IIS_IUSRS cannot access files uploaded and created by Network Service - error 401.3

Posted by Max on Server Fault See other posts from Server Fault or by Max
Published on 2009-11-18T17:38:47Z Indexed on 2011/01/31 15:27 UTC
Read the original article Hit count: 188

Filed under:
|

Let me rephrase my question as I investigated further:

The problem:

I have a php script that is used to upload images on my windows webserver 2008. The files are created in the correct directory. The are created and owned by the user Network Service. Network Service has full access to the uploaded file.

As soon as I try to access the uploaded file (mostly an image) via HTTP, I get an 401.3 not authorized error.

Now, if I right-click on the not accessible image and grant IIS_IUSRS group read permissions via the security tab, the image can be accessed! By default IIS_IUSRS has NO access at all for the uploaded file.

The directory containing the image files has the correct access rights set. But each file that is new uploaded to the directory is permitted for IIS_IUSRS.

The question:

How can I grant IIS_IUSRS by default access to the newly uploaded file? The appPool of the website has its identity set to its default, I also tried setting it to "networkIdentity" or so, but that did not work either.

© Server Fault or respective owner

Related posts about windows-server-2008

Related posts about php