Forder Access is denied on windows server 2016

[alexnguyenit]

Pls help me. Folder C:\inetpub\wwwroot can't access, and I so can't add permission on this forder. Pls give me solution for fix this issue, thank you so much!

 

[Olaf Engelke]

Try to take ownership of the folder with your admin account, either via Security tab in the Properties dialog of the folder or in an administrative cmd prompt with takeown. If you did not reboot the server, try this.
There might be a pending deletion for that folder which cannot be completed due to open handles.
Best greetings from Germany
Olaf

 

[alexnguyenit]

Try to take ownership of the folder with your admin account, either via Security tab in the Properties dialog of the folder or in an administrative cmd prompt with takeown. If you did not reboot the server, try this.
There might be a pending deletion for that folder which cannot be completed due to open handles.
Best greetings from Germany
Olaf

I tried very solution but not ok, I so reboot the server.

 

[x BlueRobot]

Why are you trying to change the permissions of that folder? The only user group which you should have manageable permissions on that folder is IIS_IUSRS.

 

[Olaf Engelke]

Why are you trying to change the permissions of that folder? The only user group which you should have manageable permissions on that folder is IIS_IUSRS.

I checked just two Windows Servers with IIS.
The permissions are looking like that (tried to "unlocalize" the names and removed some segments of the output of get-acl .\wwwroot PowerShell command):
Access : PREDEFINED\IIS_IUSRS Allow ReadAndExecute, Synchronize
PREDEFINED\IIS_IUSRS Allow -1610612736
NT SERVICE\TrustedInstaller Allow FullControl
NT SERVICE\TrustedInstaller Allow 268435456
NT-AUTORITY\SYSTEM Allow FullControl
NT-AUTORITY\SYSTEM Allow 268435456
PREDEFINED\Administrators Allow FullControl
PREDEFINED\Administrators Allow 268435456
PREDEFINED\Users Allow ReadAndExecute, Synchronize
PREDEFINED\Users Allow -1610612736
CREATOR-OWNER Allow 268435456

Owner is SYSTEM.
So this seems to be the default setting.
Best greetings from Germany
Olaf

 

[x BlueRobot]

Yes, seems to be the default settings which they should be kept as. They should be sufficient for running web applications from.

 

[Olaf Engelke]

Well, the OPs problem seems to be that the default permissions are not there at all.

If a reboot does not solve the issue, there could still be more potential reasons like file system corruption or malware, which somehow hijacked the local IIS (it is not an Exchange Server, or is it?), or the permissions of the used account (is it really an admin account - but even users should be able to browse that folder, so I do not think this is the reason) or a Antimalware software, which attempts to "protect" some potentially in-risk folders.

Would be interesting to know, which sites are listed in IIS admin console. We also don't know anything about the server roles and installed software. The folder seems to have a very recent modification date - hard to say if from the attempts to access it or from something else.

Best greetings from Germany
Olaf

 

[alexnguyenit]

Because when I install app on this server, the issue occur. Then I check permission on this path folder C:\inetpub\wwwroot, the default permissions are not there at all

 

[x BlueRobot]

or the permissions of the used account (is it really an admin account - but even users should be able to browse that folder, so I do not think this is the reason)

Some clarification from the user around this would be very helpful, still they shouldn't be directly installing software into that folder.

@alexnguyenit

FRST Fix
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Download the attached fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
3. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
4. Press the Fix button just once and wait.
5. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

Please note that the fix script will essentially just run icacls but I want to run it from FRST in case you have some strange restriction on your account which is not allowing you to view the permissions.

I've never used SAP and may be speaking from ignorance here, but why are you trying to install it in the wwwroot folder? It seems that you're trying to install the SDK for it?

https://www.sap.com/uk/products/technology-platform/crystal-reports.html#visual-studio