While accessing the active directory (AD) and authorization manager (AZMAN) , If you get “ Insufficient access rights to perform the operation. (Exception from HRESULT: 0x80072098) “ message check the account that is being used to get the LDAP query from AD .
ERROR DETAILS
Source Error:
SOLVE IT
Steps to do check the app pool rights:
WHY DID WE DO IT
The app pool account is being used to get the LDAP query from AD did not have rights to read the role
Having set multiple sites I have seen the major cause of problem is the rights of the account pool that is messed up. Even if it displays correctly sometimes just reentering it , solves it.
Exception Details: System.Runtime.InteropServices.COMException: Insufficient access rights to perform the operation. (Exception from HRESULT: 0x80072098)
Source Error:
Line 154: 'Session("FullName") = System.Security.Principal.WindowsIdentity.GetCurrent.Name.ToString() Line 155: Line 156: If Not User.IsInRole("Role1") Then Line 157: Response.Redirect("./Login.aspx") Line 158: End If |
Stack Trace : ....
Steps to do check the app pool rights:
- Click on the website name that you are having problem with in IIS
- In the right panel you will see 'Basic Settings'. Click It.
- Select the specific pool option and enter the name of the account@domain and the password.
- Click Ok
- Test the site.
WHY DID WE DO IT
The app pool account is being used to get the LDAP query from AD did not have rights to read the role
Having set multiple sites I have seen the major cause of problem is the rights of the account pool that is messed up. Even if it displays correctly sometimes just reentering it , solves it.
Comments
Post a Comment