYEE_NAME NOT like '%CMS%'
> and EMPLOYEE_NAME NOT Like '%billing%'
> and EMPLOYEE_NAME NOT Like '%temp%'
> On SQL 2005 it doesn't: The sql runs but only delivers those with that
> VISA Numeber, where it use to give you both those with and without cards.
> Any Ideas?
>

IIS6 connect to sql server on another machine w/windows authentication

Can someone point me at an article that tells how to allow theASP.net worker process to connect, via windows authentication, to aremote sql server instance ?

Start with:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/PAGHT000008.asp

The remote server access is in the connection string, specifying server and instance.

Jeff

|||

Also make sure remote connections enabled on the remote SQL instnace. Check this KB:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;914277

IIS Virtual Server for SQLServer ... not authorised to view

I'm sorry if this q has already been answered, however after looking through
the posts I cannot find a resolution.
I have a W2K Pro Machine installed with IIS and SQLServer 2K (let's call
this Dev1)
I have a XP Pro Machine installed with IIS and SQLServer 2K (let's call this
Dev2)
Dev1 is used for day to day development. I have several SQL scripts to set
up a database, whereby I create a databse, 2 (two) SQL user accounts, some
Views, several stored procedures, and populate with some initial data. -No
problems so far.
I use the "Configure SQL XML Support in IIS" menu option and I do just that,
i.e. I set up a VDir with a sub directory for my templates (xml files) which
contain stuff for calling the stored procedures formatting the returned data
etc. I configure the VDir security method to use one of the SQL user accounts
that I have created in my SQL script. Using my IE browser, I navigate to the
templates dir and retrieve the data as expected.-No problems so far.
Now, I want to take this stuff and show to a client, so I want to install it
on my laptop (Dev2). I follow the exact same routine as for Dev1, however
when I come to view the data in my browser, I get
HTTP 401.1 Unauthorized: Logon Failed
I cannot for the life of me figure out the difference. As far as I can tell,
everything is the same except for Dev2 has XP Pro and Dev1 has 2K Pro.
Can somebody please help me out with this ... and tell me what other info
you need to know.
Thanks in advance.
Hmmm...You have ensured that Dev2 allows Sql Logins and not just windows,
correct? And that the account is properly set up with permission on the
right database, tables, etc?
Thanks,
Irwin
Irwin Dolobowsky
Program Manager, SqlXml
http://blogs.msdn.com/irwando
This posting is provided "AS IS" with no warranties, and confers no rights.
"billr" <billr@.discussions.microsoft.com> wrote in message
news:B784272C-D070-4C8A-89F4-4CB64072D710@.microsoft.com...
> I'm sorry if this q has already been answered, however after looking
> through
> the posts I cannot find a resolution.
> I have a W2K Pro Machine installed with IIS and SQLServer 2K (let's call
> this Dev1)
> I have a XP Pro Machine installed with IIS and SQLServer 2K (let's call
> this
> Dev2)
> Dev1 is used for day to day development. I have several SQL scripts to set
> up a database, whereby I create a databse, 2 (two) SQL user accounts, some
> Views, several stored procedures, and populate with some initial data. -No
> problems so far.
> I use the "Configure SQL XML Support in IIS" menu option and I do just
> that,
> i.e. I set up a VDir with a sub directory for my templates (xml files)
> which
> contain stuff for calling the stored procedures formatting the returned
> data
> etc. I configure the VDir security method to use one of the SQL user
> accounts
> that I have created in my SQL script. Using my IE browser, I navigate to
> the
> templates dir and retrieve the data as expected.-No problems so far.
> Now, I want to take this stuff and show to a client, so I want to install
> it
> on my laptop (Dev2). I follow the exact same routine as for Dev1, however
> when I come to view the data in my browser, I get
> HTTP 401.1 Unauthorized: Logon Failed
> I cannot for the life of me figure out the difference. As far as I can
> tell,
> everything is the same except for Dev2 has XP Pro and Dev1 has 2K Pro.
> Can somebody please help me out with this ... and tell me what other info
> you need to know.
> Thanks in advance.
>
|||Yes, I have,
I use exactly the same sql script to create the user accounts and the
database,
SQLaccount1 owns all stored procedures, views and tables
SQLaccoutn2 is granted executable permissions on the relevant stored procs
When I create the vdir I select to use SQL Server login details, and I enter
the details for SQLaccount2. Then I can select the database from the list in
the IIS configuration tool so I know it is not a problem with SQL
authentication.
If I inspect the virtual dir using the IIS snapin, on both machines the
details are exactly the same ... I select the DirectorySecurity tab and
select the Anonymous access and authentication button, and in the dialog that
pops up I can see that Anonymous access is enabled, the username text box is
empty and the option to Allow IIS to control passwword is selected.
"Irwin Dolobowsky [MS]" wrote:

> Hmmm...You have ensured that Dev2 allows Sql Logins and not just windows,
> correct? And that the account is properly set up with permission on the
> right database, tables, etc?
> --
> Thanks,
> Irwin
> Irwin Dolobowsky
> Program Manager, SqlXml
> http://blogs.msdn.com/irwando
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "billr" <billr@.discussions.microsoft.com> wrote in message
> news:B784272C-D070-4C8A-89F4-4CB64072D710@.microsoft.com...
>
>

IIS issue

I just installed IIS on my windows xp pro machine and when I try to access a
website on the local IIS server, I get the following error message:

"You are not authorized to view this page"

I have enabled "Anonymous access" inside Directory Security option of IIS
and I also granted full NTFS permissions to all users so that the IIS root
directory is readily accessible. However, I am still not able to access any
website that resides on the localhost.

Please help.

Thanks.
JessIs this a SQL Server question?

IIS and SQL server securities

Dear all experts,
We have an ASP application previously deployed on machine A, where the web
server (W2K-IIS) and database server (SQLServer 7.0) are installed. When we
try to move the database server to machine B, the ASP application threw an
exception when it tries to connect to the remote database:
Login failed for user 'XXX'. Reason: Not associated with a trusted SQL
server connection.
Both machine A and B do not belong to any domain (but are of the same
workgroup, same subnet.) We googled for it and found some websites suggest
that the SQL Server should be configured to use Windows _AND_ SQL
authentication. However this has no effect since it is already the default
of SQL Server 7.0. Some websites also suggest to use several combinations of
system user account and SQL server user accounts but it didn't solve the
problem either.
Finally, we seem to have found a workable solution. We changed the anonymous
user proxy account (previously IUSR_XXX) in IIS to a sytem user who is in
the local Administrators group and the ASP application works! I know that's
likely not the right way to solve the problem as it would make everyone to
use the Administrators role to execute the ASP application.
So my question is, how should we configure the servers so that the IIS (with
IUSR_XXX role) can talk with the remote SQL Server (with pure
username/password authentication)? How can we completely disable Windows
authentication and access controls?
Thank you very much,
KennethThis article has your solution.
253500 PRB: "Client Unable to Establish Connection" Error Message When
http://support.microsoft.com/?id=253500
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.

IIS and SQL Server on separate machine

Hi,
Can anybody please help me how to set up a conncetion between IIS & SQL
Server on seperate machine.
1. Domain is same
2. I've tried as per the article 176380, but we are facing some problem on
IIS. So my Network manager said I need to try something else.
Please let me know the steps that I have to do.
Thanks in Advance.
Kavi
"Kavi" <Kavi@.discussions.microsoft.com> wrote in message
news:B3583882-BE7C-4419-8269-F8F8CA1EF44C@.microsoft.com...
> Can anybody please help me how to set up a conncetion between IIS & SQL
> Server on seperate machine.
> 1. Domain is same
> 2. I've tried as per the article 176380, but we are facing some problem on
> IIS. So my Network manager said I need to try something else.
What's the problem? And, what have you tried so far? More detail helps!
Steve
|||Hi Steve,
OK the following steps I've done.
1. Created a user account on the Domain Controller called
IUSR_MY_WEB.
2. Added this user account to the Guest Group of both SQL
Server & the IIS Machine.
3. On the computer where IIS is running the aninymous
login, the user name is set up as IUSR_MY_WEB
OK, the following step, I don't understand (What the
article 176380 says)
"On the computer that is hosting SQL Server, use the
Security manager to map the IUSR_MY_WEB account to an
existing user logon on SQL Server. For more Info on how
to do this, consult the SQL Server Documentation"
I tried to find more info from the Documentation & I'm
not successful.
What I did was I created a USER LOGIN in SQL Server as
DOMAIN\IUSR_MY_WEB.
In the ASP Program, I've used the OLE-DB Provider as
follows:
Dim oConn: Set oConn=Server.CreateObject
("ADODB.Connection")
'oConn.Open "Driver={SQL
Server};Server=SQLSERVERMACHINENAME;Network=DBMSSO CN;Datab
ase=MYDBASE;Uid=DOMAIN\IUSR_MY_WEB;Pwd="
Even I tried with IP address also.
Hope this info will gives you a clear picture, what am I
doing wrong?
Thanks.
>--Original Message--
>"Kavi" <Kavi@.discussions.microsoft.com> wrote in message
>news:B3583882-BE7C-4419-8269-
F8F8CA1EF44C@.microsoft.com...[vbcol=seagreen]
between IIS & SQL[vbcol=seagreen]
facing some problem on[vbcol=seagreen]
something else.
>What's the problem? And, what have you tried so far?
More detail helps!
>Steve
>
>.
>

IIS and DB server on different domain.

Hi,

I have a IIS server on "A" Domain. My application is hosted on on a machine which is under that domain.

I have a DB server, SQL server 2000 on B Domain. The server is a named instance of SQL Server 2000. I have a default SQL Server 7.0 on that same machine.

For the application i am trying to connect from the IIS to database server, but i am unable to connect to the named instance, but i can connect to the default 7.0 instance.

The connection string used for the application is as follows:
oConn.open "Driver={SQL
Server};Server=server_name\instance_name;Database= db_name;uid=user_name;pwd=password;"

I am getting SQL Server does not exists error messege on page...

Please help, me if any one knows how to connect to the database server which is on different domain and is a named instance using the connection string in ASP page..

Please help, this is urgent.

Regards
JayEnsure both the domains are trusted.

And try to connect to the named instance using TCP/IP as default protocol on SQL. Also the user connects from IIS must have necessary privilege to access SQL server/database.

http://www.asp101.com/articles/john/connstring/default.asp - for information.|||Hi Satya,

Can you please elaborate what do you mean by "trust between the domains"

And how do you ensure that i connect to the SQL server through TCP\IP protocol in SQL.

Also what security of necessary privileges needs to be given from IIS to the SQL Server/database.

Originally posted by Satya
Ensure both the domains are trusted.

And try to connect to the named instance using TCP/IP as default protocol on SQL. Also the user connects from IIS must have necessary privilege to access SQL server/database.

http://www.asp101.com/articles/john/connstring/default.asp - for information.|||If the both servers (IIS & SQL) are in different domains then ensure the trust between domains is enabled. Like you can check by mapping a drive on IIS server from SQL server, if not take help of Network Admin for more details.

ON the SQL Server from Server network utility enable TCP/IP protocol and set it as default. As by default it will be used from IIS too.

Refer to this KBA (http://support.microsoft.com/default.aspx?scid=kb;EN-US;176378) &
Winnet Mag (http://www.winnetmag.com/Article/ArticleID/23035/Windows_23035.html) for more details on security
Originally posted by jaybmehta

Can you please elaborate what do you mean by "trust between the domains"

And how do you ensure that i connect to the SQL server through TCP\IP protocol in SQL.

Also what security of necessary privileges needs to be given from IIS to the SQL Server/database.|||Hi Satya,

I have made the domains trusting with the help of Network Admin guys.
Also i have made the protocol to TCP\IP and thats the only protol enabled for that instance, so it will be default. As i was not getting the setting to make it as defualt in Sever Network Utility.

As per you third statement, you have said to give necessary privileges to the IIS user.. Well the connection string is having a SQL Server authentication to the database who idb_owne role ...

ANything else required by me.. let me kwn.

I mean do i need to give any directory level access for the user? to the data folder of the MSSQL .. i will be trying your option today when i reach office.

But if you can do one more favour is, if by chance you can give us the connection string as i have given in my query, it would be great...

Hope ur suggestion works.

Thnks
Jay

Originally posted by Satya
Ensure both the domains are trusted.

And try to connect to the named instance using TCP/IP as default protocol on SQL. Also the user connects from IIS must have necessary privilege to access SQL server/database.

http://www.asp101.com/articles/john/connstring/default.asp - for information.|||Hi Satya.

I tried everything.
Made the domain trusted.
Used the IP address in the connection string.
The strage thing is it is connecting to the default instance on that machine, but it is not able to recognize the named instance on that machine.
Dont knw why is that happening ?
Please let me know if there is some extra settings which needs to be put in connection string for the named instance.
I also made the SQL Server connection protolcol to TCP\IP as u suggested but it is not working.

if you know anything else, and want to know something from me, do reply to the post...

Bye
Jay|||Can u connect to the named instance locally and over the network through Query-Analyzer etc. using the username u specify in ur connection string?|||I've never had to do this before, but would you need to put the domain in the connection string? i.e.

Server=\\domain\server_name\instance_name;Database =
db_name;uid=user_name;pwd=password;"|||Originally posted by AnSQLQuery
I've never had to do this before, but would you need to put the domain in the connection string? i.e.

Server=\\domain\server_name\instance_name;Database =
db_name;uid=user_name;pwd=password;"

can you please verify if the SQL Server instance is using some different port number , instead of default ones.(1433 & 1434)|||CHeck what is the default port configured on Defulat & named instance of SQL and ensure TCP/IP is enabled also.|||Originally posted by Satya
CHeck what is the default port configured on Defulat & named instance of SQL and ensure TCP/IP is enabled also.

Hi All,

The Defualt port configured on that machine for the named instance was 1087 and i changed it to 1434 , as MS SQL 7.0 default instance is listening on port 1433. Once i have changed the port let me know whats the next thing i have to do.
Also i will try to use the domain name in the connection string as suggested.
If it works out great tomorrow in the office, just superb.
Hope it works.
Thnks for all the inputs.

Bye
Jay|||I;m not sure but you may need to refresh SQL Services to take affect of new port settings, may check books online for more information.|||Are the two domains both Windows 2000-2003 Active Directory domains, or is one an NT domain? Are they true Windows 2000+ domain enviroments? It's important to know because the Anonymous user ids are different in the domains. Are you on SQL 7 or 2000?|||Originally posted by TALAT
Can u connect to the named instance locally and over the network through Query-Analyzer etc. using the username u specify in ur connection string?

Hi
I have changed the default port settings and i am able to connect to the named SQL Server on different domain from that server in Query Analyzer.

But when i use the connection string in my ASP application it doesnt connect to the database.

Also the 2 domains are on 2000 OS, none of then is a NT domain.

Both the domains are trusted on one Windows Authentication account.

After changing the SQL server connection protocol to TCP/IP i am getting error messeges as TCP/IP Sockets, General Network Error, Check you Network documentation. Still my application is not able to connect to the named instance on that machine,

But i agian say that there isn one application which is there in the different domian and is successfully connects to the default instance on the machine which is in different domain. The strange thing is it can connect to default instance (SQL 7.0) and not the named instance (SQL 2000).

Regards
Jay

IIS 6 and Windows Authentication to SQL Server 2000

I am running a Windows Server 2003 machine as my web server. I would
like to use Windows authentication for connections to my SQL Server
2000 instance on a Windows 2000 server. I've read where mirroring the
ASPNET account and password on the web server and SQL server would
work. However, with IIS 6, ASP.NET runs under the 'NT
AUTHORITY\NETWORK SERVICE' account. Should I change the password of
the 'NT AUTHORITY\NETWORK SERVICE' account to something I know, and
create a mirrored 'NETWORK SERVICE' account on my SQL server? Or,
should I create another user like 'MY_WEB_USER' and mirror that on both
machines?
In short, how do I get Windows authentication to work between a Windows
Server 2003 web server and a Windows 2000 SQL server?
Thanks!
If you are truly using Windows Authentication, ie a user has an account on
the domain as well as SQL Server, you will do the following:
1. Ensure the user cannot sign in as anonymous
2. Add their account to a group that has SQL rights
You may mean "bastardized windows authentication", meaning SQL Server uses
WIndows Authentication, but you are using anon accounts in IIS. If you go
this route, you are advised to impersonate an account rather than give a
local account rights on another box. One way to easily do this is to place
the assembly in COM+ and declaratively assign a domain account to the
application.

Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA
***************************
Think Outside the Box!
***************************
"mcollier" wrote:

> I am running a Windows Server 2003 machine as my web server. I would
> like to use Windows authentication for connections to my SQL Server
> 2000 instance on a Windows 2000 server. I've read where mirroring the
> ASPNET account and password on the web server and SQL server would
> work. However, with IIS 6, ASP.NET runs under the 'NT
> AUTHORITY\NETWORK SERVICE' account. Should I change the password of
> the 'NT AUTHORITY\NETWORK SERVICE' account to something I know, and
> create a mirrored 'NETWORK SERVICE' account on my SQL server? Or,
> should I create another user like 'MY_WEB_USER' and mirror that on both
> machines?
> In short, how do I get Windows authentication to work between a Windows
> Server 2003 web server and a Windows 2000 SQL server?
> Thanks!
>
|||Hi,
Are both the servers in the same domain?
If so create a domain user account and switch the identity of the ASP.NET
worker process to this acccount. You can do this by creating a new
application pool in IIS6.
Now configure this acccount as a login for sql server.
Don't forget to add this user to the IIS_WPG group on your Win2K3 machine.
HTH
Vikram Vamshi
Eclipsys Corporation
"mcollier" <michaelscollier@.gmail.com> wrote in message
news:1109016547.061210.221620@.f14g2000cwb.googlegr oups.com...
>I am running a Windows Server 2003 machine as my web server. I would
> like to use Windows authentication for connections to my SQL Server
> 2000 instance on a Windows 2000 server. I've read where mirroring the
> ASPNET account and password on the web server and SQL server would
> work. However, with IIS 6, ASP.NET runs under the 'NT
> AUTHORITY\NETWORK SERVICE' account. Should I change the password of
> the 'NT AUTHORITY\NETWORK SERVICE' account to something I know, and
> create a mirrored 'NETWORK SERVICE' account on my SQL server? Or,
> should I create another user like 'MY_WEB_USER' and mirror that on both
> machines?
> In short, how do I get Windows authentication to work between a Windows
> Server 2003 web server and a Windows 2000 SQL server?
> Thanks!
>
|||Both servers are not in the same domain. I've done this before when I
had two Windows 2000 servers. Having one Windows 2003 and one Windows
2000 server seems to be somewhat more confusing.
|||What you did for WIndows 2000 should still work for Win2K3.
Create a user on both the machines with the same username and password.
Then configure the ASP.NET worker process to run under this user account on
win2k3 machine
and configure sql on win2k machine to accept this user as a valid login.
As long as the username/password are same on both the machines this should
work.
hth
Vikram Vamshi
Eclipsys Corporation
"mcollier" <michaelscollier@.gmail.com> wrote in message
news:1109041768.768522.120100@.f14g2000cwb.googlegr oups.com...
> Both servers are not in the same domain. I've done this before when I
> had two Windows 2000 servers. Having one Windows 2003 and one Windows
> 2000 server seems to be somewhat more confusing.
>
|||Ok, I think I see where you're going with this. I was thinking I could
use the ASPNET or NETWORK SERVICE account for both servers. But, that
doesn't appear to be the case. What you're saying is that I could
create a user on both servers, for example MY_WEB_USER. Then, set the
ASP.NET worker process to run as this account. I would also need to
give that user the correct permissions (similar to NETWORK SERVICE
probably). Sound about right?
|||Yep,
That is what I had in mind.
Let us know how it goes.
Thanks
Vikram Vamshi
Eclipsys Corporation
"mcollier" <michaelscollier@.gmail.com> wrote in message
news:1109125129.410024.221630@.f14g2000cwb.googlegr oups.com...
> Ok, I think I see where you're going with this. I was thinking I could
> use the ASPNET or NETWORK SERVICE account for both servers. But, that
> doesn't appear to be the case. What you're saying is that I could
> create a user on both servers, for example MY_WEB_USER. Then, set the
> ASP.NET worker process to run as this account. I would also need to
> give that user the correct permissions (similar to NETWORK SERVICE
> probably). Sound about right?
>

IIS 6 and Windows Authentication to SQL Server 2000

I am running a Windows Server 2003 machine as my web server. I would
like to use Windows authentication for connections to my SQL Server
2000 instance on a Windows 2000 server. I've read where mirroring the
ASPNET account and password on the web server and SQL server would
work. However, with IIS 6, ASP.NET runs under the 'NT
AUTHORITY\NETWORK SERVICE' account. Should I change the password of
the 'NT AUTHORITY\NETWORK SERVICE' account to something I know, and
create a mirrored 'NETWORK SERVICE' account on my SQL server? Or,
should I create another user like 'MY_WEB_USER' and mirror that on both
machines?
In short, how do I get Windows authentication to work between a Windows
Server 2003 web server and a Windows 2000 SQL server?
Thanks!If you are truly using Windows Authentication, ie a user has an account on
the domain as well as SQL Server, you will do the following:
1. Ensure the user cannot sign in as anonymous
2. Add their account to a group that has SQL rights
You may mean "bastardized windows authentication", meaning SQL Server uses
WIndows Authentication, but you are using anon accounts in IIS. If you go
this route, you are advised to impersonate an account rather than give a
local account rights on another box. One way to easily do this is to place
the assembly in COM+ and declaratively assign a domain account to the
application.
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA
***************************
Think Outside the Box!
***************************
"mcollier" wrote:

> I am running a Windows Server 2003 machine as my web server. I would
> like to use Windows authentication for connections to my SQL Server
> 2000 instance on a Windows 2000 server. I've read where mirroring the
> ASPNET account and password on the web server and SQL server would
> work. However, with IIS 6, ASP.NET runs under the 'NT
> AUTHORITY\NETWORK SERVICE' account. Should I change the password of
> the 'NT AUTHORITY\NETWORK SERVICE' account to something I know, and
> create a mirrored 'NETWORK SERVICE' account on my SQL server? Or,
> should I create another user like 'MY_WEB_USER' and mirror that on both
> machines?
> In short, how do I get Windows authentication to work between a Windows
> Server 2003 web server and a Windows 2000 SQL server?
> Thanks!
>|||Hi,
Are both the servers in the same domain?
If so create a domain user account and switch the identity of the ASP.NET
worker process to this acccount. You can do this by creating a new
application pool in IIS6.
Now configure this acccount as a login for sql server.
Don't forget to add this user to the IIS_WPG group on your Win2K3 machine.
HTH
--
Vikram Vamshi
Eclipsys Corporation
"mcollier" <michaelscollier@.gmail.com> wrote in message
news:1109016547.061210.221620@.f14g2000cwb.googlegroups.com...
>I am running a Windows Server 2003 machine as my web server. I would
> like to use Windows authentication for connections to my SQL Server
> 2000 instance on a Windows 2000 server. I've read where mirroring the
> ASPNET account and password on the web server and SQL server would
> work. However, with IIS 6, ASP.NET runs under the 'NT
> AUTHORITY\NETWORK SERVICE' account. Should I change the password of
> the 'NT AUTHORITY\NETWORK SERVICE' account to something I know, and
> create a mirrored 'NETWORK SERVICE' account on my SQL server? Or,
> should I create another user like 'MY_WEB_USER' and mirror that on both
> machines?
> In short, how do I get Windows authentication to work between a Windows
> Server 2003 web server and a Windows 2000 SQL server?
> Thanks!
>|||Both servers are not in the same domain. I've done this before when I
had two Windows 2000 servers. Having one Windows 2003 and one Windows
2000 server seems to be somewhat more confusing.|||What you did for Windows 2000 should still work for Win2K3.
Create a user on both the machines with the same username and password.
Then configure the ASP.NET worker process to run under this user account on
win2k3 machine
and configure sql on win2k machine to accept this user as a valid login.
As long as the username/password are same on both the machines this should
work.
hth
Vikram Vamshi
Eclipsys Corporation
"mcollier" <michaelscollier@.gmail.com> wrote in message
news:1109041768.768522.120100@.f14g2000cwb.googlegroups.com...
> Both servers are not in the same domain. I've done this before when I
> had two Windows 2000 servers. Having one Windows 2003 and one Windows
> 2000 server seems to be somewhat more confusing.
>|||Ok, I think I see where you're going with this. I was thinking I could
use the ASPNET or NETWORK SERVICE account for both servers. But, that
doesn't appear to be the case. What you're saying is that I could
create a user on both servers, for example MY_WEB_USER. Then, set the
ASP.NET worker process to run as this account. I would also need to
give that user the correct permissions (similar to NETWORK SERVICE
probably). Sound about right?|||Yep,
That is what I had in mind.
Let us know how it goes.
Thanks
--
Vikram Vamshi
Eclipsys Corporation
"mcollier" <michaelscollier@.gmail.com> wrote in message
news:1109125129.410024.221630@.f14g2000cwb.googlegroups.com...
> Ok, I think I see where you're going with this. I was thinking I could
> use the ASPNET or NETWORK SERVICE account for both servers. But, that
> doesn't appear to be the case. What you're saying is that I could
> create a user on both servers, for example MY_WEB_USER. Then, set the
> ASP.NET worker process to run as this account. I would also need to
> give that user the correct permissions (similar to NETWORK SERVICE
> probably). Sound about right?
>

IIS -> SQLServer on another machine

We're having some trouble setting up a two-server IIS/SQLServer
configuration on a Windows 2003 network. What we'd like to have is this:
{ANONYMOUS INTERNET WWW USERS }
:
FIREWALL (ONLY HTTP TRAFFIC ALLOWED)
:
IIS (Server1 running Win2003)
:
:
SQLServer (Server2 running Win2003)
But SQLServer on Server2 cannot "see" the IUSR_SERVER1 or the
SERVER1\ASPNET guest account. We're unable to grant SERVER1\ASPNET login:
exec sp_grantlogin 'SERVER1\ASPNET' --we get an error that this NT user or
group is not recognized. From what I've read, it seems we will need to make
Server1 "trusted for Authentication Delegation" (along with some other
things -- use TCP/IP and use Kerberos). Will making Server1 trused for
authentical delegation cause the SERVER1\ASPNET guest user to become visible
to Server2 so it can be granted Login to SQLServer? Is this trusted scenario
secure if the firewall limits traffic to HTTP only?
Thanks!Why don't you have your IIS and SQL Server on a domain and use domain
accounts?
Tom
---
Thomas A. Moreau, BSc, PhD, MCSE, MCDBA
SQL Server MVP
Columnist, SQL Server Professional
Toronto, ON Canada
www.pinnaclepublishing.com/sql
"Timo" <timo@.anonymous.com> wrote in message
news:OGVqjoOEEHA.3472@.TK2MSFTNGP09.phx.gbl...
We're having some trouble setting up a two-server IIS/SQLServer
configuration on a Windows 2003 network. What we'd like to have is this:
{ANONYMOUS INTERNET WWW USERS }
:
FIREWALL (ONLY HTTP TRAFFIC ALLOWED)
:
IIS (Server1 running Win2003)
:
:
SQLServer (Server2 running Win2003)
But SQLServer on Server2 cannot "see" the IUSR_SERVER1 or the
SERVER1\ASPNET guest account. We're unable to grant SERVER1\ASPNET login:
exec sp_grantlogin 'SERVER1\ASPNET' --we get an error that this NT user or
group is not recognized. From what I've read, it seems we will need to make
Server1 "trusted for Authentication Delegation" (along with some other
things -- use TCP/IP and use Kerberos). Will making Server1 trused for
authentical delegation cause the SERVER1\ASPNET guest user to become visible
to Server2 so it can be granted Login to SQLServer? Is this trusted scenario
secure if the firewall limits traffic to HTTP only?
Thanks!|||What is meant exactly by having IIS and SQL server "on a domain"? I'm not t
he network administrator -- we don't really have one ;-( The guy with the
most experience with setting things up has said we're using ActiveDirectory
with Windows2003 server. Our SQL server 2000 is installed on Server1. IIS
is installed on server2. The DNS names of these servers are server1.{
ourdomain}.net and server2.{ourdomain}.net. Are these servers "on a do
main"?
BTW, we have tried to substitute a named domain user for the anonymous IUSR_
SERVER2 built-in user. Although I was able to grant that user login and dbac
cess and add it to a role, the IIS app didn't work. Does changing the machin
e user for IIS require a reboot of the IIS server?
Is there any way to see traffic between IIS server and the sql server box?
Thanks for the help.
"Tom Moreau" <tom@.dont.spam.me.cips.ca> wrote in message news:%23IJPbwOEEHA.
1240@.TK2MSFTNGP10.phx.gbl...
Why don't you have your IIS and SQL Server on a domain and use domain accoun
ts?
--
Tom
---
Thomas A. Moreau, BSc, PhD, MCSE, MCDBA
SQL Server MVP
Columnist, SQL Server Professional
Toronto, ON Canada
www.pinnaclepublishing.com/sql
"Timo" <timo@.anonymous.com> wrote in message news:OGVqjoOEEHA.3472@.TK2MSFTNG
P09.phx.gbl...
We're having some trouble setting up a two-server IIS/SQLServer
configuration on a Windows 2003 network. What we'd like to have is this:
{ANONYMOUS INTERNET WWW USERS }
:
FIREWALL (ONLY HTTP TRAFFIC ALLOWED)
:
IIS (Server1 running Win2003)
:
:
SQLServer (Server2 running Win2003)
But SQLServer on Server2 cannot "see" the IUSR_SERVER1 or the
SERVER1\ASPNET guest account. We're unable to grant SERVER1\ASPNET login:
exec sp_grantlogin 'SERVER1\ASPNET' --we get an error that this NT user or
group is not recognized. From what I've read, it seems we will need to make
Server1 "trusted for Authentication Delegation" (along with some other
things -- use TCP/IP and use Kerberos). Will making Server1 trused for
authentical delegation cause the SERVER1\ASPNET guest user to become visible
to Server2 so it can be granted Login to SQLServer? Is this trusted scenario
secure if the firewall limits traffic to HTTP only?
Thanks!|||If you're using AD, then you're on a domain. Looks like you're almost there
by using a domain user for IUSR_SERVER2. You have granted that same user
access to SQL Server on Server1, as well as having granted the appropriate
access to databases and their objects. I don't have access to an IIS server
right now but I think you'd have to configure it to use the domain user
account. This would likely require stopping and starting the IIS service on
the server.
You could use Network Monitor to look at the traffic but I don't think you
need to get down to that level.
Tom
---
Thomas A. Moreau, BSc, PhD, MCSE, MCDBA
SQL Server MVP
Columnist, SQL Server Professional
Toronto, ON Canada
www.pinnaclepublishing.com/sql
"Timo" <timo@.anonymous.com> wrote in message
news:O#CEd2QEEHA.712@.tk2msftngp13.phx.gbl...
What is meant exactly by having IIS and SQL server "on a domain"? I'm not
the network administrator -- we don't really have one ;-( The guy with the
most experience with setting things up has said we're using ActiveDirectory
with Windows2003 server. Our SQL server 2000 is installed on Server1. IIS
is installed on server2. The DNS names of these servers are
server1.{ourdomain}.net and server2.{ourdomain}.net. Are these se
rvers "on
a domain"?
BTW, we have tried to substitute a named domain user for the anonymous
IUSR_SERVER2 built-in user. Although I was able to grant that user login and
dbaccess and add it to a role, the IIS app didn't work. Does changing the
machine user for IIS require a reboot of the IIS server?
Is there any way to see traffic between IIS server and the sql server box?
Thanks for the help.
"Tom Moreau" <tom@.dont.spam.me.cips.ca> wrote in message
news:%23IJPbwOEEHA.1240@.TK2MSFTNGP10.phx.gbl...
Why don't you have your IIS and SQL Server on a domain and use domain
accounts?
Tom
---
Thomas A. Moreau, BSc, PhD, MCSE, MCDBA
SQL Server MVP
Columnist, SQL Server Professional
Toronto, ON Canada
www.pinnaclepublishing.com/sql
"Timo" <timo@.anonymous.com> wrote in message
news:OGVqjoOEEHA.3472@.TK2MSFTNGP09.phx.gbl...
We're having some trouble setting up a two-server IIS/SQLServer
configuration on a Windows 2003 network. What we'd like to have is this:
{ANONYMOUS INTERNET WWW USERS }
:
FIREWALL (ONLY HTTP TRAFFIC ALLOWED)
:
IIS (Server1 running Win2003)
:
:
SQLServer (Server2 running Win2003)
But SQLServer on Server2 cannot "see" the IUSR_SERVER1 or the
SERVER1\ASPNET guest account. We're unable to grant SERVER1\ASPNET login:
exec sp_grantlogin 'SERVER1\ASPNET' --we get an error that this NT user or
group is not recognized. From what I've read, it seems we will need to
make
Server1 "trusted for Authentication Delegation" (along with some other
things -- use TCP/IP and use Kerberos). Will making Server1 trused for
authentical delegation cause the SERVER1\ASPNET guest user to become
visible
to Server2 so it can be granted Login to SQLServer? Is this trusted
scenario
secure if the firewall limits traffic to HTTP only?
Thanks!|||316989 PRB: "Login Failed" Error Message When You Create a Trusted Data
http://support.microsoft.com/?id=316989
- Programmatically change the security context of the ASP.NET worker
process to a user who has the correct SQL Server permissions. -or-
- Change the default configuration of ASP.NET so that the ASP.NET
worker process starts and runs under the context of a user who has the
correct permissions in SQL Server. -or-
- Grant the correct permissions on SQL Server so that the aspnet_wp
account (or NetworkService account, for an application that runs on IIS
6.0) has the appropriate access to the required resources.
317012 INFO: Process and Request Identity in ASP.NET
http://support.microsoft.com/?id=317012
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||We have taken option #2 from the post below (thank you Kevin). But what
should we be seeing in EventViewer/Security in the "user" column under those
circumstances? We're seeing SERVER2$ rather than the domain username we have
supplied. Is that expected behavior?
to recap: SQL Server 2000 running on Server1
IIS 6.0 running on Server2
Windows2003 / ActiveDirectory
We did this:
--edited the processModel section of machine.config setting userName to a
domain user with SQL logon and dbaccess rights, let's call it SQL_USER
-- supplied OURDOMAIN\SQL_USER as the "anonymous" user in the IIS dialog
-- edited machine.config: setting impersonate="true"
userName="OURDOMAIN\SQLUSER" password="pwd"
--Then we rebooted the machine on which IIS is installed
-- granted OURDOMAIN\SQL_USER read/write/modify rights to the ASPNET
temporary directory
With EventViewer->Security running on Server1 (the SQL Server), we look to
see who is trying to access the SQL machine from the IIS web pages.
Invariably the user appears as "SERVER2$" not as SQL_USER. What should we
see in EventViewer/Security on Server1? Is our reconfiguration of the
default ASP.NET user incomplete?
Thanks
Timo
"Kevin McDonnell [MSFT]" <kevmc@.online.microsoft.com> wrote in message
news:lygZpHREEHA.3568@.cpmsftngxa06.phx.gbl...
>
> 316989 PRB: "Login Failed" Error Message When You Create a Trusted Data
> http://support.microsoft.com/?id=316989
> - Programmatically change the security context of the ASP.NET worker
> process to a user who has the correct SQL Server permissions. -or-
> - Change the default configuration of ASP.NET so that the ASP.NET
> worker process starts and runs under the context of a user who has the
> correct permissions in SQL Server. -or-
> - Grant the correct permissions on SQL Server so that the aspnet_wp
> account (or NetworkService account, for an application that runs on IIS
> 6.0) has the appropriate access to the required resources.
>
> 317012 INFO: Process and Request Identity in ASP.NET
> http://support.microsoft.com/?id=317012
>
> Thanks,
> Kevin McDonnell
> Microsoft Corporation
> This posting is provided AS IS with no warranties, and confers no rights.
>
>|||It sounds like ASPNET process is running under localsystem. It is
attempting to connect using localsystem
credentials, and thus comes across as Server2$.
See if these resources help you :
Building Secure ASP.NET Applications: Authentication, Authorization, and
Secure Communication
http://msdn.microsoft.com/library/d...-us/dnnetsec/ht
ml/SecNetch08.asp
and
http://msdn.microsoft.com/library/d...-us/dnnetsec/ht
ml/SecNetch12.asp
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.