Detecting permission issues using auditing and process monitor

I was working on a post @ http://forums.iis.net about a permissions issue.  One of the first things I recommend is use Process Monitor.  I honestly think this tool should be built into the OS.  My 3 suggestions, do you run Filemon, Regmon and is auditing of “Audit object access” failures enabled?  Between these three items,  you can rule out most any permissions issue. 


//Process Monitor info
http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx

//Sysinternals homepage
http://technet.microsoft.com/en-us/sysinternals/default.aspx


//Enable Object Failures in Local Security Policy.


Here is an image of what I’m referring to.



//Enable auditing of failures on the drive your files are located on


 


Once this is enabled, if there is an failure, it will show up in the Security event log.  If there is not a error using Filemon, auditing process above.  There is probably a DCOM or local security policy issue.


Hope this helps,


Steve Schofield
Microsoft MVP – IIS

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s