Question

we developped an ASP.NET application that runs fine on our development server and in our network computers. But in production, the application works when accessing it directly from the web server but not on the clients (code behind is not executing).

Any hints?

TY

Framework is 3.5

Answer 1

the application works when accessing it directly from the web server but not on the clients (code behind is not executing).

This sounds like a security permissions issue.

Check to see where the website is installed. C:\inetpub\wwwroot has the proper execute permissions by default. For security reasons, many corporations like to set a policy that websites have to be installed elsewhere [1]. When setting up websites outside of the default folder, add “read & execute”, “read” and “list folder contents” permissions to IIS_WPG, IWAM_server_name, IUSR_server_name and ASPNET accounts. Sometime NETWORK SERVICE needs to be added to the collection.

When you run logged in locally, the application is running with the logged in user’s credentials. When hitting the website remotely, the application is trying to run with the account showned in the Authentications dialog (in IIS manager, right click the web site/application, then properties, then directory security tab, then click “edit” on the “authentication and access control” bit. Usually, “enable anonymous access” is clicked and the “user name” is IUSR_server_name.

Notes:
1 – So that when some hacker uploads malevolant code to C:\inetpub\wwwroot, the code does nothing because the websites aren’t there.