Resolution
Directory and Resource Administrator 6.60
fact
Directory and Resource Administrator 7.x
fact
Microsoft Windows Server 2003
symptom
Error: '[80070005] Access is denied' When Launching the Web Console
symptom
Assistant Admins can launch the Directory and Resource Administrator MMC interface successfully but receive the following error message when launching the Web Console:
The attempt to get the list of managed domains for domain_name failed.
The DRA server service may be stopped, or the computer may be offline. Check to make sure you enter the name correctly and try again.
The error message returned by the system was:
[80070005] Access is denied.
cause
This problem may occur if the NTFS permissions for the Local System account has been modified on the IIS/DRA server.
fix
To resolve this problem, please perform the following steps:
- Launch Internet Services Manager
- Expand Default Web Sites
- Select the DRA virtual directory
- Right-click and select Properties
- Select High (Isolated) from the drop down list for the Application Protection level under Application Settings on the Virtual Directory tab.
When you change the Isolation to run as High then the ASP page will run under a dllhost and the identity it will be running default is IWAM_machine account.
When you have the application protection as Low, it runs under Inetinfo and will run as system account. Microsoft postulated that the system account permissions had been modified and that it did not have access to run this appplication.