Connecting to an Access Databasefrom ASP.NET

[ Team LiB ]Recipe 1.5 Connecting to an Access Databasefrom ASP.NET Problem You know your connection string is correct, but still can't connect to your Microsoft Access database from y

[ Team LiB ]

Recipe 1.5 Connecting to an Access Databasefrom ASP.NET

Problem

You know your connection string is correct, but still can't connect to your Microsoft Access database from your ASP.NET application What are the differences between connecting from a Windows Forms NET application and an ASP.NET application?

Solution

You must grant the necessary file permissions for accessing a Jet database (Microsoft's transparent data access engine) to the default user account used by ASP.NET

Discussion

When a user retrieves a page from an ASP.NET web site, code runs on the server to generate and deliver the page By default, IIS (Internet Information Server) uses the system account to provide the security context for all processes This account can access the IIS computer, but is not allowed to access network shares on other computers

To allow an ASP.NET application to connect to a Microsoft Access database, IIS must be configured to use an account other than the system account The new account must be configured to have permission to access all files and folders needed to use the Access database If the Access database is on a remote computer, the account also requires access

to that computer

The following sections describe how to configure the IIS Server and the Access computer

to allow ASP.NET to connect to an Access database

Configure IIS

The system account cannot authenticate across a network Enable impersonation in the web.config file for a given ASP.NET application so that ASP.NET impersonates an account on the Microsoft Access computer with the required access permissions to the Access database For example:

<identity impersonate="true" userName="domain\username"

password="myPassword" />

This method stores the username and password in clear text on the server Ensure that IIS

is configured to prevent users of the web site from viewing the contents of the web.config

file—this is the default configuration Other ways to impersonate a user from an ASP page are described in the Microsoft Knowledge Base article Q248187

The Microsoft Jet engine uses the TEMP folder on the IIS computer that is accessing the

Access database The user identity requires NTFS (Windows NT File System)

full-control permissions on the TEMP folder Ensure that the TEMP and TMP environment

variables are properly configured

Configure the Access server

On the Access computer, the user account that is used to access the database requires Read, Write, Execute, and Change permissions on the database file The user identity needs Read, Write, Execute, Delete, and Change permissions on the folder containing the database files The user account requires permissions to access the share that contains the database file and folders

The user account must be recognized by the Access computer For a domain user

account, add it to the permissions list on both computers For a user account local to the IIS computer, create a duplicate account on the Access computer with the same name and password

Grant the user account Log on Locally and Access this Computer from the Network permission to access the computer in the local security policy These permissions are assigned within the Security Settings \Local Policies\User Rights Assignment node in the Local Security Policy tool

[ Team LiB ]