Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Publishing a Workflow that executes batch files

Updated: 11 Jun 2010 | 5 comments
sgreer2002's picture
0 0 Votes
Login to vote

 I've created a workflow that calls batch files to execute vb scripts to do administrative tasks.   The workflow works great in debug mode.  The issue I have in workflow 6.5 is when I publish the workflow it fails immediately when opened.  I know this is probably a permissions issue when executing the scripts.  My question is how do I configure the workflow to run under a administrator account so that the batch files can execute?  Do I do this in IIS or is there somewhere inside of workflow that I set this?

Comments

reecardo's picture
21
Oct
2009
0 Votes 0
Login to vote

Have you tried marking up the

Have you tried marking up the permissions of the VD in IIS (i.e. making sure there's execute permissions on the folder)?

Rob Moore's picture
21
Oct
2009
1 Vote +1
Login to vote

You need to change the application pool Identity

When you run a workflow, it executes any scripts using the Network Service account, which has little if any permissions.

By changing the appliction pool identity  (or createing a new one) with an actual named user, all your scripts will run under that user context and permissions.

Rob

sgreer2002's picture
22
Oct
2009
0 Votes 0
Login to vote

Created new application pool and service account as identity.

 Ok - I've created a new application pool for the workflow and added a service account with administrator rights as the identity.  I've also added this to the IIS_WPG group.  Now when I run the workflow it asks for authentication.  No matter what user I put in the logon prompt it fails.  I'm using windows authentication for the site and don't want to use anonymous authentication. If i click browse site in IIS the workflow works fine. If I hit the site from another computer it prompts for logon information and fails.  Any ideas?

sgreer2002's picture
22
Oct
2009
3 Votes +3
Login to vote

Fixed! - Here are the steps required to add a service account.

1. set the Service Account as the identity in the new application pool
2. Add the Service Account to IIS_WPG group.
3. Either set a SPN or set the NTAuthenticationProvider to NTLM.  You can find the steps here. http://support.microsoft.com/default.aspx?scid=kb;EN-US;871179

 

Nerbin's picture
10
Dec
2009
0 Votes 0
Login to vote

Thanks

Worked like a charm. Thanks.