Hi All,

Windows Server 2k3

SQL Server 2005 Express (Hardened: Local connections only, Windows Authentication Only)

I managed to get a DNN installation with a hardened SQL installation finished with the help of this forum, but I have run into a problem. I had Medium Trust CAS turned on in the web.config, and when I clicked on the link to go to the site for the first time, it pegged the CPU and kept it there for 10 minutes. I closed IE explorer, commented out the Medium Trust CAS, and everything worked like a champ.

I am using 4.8.4. and the default DOtNetNuke template.

According to the CAS documentation i just need to enable the config entry and I should be good to go. It does not allow the use of SA with a blank password, however as stated above i am using windows auth. It also does not allow non local  web service calls. I imagine if either of these occurred in the default template, they would produce a security exception - not peg the CPU.

Is there a known problem with Medium Trust CAS and 4.8.4?

Is anyone else experiencing this?

Thanks,

Matthew

Wow... straight from the authoritative mouth

Everything works great. Now i need to remove SQL and some other componenets mentioned in your document Cathal and I should have a hardened DNN installation.

I do have one more question, in all the install resources i have seen, the only file system permissions being set are on the physical directory tied to the virtual directory. I ran into two errors while browsing and playing as the HOST user which required i set full control permissions for NETWORK SERVICE to:

Windows\Temp

WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files

Did I do something wrong, or is this to be expected?

Thanks,

Matthew

Actually I had just removed Active DIrectory, created a new admin account, logged in, tried to browse to the site and got the error for the C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727 path. I was unclear above, and you are right, the site was not working at all.

The windows temp directory error I got when I went to Host Settings.

Everything is squared away now and I really appreciate the help Cathal.

Regards,

Matthew