Hi,
We're creating an application pool which has the ApplicationPoolIdentity set as the identity. We want to use this account for folder permissions when creating some folders. However, this doesn't work, probably because the CreateFolder actions happens before the application pool (and identity) is created.
In folder properties, we're setting "IIS AppPool" in the Domain and the application pool name in the User name.
Is there another way to get this working?
Regards,
Staffan
Suggested Articles
Re: AppPool Identity and Folder Permissions
Hello Staffan and welcome to Advanced Installer forums,
Thank you for your interest in Advanced Installer.
Indeed, the "CreateFolders" standard action is executed before the web application site/pool is created. However, as a workaround you can add virtual directories which will point to your installation folders and, then enable for each one of them the "Allow anonymous web access -> Use application pool identity (IIS 7 or newer)" option from "Authentication" tab. If this doesn't help you, then I'm afraid you should create your own custom action which will add the related permissions. For example you can use ICACLS to set folder permissions.
Also, the custom action should be scheduled after "Install Execution Stage -> Finish Execution" actions group.
All the best,
Daniel
Thank you for your interest in Advanced Installer.
Indeed, the "CreateFolders" standard action is executed before the web application site/pool is created. However, as a workaround you can add virtual directories which will point to your installation folders and, then enable for each one of them the "Allow anonymous web access -> Use application pool identity (IIS 7 or newer)" option from "Authentication" tab. If this doesn't help you, then I'm afraid you should create your own custom action which will add the related permissions. For example you can use ICACLS to set folder permissions.
Also, the custom action should be scheduled after "Install Execution Stage -> Finish Execution" actions group.
All the best,
Daniel
Re: AppPool Identity and Folder Permissions
Hello,
is there any progress for this feature since 2013?
Regards, Éric.
is there any progress for this feature since 2013?
Regards, Éric.
Re: AppPool Identity and Folder Permissions
Hello Éric,
Please note that we never added such an improvement on our roadmap. This is because of the design of Windows Installer standard actions in context with our IIS setup feature.
The solution to address this behavior will be to use the workarounds presented above.
All the best,
Daniel
Please note that we never added such an improvement on our roadmap. This is because of the design of Windows Installer standard actions in context with our IIS setup feature.
The solution to address this behavior will be to use the workarounds presented above.
All the best,
Daniel
Re: AppPool Identity and Folder Permissions
Yes I just ran into this. It would be nice to have an AdvancedInstaller set permissions custom action which we could call later rather than cobbling together a script or using cacls.
Re: AppPool Identity and Folder Permissions
Hi,
Thank you for your feedback on this. I have forwarded it to our dev team and hopefully they will consider such improvement in the future.
When so, we will update this forum thread.
All the best,
Daniel
Thank you for your feedback on this. I have forwarded it to our dev team and hopefully they will consider such improvement in the future.
When so, we will update this forum thread.
All the best,
Daniel
Re: AppPool Identity and Folder Permissions
Hi,
We have further investigated on this and it seems you can accomplish this request by using the following workaround solution:
1. in "Files and Folders" page make sure you check the "Keep existing permissions" flag on your folder permissions dialog
2. in "Dialog Editor" page select "InstallExecuteSequence" table
3. edit the sequence number of "AI_ConfigPermissions" action and the one of its AI_DATA_SETTER precedent action to be greater than (e.g. 6601) the one of "AI_IIsInstall" action; and also increment the sequence number of "InstallFinalize" action to be greater than (e.g. 6602) the one of "AI_ConfigPermissions" action
Check the attached screenshot.
Hope this helps.
All the best,
Daniel
We have further investigated on this and it seems you can accomplish this request by using the following workaround solution:
1. in "Files and Folders" page make sure you check the "Keep existing permissions" flag on your folder permissions dialog
2. in "Dialog Editor" page select "InstallExecuteSequence" table
3. edit the sequence number of "AI_ConfigPermissions" action and the one of its AI_DATA_SETTER precedent action to be greater than (e.g. 6601) the one of "AI_IIsInstall" action; and also increment the sequence number of "InstallFinalize" action to be greater than (e.g. 6602) the one of "AI_ConfigPermissions" action
Check the attached screenshot.
- screen.jpg (261.91 KiB) Viewed 30872 times
All the best,
Daniel