IUSR account and C:WindowsTemp

External Since: May 12, 2006 Posts: 2

I'm experimenting with some PHP reporting software on Windows 2003
servers, and the PHP reporting function has a problem on some machines,
where the IUSR_[MACHINE_NAME] (Internet Guest User Account) doesn't
have proper access to C:\Windows\Temp. On those computers, I must
explicitly add IUSR to the temp folder with full access.

On other computers, IUSR isn't explicitly listed in the permissions
settings for the same folder, but the PHP reporting works fine. If I
examine the "Effective Permissions" for IUSR on C:\Windows\Temp, he has
ONLY Traverse Folder/Execute File, Create File/Write Data, and Create
Folders/Append Data. If I add IUSR explicitly to the permissions
settings with only those settings listed in "Effective Permissions",
PHP fails to access the temp folder. What's going on? Why does IUSR act
as if it has full access to this temp folder when "Effective
Permissions" say otherwise?

Thanks for any ideas.

External Since: May 05, 2006 Posts: 20

I would suggest running FileMon (www.sysinternals.com) to firstly check that
it is definately the IUSR account requiring access and that also
C:\Windows\Temp is the only folder where access is being denied..

If this is the case, could the applicaiton on the server that is working
have been installed with higher privelige levels (i.e. Administrator) which
has allowed it to create a sub folder / file during installation, meaning
that it only now requires write data / append rights?

Again running FileMon on the working server and comparing the two may show
you the root cause.

Paul Walsh

"krustazeen@gmail.com" wrote:

> I'm experimenting with some PHP reporting software on Windows 2003
> servers, and the PHP reporting function has a problem on some machines,
> where the IUSR_[MACHINE_NAME] (Internet Guest User Account) doesn't
> have proper access to C:\Windows\Temp. On those computers, I must
> explicitly add IUSR to the temp folder with full access.
>
> On other computers, IUSR isn't explicitly listed in the permissions
> settings for the same folder, but the PHP reporting works fine. If I
> examine the "Effective Permissions" for IUSR on C:\Windows\Temp, he has
> ONLY Traverse Folder/Execute File, Create File/Write Data, and Create
> Folders/Append Data. If I add IUSR explicitly to the permissions
> settings with only those settings listed in "Effective Permissions",
> PHP fails to access the temp folder. What's going on? Why does IUSR act
> as if it has full access to this temp folder when "Effective
> Permissions" say otherwise?
>
> Thanks for any ideas.
>
>