• The code-behind model is being used.
• The page uses dynamic compilation with the Src attribute, and the Src attribute points to a file on a remote computer by using a Universal Naming Convention (UNC) share.
• Impersonation is enabled in the Web.config file.

Back to the top

• Give the share access to the account that is used for the worker process. If you are using a system account or a network service, you can give access to the computer account.
  
  To give access to the computer account, follow these steps:
  1. Right-click the share, and then click Properties.
  2. On the Sharing tab, click Permissions, and then click Add.
  3. Type the name of the Web server, and then click Check Names. This displays as $machinename under Share Permissions in the Permissions dialog box for this share.
• Use code-behind files with precompiled dynamic-link libraries (DLLs) instead of dynamic compilation.
• Use single page files rather than code-behind files.
• Run the worker process as an account that can access the share. To configure this, use the user name and password attributes of the processModel element of the Machine.config file.

Back to the top

Steps to Reproduce Behavior

1. Create an .aspx page named Webform1.aspx.
2. Use one of the following examples for the page directive:

   <%@ Page language="c#"  Codebehind="WebForm1.aspx.cs"  Src = "WebForm1.aspx.cs" %>
   					

   -or-

   <%@ Page language="vb"  Codebehind="WebForm1.aspx.vb"  Src = "WebForm1.aspx.vb" %>
   					

3. Create a code-behind page, and name it according to the page directive that you chose in step 2.
4. Add a domain user (domain\user) as an Administrator to the computer.
5. Create a share, and then give full permissions to the domain user only.
6. In Internet Service Manager, create a Microsoft Internet Information Server (IIS) application, and then use the domain\user for connect-as.
7. Create a virtual directory in the application that points to the share that you created earlier.
8. Move the WebForm1.aspx and the code-behind file to the share.
9. Create a new Web.config file, and then add the following code:

   <?xml version="1.0" encoding="utf-8" ?>
   <configuration>
     <system.web>
       <authentication mode="Windows" />
       <identity impersonate="true" userName="domain\user" password="password" /> 
    </system.web>
   </configuration>
   					

10. Copy the Web.config file into the virtual directory for the Web application to add the file to the IIS application.
11. Browse to the page.

Back to the top