add permissions = ok, THEN REMOVE = ok still ?!? Why?

[anadem]

On a clean W2000 SP4 install, our web app fails, reporting insufficient
permission to access the Eventlog service.

If I use regedt32 on HKLM\System\CurrentControlSet\Services\Eventlog
and add user "ASPNET" with Full Control, the app works fine. BUT if I
then remove the ASPNET user from the Eventlog permissions, THE APP
STILL WORKS (ie it works without the permissions it previously needed.)

Reboot, uninstall+reinstall app = still works fine, after only once
adding+removing the permission change -- ie the change seems permanent,
despite "undoing" it.

What's going on under the covers? Any clues what to fix?

It looks as though using subinacls to allow ASPNET isn't the optimal
solution, and it would be good to cure the cause rather than just
fixing the symptom.

 

[Dave Patrick]

I'd ask your web developer what's up.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

| On a clean W2000 SP4 install, our web app fails, reporting insufficient
| permission to access the Eventlog service.
|
| If I use regedt32 on HKLM\System\CurrentControlSet\Services\Eventlog
| and add user "ASPNET" with Full Control, the app works fine. BUT if I
| then remove the ASPNET user from the Eventlog permissions, THE APP
| STILL WORKS (ie it works without the permissions it previously needed.)
|
| Reboot, uninstall+reinstall app = still works fine, after only once
| adding+removing the permission change -- ie the change seems permanent,
| despite "undoing" it.
|
| What's going on under the covers? Any clues what to fix?
|
| It looks as though using subinacls to allow ASPNET isn't the optimal
| solution, and it would be good to cure the cause rather than just
| fixing the symptom.
|