Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > ASPNET account permissions

Reply
Thread Tools

ASPNET account permissions

 
 
Paul Aspinall
Guest
Posts: n/a
 
      03-06-2006
Hi
I am trying to print, server side, from my web application.

I'm getting problems, as my ASPNET account is a local account, and is not
trusted on the domain to print to printers (ie. does not belong to 'Users'
group)

What is the best way round this??

I've asked the security guys to specifically add the account with
permissions to the printer (ie. specifically add \\webhost\ASPNET ) but they
say that it won't work, because \\webhost is not trusted in the domain).

Can anyone help??

What is the best way to let ASPNET run under another account? (ie other than
the local ASPNET)

Surely the network guys can add the local machine account \\webhost\ASPNET
to have permissions to print on the printer?

Thanks



Paul


 
Reply With Quote
 
 
 
 
=?Utf-8?B?TWljaGFlbCBOZW10c2V2?=
Guest
Posts: n/a
 
      03-06-2006
Add impersonate=true to web.config

"Paul Aspinall" wrote:

> Hi
> I am trying to print, server side, from my web application.
>
> I'm getting problems, as my ASPNET account is a local account, and is not
> trusted on the domain to print to printers (ie. does not belong to 'Users'
> group)
>
> What is the best way round this??
>
> I've asked the security guys to specifically add the account with
> permissions to the printer (ie. specifically add \\webhost\ASPNET ) but they
> say that it won't work, because \\webhost is not trusted in the domain).
>
> Can anyone help??
>
> What is the best way to let ASPNET run under another account? (ie other than
> the local ASPNET)
>
> Surely the network guys can add the local machine account \\webhost\ASPNET
> to have permissions to print on the printer?


--
WBR,
Michael Nemtsev :: blog: http://spaces.msn.com/laflour

"At times one remains faithful to a cause only because its opponents do not
cease to be insipid." (c) Friedrich Nietzsche

 
Reply With Quote
 
 
 
 
Willy Denoyette [MVP]
Guest
Posts: n/a
 
      03-06-2006

"Paul Aspinall" <(E-Mail Removed)> wrote in message
news:MtUOf.92306$(E-Mail Removed). uk...
| Hi
| I am trying to print, server side, from my web application.
|
| I'm getting problems, as my ASPNET account is a local account, and is not
| trusted on the domain to print to printers (ie. does not belong to 'Users'
| group)
|
| What is the best way round this??
|
| I've asked the security guys to specifically add the account with
| permissions to the printer (ie. specifically add \\webhost\ASPNET ) but
they
| say that it won't work, because \\webhost is not trusted in the domain).
|
| Can anyone help??
|
| What is the best way to let ASPNET run under another account? (ie other
than
| the local ASPNET)
|
| Surely the network guys can add the local machine account \\webhost\ASPNET
| to have permissions to print on the printer?
|
| Thanks
|
|
|
| Paul
|
|

Don't know what namespace you are using for printing, but are you aware of
this:
http://msdn2.microsoft.com/en-us/library/5ekk3hse.aspx
especially the caution mentions .... not supported ...
As a general rule, you should not print from Windows Services or the like,
ever imagined where the possible spooler action requests, error and warning
messages are going to?

Willy.



 
Reply With Quote
 
Juan T. Llibre
Guest
Posts: n/a
 
      03-06-2006
re:
> What is the best way to let ASPNET run under another account? (ie other than the local ASPNET)


"How To: Create a Custom Account to Run ASP.NET"
http://msdn.microsoft.com/library/de...secnetht01.asp

"ASP.NET Required Access Control Lists (ACLs)"
http://msdn2.microsoft.com/en-us/library/kwzs111e.aspx




Juan T. Llibre, asp.net MVP
aspnetfaq.com : http://www.aspnetfaq.com/
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en espaņol : http://asp.net.do/foros/
===================================
"Paul Aspinall" <(E-Mail Removed)> wrote in message
news:MtUOf.92306$(E-Mail Removed). uk...
> Hi
> I am trying to print, server side, from my web application.
>
> I'm getting problems, as my ASPNET account is a local account, and is not trusted on the domain to
> print to printers (ie. does not belong to 'Users' group)
>
> What is the best way round this??
>
> I've asked the security guys to specifically add the account with permissions to the printer (ie.
> specifically add \\webhost\ASPNET ) but they say that it won't work, because \\webhost is not
> trusted in the domain).
>
> Can anyone help??
>
> What is the best way to let ASPNET run under another account? (ie other than the local ASPNET)
>
> Surely the network guys can add the local machine account \\webhost\ASPNET to have permissions to
> print on the printer?
>
> Thanks
>
>
>
> Paul
>



 
Reply With Quote
 
Willy Denoyette [MVP]
Guest
Posts: n/a
 
      03-06-2006
This isn't of any help, the printers are attached to a remote server, the
impersonated account can't access remote resources unless kerberos
delegation is configured correctly and all clients are authenticated using
kerberos.
As I said in my other reply, printing is not supported and in general
doesn't work from services (windows and web).

Willy.


"Michael Nemtsev" <(E-Mail Removed)> wrote in
message news:(E-Mail Removed)...
| Add impersonate=true to web.config
|
| "Paul Aspinall" wrote:
|
| > Hi
| > I am trying to print, server side, from my web application.
| >
| > I'm getting problems, as my ASPNET account is a local account, and is
not
| > trusted on the domain to print to printers (ie. does not belong to
'Users'
| > group)
| >
| > What is the best way round this??
| >
| > I've asked the security guys to specifically add the account with
| > permissions to the printer (ie. specifically add \\webhost\ASPNET ) but
they
| > say that it won't work, because \\webhost is not trusted in the domain).
| >
| > Can anyone help??
| >
| > What is the best way to let ASPNET run under another account? (ie other
than
| > the local ASPNET)
| >
| > Surely the network guys can add the local machine account
\\webhost\ASPNET
| > to have permissions to print on the printer?
|
| --
| WBR,
| Michael Nemtsev :: blog: http://spaces.msn.com/laflour
|
| "At times one remains faithful to a cause only because its opponents do
not
| cease to be insipid." (c) Friedrich Nietzsche
|


 
Reply With Quote
 
Paul Aspinall
Guest
Posts: n/a
 
      03-07-2006
Thanks for the reply.

I have actually got it working with this change to web.config - thanks for
that.

My next problem was that the printers needed installing for each user, or
some registry hacking done to allow the printers to be added to 'all
users'.... I spent some time playing with this, but eventually made an
Interop call back to Win32 API, which allowed me to redirect print directly
to a share \\computer\queue

All works fine.

Thanks for the help


Paul


"Michael Nemtsev" <(E-Mail Removed)> wrote in
message news:(E-Mail Removed)...
> Add impersonate=true to web.config
>
> "Paul Aspinall" wrote:
>
>> Hi
>> I am trying to print, server side, from my web application.
>>
>> I'm getting problems, as my ASPNET account is a local account, and is not
>> trusted on the domain to print to printers (ie. does not belong to
>> 'Users'
>> group)
>>
>> What is the best way round this??
>>
>> I've asked the security guys to specifically add the account with
>> permissions to the printer (ie. specifically add \\webhost\ASPNET ) but
>> they
>> say that it won't work, because \\webhost is not trusted in the domain).
>>
>> Can anyone help??
>>
>> What is the best way to let ASPNET run under another account? (ie other
>> than
>> the local ASPNET)
>>
>> Surely the network guys can add the local machine account
>> \\webhost\ASPNET
>> to have permissions to print on the printer?

>
> --
> WBR,
> Michael Nemtsev :: blog: http://spaces.msn.com/laflour
>
> "At times one remains faithful to a cause only because its opponents do
> not
> cease to be insipid." (c) Friedrich Nietzsche
>



 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
ASPNET Account Permissions for .NET 2.0? =?Utf-8?B?cGFsYWt3YWlfOTE5?= ASP .Net 4 08-17-2005 08:34 PM
Permissions Issues with ASPNET Account =?Utf-8?B?WW9nZXNoIFBhbmNob2xp?= ASP .Net 2 04-21-2005 04:41 PM
How to give ACL permissions to ASPNET account djoledjole ASP .Net 2 04-08-2005 01:19 PM
Permissions for ASPNET Account Simon Harris ASP .Net 2 01-06-2005 08:15 AM
Using the Jscript to update the ASPNET account to have the needed permissions Giang Thanh via .NET 247 ASP .Net Security 0 05-06-2004 08:29 AM



Advertisments