Having a bit of a nightmare dealing with our new cloud setup.
We have 2 separate domains now, and there is a one-way trust from domB to domA. Since servers on domB need access to resources on domA, I'm forced to run my application pools as a domA\username (hope you're still with me...).
The problem I'm having is that SOME sites, give me this error:
Security Exception
Description: The application attempted to perform an operation not allowed by the security policy. To grant this application the required permission please contact your system administrator or change the application's trust level in the configuration file.
Exception Details: System.Security.SecurityException: Request for the permission of type 'System.Web.AspNetHostingPermission, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.
My .NET trust levels are set to Full.
If I add the domA\username to local administrator group, it works; if I set the app pool user to Network Service, it works. The problems, respectively, are: I can't grant that much access to the app pool, and it won't connect to the network resources.
My base question would be "what do I need to grant rights to for the damn thing to work?" Since it works with Administrator access, it leads me to believe that it simply needs to be able to read/write to specific location. I have already tried giving it full access to the home direct, and also added it to IIS_IUSR group.
