locked
Removing Everyone from Shared Folder RRS feed

  • Question

  • User-1970886443 posted

    Hi, I've a shared folder (that stores attached documents to requests) on a server that had access for the Everyone group. 

    The Shared file is populated by users submitting a request with attachments added. I have to remove the everyone group from having access to the Shared folder. Since removing the Everyone access, users are unable to attach documents to requests as their access is denied to the folder.

    Can I add the app pool identity to the Shared folder security group and then impersonate that from within the application?
    Any ideas how I can resolve this?

    Thanks
    Paul 

    Tuesday, March 23, 2021 2:57 PM

Answers

All replies

  • User475983607 posted

    Can I add the app pool identity to the Shared folder security group

    Open IIS manager to find the application pool identity.  Then grant R/W to the identity.  The IIS documentation explains the details.

    https://docs.microsoft.com/en-us/iis/manage/configuring-security/application-pool-identities

    and then impersonate that from within the application?

    Unclear.

    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Tuesday, March 23, 2021 3:29 PM
  • User-1970886443 posted

    Thank you for the response, Share folder is now locked down and I can upload attachments via the web app.

    One more thing, the web page has a link to the uploaded document but when I try to view the document I am getting an access denied message. If the app pool ID has R/W access shouldn't I be able to view the uploaded document?

    Thanks

    Thursday, March 25, 2021 9:35 AM
  • User475983607 posted

    One more thing, the web page has a link to the uploaded document but when I try to view the document I am getting an access denied message. If the app pool ID has R/W access shouldn't I be able to view the uploaded document?

    Is the actual error, "HTTP Error 403.14 - Forbidden - The web server is configured to not list the contents of this directory."?  If so, enable directory browsing in IIS.

    https://docs.microsoft.com/en-us/troubleshoot/iis/http-403-14-forbidden-webpage

    Thursday, March 25, 2021 11:19 AM
  • User-1970886443 posted

    No the error is: Cannot find file 'xxx'. Make sure the path or Internet address is correct.

    Thursday, March 25, 2021 11:53 AM
  • User475983607 posted

    pmcm

    No the error is: Cannot find file 'xxx'. Make sure the path or Internet address is correct.

    Well, that error is very clear.  The path or URL is wrong.  We cannot see your code or the URL so you'll need to do a little troubleshooting.  Also we have no idea where you are saving the files.  I assume on the host???

    Thursday, March 25, 2021 1:07 PM