IIS - 6.0, OS - Windows 2003 R2 We have a web site which is runing under a application pool, on IIS the authentication we are using is "Integrated windows". This program runs fine on Windows 2000 server. From one of the page (asp) We are using Shell("myfile.bat") from vb code, command to execute the batch file. The program runs without any error and executes the batch file when application pool is running under "Local Service" acocunt. When application pool is running under "Network Service" account the program runs without any error, however in this case the batch file is not getting executing, i.e. the batch file has just the copy command in it. We have given full control to network service account on the folder where batch file exists and copies the files. We have also given the permissions (read and execute) on "cmd.exe" to "Users" account. Can someone help me to understand the exact permissions required on "Network Service" account to execute the batch file on win2k3 box?

Try assigning additional Read permissions on cmd.exe Say, Authenticated Users: Read. And check again.MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor; CCNA

Its most likely that the Network Service lacks the appropriate NTFS permissions to read the script, and/or to write to any location needed. You can use Showacls.exe to dump NTFS permission of the Windows 2000 server to a text file, then search the text file for Network Service to determine where the permissions are applied.

How to test scripts running under the Network Service Account http://networkadminkb.com/kb/Knowledge%20Base/Windows2003/How%20to%20test%20scripts%20running%20under%20the%20Network%20Service%20Account.aspx