Web Connection
COM identity permissions issue
Gravatar is a globally recognized avatar based on your email address. COM identity permissions issue
  Stein Goering
  All
  Feb 28, 2017 @ 11:04am

We installed our app on a 2012 Server, using a domain user account as the app pool identity. The app works in File mode but when switching to COM we get an Access Denied message (error code 80070005). We can make it work by putting the account into the local Administrators group but that's clearly not an ideal long-term solution.

We have verified that the account in question has full control of the relevant folders. The COM server itself is set to run under the Launching user identity. Any idea what else we should be looking at?

--stein

Gravatar is a globally recognized avatar based on your email address. re: COM identity permissions issue
  Rick Strahl
  Stein Goering
  Feb 28, 2017 @ 01:12pm

What's the Launching user in this case? It'll be the IIS Application pool user.

You need to make sure the IIS application pool is set to the same user you're using in File Mode if you start the app.

If you still have problems it may be a system policy that's preventing COM objects from being launched under non-admin accounts. You can override this behavior in the DCOMCNFG settings for the COM server or the global DCOM launch permissions. If that's the case add the user to the specific server's launch and access permissions in DCOM Config.

+++ Rick ---

© 1996-2017