Search Engine: Elastic

Article ID: 8428, created on Apr 13, 2010, last review on May 30, 2014

  • Applies to:
  • Operations Automation


Various Windows Shared Hosting provisioning tasks fail in POA with the error message 'Access is denied'. E.g. POA cannot turn off FTP access for service user on Windows webspace:

Task name:        Turn off FTP access for Hosted Service User 1008 on host
'' (host_id=111).
Last execution output: Exception during execution of MPF request: 'Access is
[<response><errorContext description="Access is denied." code="0x80070005"
<errorSource namespace="NTFSManager"


In the failed task properties it is seen that failed procedure is changeFileOwner in the NTFSManager namespace, so most probably the reason of problem is lack of permissions to access some resources on file system.


Log into MPS server and catch the MPF request which POA is executing in the task using the 'TraceView' utility, the request will looks like this:

<execute impersonate="1" namespace="NTFSManager"
 <after destination="data" destinationPath="log" source="context" />
 <after destination="data" destinationPath="log" source="executeData" />

The request above is going to change ownership on the folder D:\CustomerData\webspaces\webspace0012253_ and fails.

Install 'Process Explorer' from on the host and check what process does hold the folder, most probably it will be IIS process w3wp.exe.

Try the following solutions:

  1. Find website in webspace #12253 in IIS Manager and stop it.
  2. Run the task.
  3. Start website.

If the procedure above does not help, try to stop IIS on, re-run the task and start IIS back.

Also check that pem_admin - the user under which such requests are executed, has the permissions to access CustomerData share:

  1. Go to the disk where CustomerData folder is located(Typically, D:\),
  2. Right-click CustomerData folder > Properties > Sharing > Advanced sharing,
  3. Ensure that folder is checked, and select the PEM_<GUID> from name dropdown,
  4. Click Permissions and check that user pem_admin has read/write access to the share

See KB article #121830 for more details on restoring permissions on IIS hosts.

5356b422f65bdad1c3e9edca5d74a1ae caea8340e2d186a540518d08602aa065 e12cea1d47a3125d335d68e6d4e15e07

Email subscription for changes to this article
Save as PDF