Hi,
We have recently started to use a new group of Windows 2008 R2 SP1 IIS servers for production. We are using a dedicated AppPool for one of our test apps to troubleshoot a problem. The problem is that after a certain unknown period of time, or some change unkown to us, we are unable to write to the log file location stored on a network share. We have 4 similarly configured servers, who all experience the same problem after some time.
The network share is configured with Everyone Share/NTFS FULL CONTROL permissions. After a server restart the problem goes away. More than that, at the same time, one server is able to write to the log file location while the other isn't, where it returns the error "Access to the path is denied".
I ran Process Monitor and tracked the access, and indeed I see that the AppIdentity account used to access the network share is getting "ACCESS DENIED". If I restart the server, the problem goes away, although we don't know why. We have tried the following troubleshooting steps, all of which have not helped a bit:
- IIS RESET
- Kill the w3wp processes under this appPool
- Restart a whole slew of Windows Services
- Stop the AntiVirus software
What I did notice is that all the while the problem exists, if I change the appPool to use a network (domain) credential, the application works. When I change back to AppIdentity like accounts, the problem reoccurs. I have tried changing the application to use a different AppPool, including the DefaultAppPool, but nothing has helped.
Essentially, in this test, all we are trying to do is write to a network log file. We have a hunch that possibly some change could bring this about, possibly in the config of a website/application, but we don't understand why we are getting access denied. I have also checked using SysInternals AccessEnums that indeed to the network location "Everyone" has Full Control permissions. Here is a a Process Monitor screenshot:http://img402.imageshack.us/img402/7651/procmon.png.
Would appreciate if anyone has any ideas/leads,
Reuvy