Author: Lindqvist Andreas, Teknikhuset AB.

Published: 2002-10-22

Applies to: Content Studio ver. 3.2

Type: Bug

Symptoms

You try to rebuild a site from the Search / Replace utility with the option to delete folder structure and syncronize permissions. The job fails with Permission denied or Access denied.

Cause

There is a bug in the Search/Replace module in the Content Studio core services (CSSrv32.dll). If the site has the ANONYMOUS LOGON grant/deny browse permission set anywhere on the site and the CS Runtime account is NOT a member of the local administrators group the server has no right to read the name of the local IIS anonymous runtime account. CS replaces the ANONYMOUS LOGON alias with this account when it sets permissions. Normally only Administrators has the permission to query the IIS metabase for this information.

Resolution

  • Temporarely make the CS Runtime account a member of the local administrators group.
  • From Component Services admoinistrative tool, stop the Content Studio server application. This causes the CS Runtime account to start a new logon session and thus obtaining its new access token that now contains the Administrators alias.
  • Start the Search/Replace job again and execute the job.
    • Remove the CS Runtime account and stop the the Content Studio server application as before.

Status

This is a bug in Content Studio Search/Replace module in CSSrv32.dll that will be fixed at a later version or service pack.