Error Using WMI to Get List of Shared Folders on the Server



Here's some details:

Server and workstation both in the same workgroup
Logged into server as local Administrator
Logged into workstation as a local user that is only in the Users group
The local user on the workstation is also defined with same name and
password on the server (and only in the Users group on the server)
Server is Windows Server 2003 running IIS 6.0
Workstation is Windows XP Professional
ASP.NET 2.0 (C#) web site

Web.config snippet
<authentication mode="Windows"/>
<identity impersonate="true"/>

..aspx.cs snippet (from Page_Load event)
using (System.Management.ManagementClass exportedShares = new
System.Management.ManagementObjectCollection shares =

foreach (System.Management.ManagementObject share in shares)
// Get shared folder information, for example
Response.Write("Name: " + share["Name"].ToString());

Open IE and navigate to the web site on the server (using
http://servername/website). I get an access denied error. The exception is
thrown on the line: System.Management.ManagementObjectCollection shares =
exportedShares.GetInstances();. The exception details are:
System.Management.ManagementException: Access denied

What I'm trying to do is list all the shared folders on the server on a
page. However, when I run this application from a different computer, I get
the access denied error.

** How can I get a list of shared folders on the server no matter what
computer is accessing the ASP.NET application?
** What do I need to do differently to get the above code and scenario to

** Is there a better way of doing this than WMI? If so, what?

P.S., On the server, I tried give the local user full WMI permissions
through Computer Management, and it didn't work (nothing changed; I still
got the access denied error).

bruce barker \(\)

this setup won't work. the web service is running with a secondary credital,
so it can not access a network resource (one hop rule). you have three

1) set the web site to basic authenication
2) switch to activce directory and kerberos.
3) remove <identity impersonate="true"/> and give the app pool an account
with network permissions.

-- bruce (

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question