I am trying to migrate our old ASP-based company intranet which uses File-ACL-based authentication for access control to a Windows 2008 SBS and I cannot get JET to run (80004005).
I followed the great guide on http://learn.iis.net/page.aspx/563/using-classic-asp-with-microsoft-access-databases-on-iis-70-and-iis-75/ to prepare for the use of JET and activated Windows Authentication only in the Authentication dialog box. Authentication works, Request.servervariables("LOGON_USER") returns my user account correctly.
But as long as I use passthrough authentication to access the physical path, I get JET Error80004005, no matter what permissions I set on the Website Root folder, C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp and C:\Windows\Temp (includingeveryone Full Control, Creator-Owner Full Control, Authenticated Users Full Control). For each attempt, process monitor logs an ACCESS DENIED Event on C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\JETxxx.tmp (withLoad Profiles enabled) or C:\Windows\Temp\JETxxx.tmp (with Load Profiles disabled). The event mentions correctly that it is impersonating me.
As soon as I set my own credentials for accessing the physical path of the website instead of passthrough authentication, it works and Process Monitor logs a SUCCESS Event for the JETxxx.tmp-File in the temp folder, again mentioning correctly that it is impersonating me.
I have no clue what the credentials for the website physical path may have to do with access permissions to the Temp folder or why everyone full control still leads to access denied errors in those Temp folders.
Can anyone help me with that? My boss is getting somewhat impatient and I already spent most of the weekend messing with this problem.
As recommended by Anil from MS, I tried with the browser runnin elevated and then it works! So it must be some UAC issue.