Is there anyone else out there getting a permissio...
# cfml-general
d
Is there anyone else out there getting a permission error using IIS and BonCode1.3 connecting to CommandBox? IIS is giving 500.19 error. It is stating: ConfigError: Cannot read configuration file due to insufficient permissions. Config File: \\?\C:\WebSites\PDFServer\Prod\web.config I am not sure why the \\? is there! It looks like a UNC I have tried changing the permissions but to no avail. I can run my CFML sites on the local port but not the IIS port.
b
I have seen that error and, in my case, it has always been that the app pool user just did not have permission to read the web.config file.
I have tried changing the permissions but to no avail.
Is fixing the app pool user's permissions on the C:\WebSites\PDFServer\Prod\ directory what you mean when you say that?
Locally, for me, I just gave the local IIS_IUSERS group read/write access to the webroot dir.
Production is a different story... we use group managed service accounts as app pool users so THAT is what gets the permission to the webroot.
d
@bhartsfield this site does not use IIS_IUSERS account. It uses the SYSTEM account and it appears it has Full control. I will be checking later today. Thanks for the information.
b
In my local dev at work (which is windows/iis unfortunately), my app pool identities are all "ApplicationPoolIdentity" (which is how you tell it to just use whatever the service account is) and, using the local system account, I had to give IIS_IUSRS read/write access to the webroot to get rid of errors reading web.config. The service would be World Wide Web Publishing Service. You could always change your application pool user to yourself (or another local admin account) long enough to test wether or not it's the problem before spinning your wheels elsewhere. Let me know if any comparison screenshots might help you out. Good luck.
d
@bhartsfield Would you believe it was the fact that the new folder I created did not have the local Users account added with a read permission
b
Yes I would 🙂
heh... that could come off as snarky so, to clarify, yes I would believe it because I've seen (and caused) similar weird permission issues myself in Windows.
d
No problem. I am thinking that the IIS pool identity must be included in that local users group.