环境:
Windows2003 Enterprise Edition
IIS6.0+VS2008
问题:
把web项目部署到IIS后,发现web服务器不能使用
方法:
重新注册IIS(无效)
把ASP.NET的版本改成2.0(仍然无效)
很明显,拒绝访问,十有八九是权限不够,查看网站目录,果真如此
发现WEB目录没有权限,加上IIS_WPG组后,IIS正常运行。
关于IIS_WPG(国外网站的描述)
The IIS_WPG group is a user group provided by IIS 6.0. IIS_WPG group membership provides the minimum set of user rights and permissions required to run an application. It provides a convenient way to use a specific user account, which would be a member of IIS_WPG, for the application pool identity without having to manually assign the user rights and permissions to that account. In a case where the user account is not in the IIS_WPG group and it does not have the appropriate permissions, the worker process serving the application pool will fail to start.
Note By default, the IIS_WPG group does not have the right to start CGI processes. If you create a new account and add it to the IIS_WPG group to run as a worker process identity, you still must assign this new account two user rights to start CGI processes. These user rights are Adjust memory quotas for a process and Replace a process level token.
总结:
在windows2003中IIS6中,网站目录不具备基本的权限,需要我们手动的添加IIS_WPG组;而有很多朋友,直接修改网站的应用程序池的安全帐户为“本地系统”,来提高权限,此方法不可取。
转自:http://www.cnblogs.com/wmj/
下一篇 关于W3C CSS标准的一些经验