2000 handles registry permissions differently than NT4 did, it's possible
that current permissions (prob IUSR) are being used straight through to the
registry edit. If that is the case I would recommend using the runas utility
and foregoing changing registry permissions. Just make sure your ASPs are
written well! I've had to use this trick several times on ASPs CGIs that
were accessing things normally not touched by the IUSR acct.

(by the way I think runas (name?) is part of the resource kit. It's kinda
like su on a ([^\s])+nix box)

 _______________________________
|                               |
| Scott Phelps                  |
| NT Systems Administrator      |
| WebKorner Internet Services   |
| [EMAIL PROTECTED]          |
| www.webkorner.com             |
| MCDTP (Microsoft Certified    |
| duct tape professional)       |
|_______________________________|



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Scott Jones
Sent: Monday, November 27, 2000 3:46 PM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] Using the adduser.exe utility via a web server


I'm using IMail 5.06 on a Windows 2000 server, running
IIS 5.0 Web Server.

I've designed an ASP-driven set of scripts that lets me use
the adduser.exe utility to add or delete imail users from
the web.  The scripts worked fine under Windows NT, but
after we migrated to Windows 2000, I discovered that I
couldn't delete users that had not been added via the web
page scripts.

For example, if I use the script to add a user called "fred"
to a host called "gj.net" the following command is called
from the web page:

\imail\adduser -h gj.net -u fred -n Fred -p dummy

This works everytime.  If I then want to delete "fred", the
web page calls this:

\imail\adduser -kill -h gj.net -u fred

Again, this works as long as the user was added via the web
page.

However, if the user "fred" were added via the imail
administrator, rather than the web app, I can't delete him
via the web app.

I suspect this is some sort of permissions problem, but I
have tried switching permissions on the user directory, and
have even made the IIS process account a member of the
Administrators group.  This hasn't worked.  The problem
seems to be that the registry entry can't be deleted unless
it was originally created via the same (web) process.

Can you suggest any sort of fix that will allow me to use
adduser.exe to delete users via the web when the users were
not created via the web?

Thank You,
Scott Jones
REANet

Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to