Permissions for Shell() Command

[ATroyer]

I am struggling to get the proper permissions to execute a Shell() command on an app installed to a local machine. I have a batch file in my custom directory that executes fine when I compile (f5):

Screenshot 2021-06-30 120049.jpg (37.81 KiB) Viewed 3941 times

However, when I publish to my local IIS and run the app, the command fails silently, even though I have embedded the same batch file in my app and web directory:

Screenshot 2021-06-30 120422.jpg (19.83 KiB) Viewed 3941 times

Note: the commented lines in the first screen shot show my earlier attempts, where I wrapped the actual command I was after into a batch file after several failures. I say failures, but all of these worked when I compiled, but not when I published.
I know the command itself works, because I can enter the same command (C:\inetpub\wwwroot\CatformsRecords\WebApp/RunRemark345.bat) at the command prompt on my computer and it runs fine.
It seems that it has to be a permissions issue, yet I have given the folders all the permissions they need, and it makes no difference.
The backslash/forward slash variations don't seem to make a difference either.

I followed this post: viewtopic.php?f=7&t=83524&hilit=shell+command to get to where I am now.

[ljwilson]

Since IIS is actually launching the batch file, it will run it with the rights of the IIS AppPool user.

As a test you could set the App Pool to run with the administrator account, and if that works then work backwards from that.

Also, in the past sometimes I've had to launch a .bat or .cmd file using something like c:\windows\system32\cmd.exe /c batchfilename.bat

...jack

[ATroyer]

I tried both suggestions, with no luck, including using my user name and password instead of the ApplicationPoolIdentity pictured below.

Screenshot 2021-07-01 093541.jpg (94.06 KiB) Viewed 3921 times

I am running it with http currently, so I get the message "not secure". When I tried using a localhost certificate to run https, both Firefox and Chrome gave me rats for using a self-signed certificate, and the bat file still wouldn't run.
Do I need to pursue getting a regular certificate, or will that not likely make a difference?

[john w]

Does this help?

https://docs.microsoft.com/en-us/answer ... n-iis.html

[ATroyer]

Thanks. Using that link as reference, I went back through all my settings for the web application, the app pool it is using, and the folder the app and batch file are located in, and everything checks, but no luck...

SInce this is failing silently, is there some place where iis keeps a log of what happens? The log files in the .../WebApp/logs folder only consist of strings of dates and times from what I can see.

[john w]

If you have access there are event logs on the server. They often trap application errors. Sadly I never remember off the top of my head where they are located. I suspect Jack knows or you can it on the internet.

[john w]

A quick thought have you tried running the .bat file outside of the shell command on the server? Does it work?

[ljwilson]

Also, what does the batch file do? Have you tried a simple batch file to make sure it works? Maybe there is a command in it that isn't happy when not in an interactive shell.
...jack

[ATroyer]

Bat file works fine outside the shell command. I can copy directly from debug and paste into PowerShell and it works. I modified the bat file to simply echo some text, and it still does not work.

[ATroyer]

I figured out where to find the IIS logs. Unfortunately, there are no errors listed in the log. This helped me figure out where to look: https://stackoverflow.com/questions/642 ... e-iis-logs