Microsoft KB Archive/827559

= PRB: &quot;Catastrophic Failure&quot; Error Message When You Try to Debug an ASP.NET Application on Windows 2000 Domain Controller =

Article ID: 827559

Article Last Modified on 4/19/2007

-

APPLIES TO


 * Microsoft ASP.NET 1.1
 * Microsoft Windows 2000 Service Pack 4

-





SYMPTOMS
When you try to debug a Microsoft ASP.NET Web Application on a computer that is running Microsoft Windows 2000 Server domain controller with Service Pack 4 (SP4) installed, you may receive the following error message:

Error while trying to run project: Unable to start debugging on the web server. Catastrophic failure



CAUSE
This problem occurs when the account that is used to run the ASP.NET Worker process (by default, this is the IWAM user account on the domain controller) is not assigned with the &quot;Impersonate a client after authentication&quot; user right in the local security policy. This problem may occur when you install Windows 2000 SP4, and then install Microsoft Visual Studio .NET. In this situation, the IWAM account is not granted the &quot;Impersonate a client after authentication&quot; user right in the local security policy.

The &quot;Impersonate a client after authentication&quot; user right (also named SeImpersonatePrivilege) is a new Microsoft Windows 2000 security setting that was first included in Microsoft Windows 2000 SP4.



WORKAROUND
To work around the problem, manually assign the &quot;Impersonate a client after authentication&quot; user right to the IWAM account. To do this, follow these steps:  Click Start, point to Programs, point to Administrative Tools, and then click Domain Controller Security Policy. Click Security Settings. Click Local Policies, and then click User Rights Assignment. In the right pane, double-click Impersonate a client after authentication. In the Security Policy Setting window, click Define these policy settings. Click Add, and then click Browse.</li> In the Select Users or Groups window, select the IWAM account name, click Add, and then click OK.</li> Click OK two times.</li> To enforce an update of the computer policy, type the following command at a command prompt, and then press ENTER:

secedit /refreshpolicy machine_policy /enforce

</li> At the command prompt, type iisreset, and then press ENTER.</li></ol>

<div class="status_section">

STATUS
This behavior is by design.

<div class="moreinformation_section">

Install Service Pack 4
To download and install Windows 2000 SP4, visit the following Microsoft Web site:

http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/default.mspx

Create a New ASP.NET Web Application
<ol> In Visual Studio .NET, use Microsoft Visual Basic .NET or Microsoft Visual C# .NET to create a new ASP.NET Web Application project. By default, WebForm1.aspx is created.</li> Right-click WebForm1.aspx, and then click View Code to open the code behind file.</li>  Replace the existing code of the Page_Load event with the following code:

Visual C#.NET private void Page_Load(object sender, System.EventArgs e) { Response.Write(&quot;Debug Break point&quot;); } Visual Basic.NET Private Sub Page_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load Response.Write(&quot;Debug Break&quot;)

End Sub </li> On the Build menu, click Build Solution.</li></ol>

Debug the Application

 * 1) Set a break point in the code of the Page_Load event.
 * 2) To debug the application, click Start on the Debug menu in Visual Studio .NET.

<div class="references_section">