ASP.NET on a DomainController

[Randy]

I'm developing an ASP.NET app that uses ActiveDirectory. To demo
this, I've built a notebook as a Win2000 DomainController with IIS.
To my pleasant surprise this actually worked - at least until I
patched it the other night. Now I get nothing but security violations
(access denied), with no usefull indication as to what security I've
violated. I'm using 'impersonate' mode and I'm logged in as the admin
of the only Domain.

I can get this working with .NET 1.0 and an un-patched DC, but I need
to upgrade it to .NET 1.1 which requires patches that will introduce
the security problems.

I've tried modifying the Machine.Config to use 'SYSTEM' rather than
'machine' as the processed, this didn't do it.

Does anybody have a hint on what security settings need to be tweeked
to get this to work?

Thanks,
Randy

 

[Dino Chiesa [MSFT]]

Where do you get the access denied exceptions?
In the doc for each class in the .NET BCL, there is a section that talks
about the perms required.
So, check the pages for the calls that are failing...