Skip to content

Instantly share code, notes, and snippets.

View ashishnegi's full-sized avatar

Ashish Negi ashishnegi

  • Software Developer
  • Austin, TX
View GitHub Profile
@ashishnegi
ashishnegi / dotnet_network_service_mode.csv
Created October 30, 2017 13:29
Procmon logs when dotnet runs as network service
We can make this file beautiful and searchable if this error is corrected: Unclosed quoted field in line 7.
"CreateFile","D:\Users\testadm\dotnet\dotnet.exe","ACCESS DENIED","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a"
"QueryOpen","D:\Users\testadm\dotnet\host\fxr","ACCESS DENIED",""
```
Full Process Monitor log here :
```
"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"1:05:34.9220360 PM","dotnet.exe","1084","Process Start","","SUCCESS","Parent PID: 2376, Command line: ""D:\Users\testadm\dotnet\dotnet.exe"" --version , Current directory: D:\Windows\system32\, Environment:
; ALLUSERSPROFILE=D:\ProgramData
; APPDATA=D:\Windows\ServiceProfiles\NetworkService\AppData\Roaming
========== Publishing ==========
Packaging Application...
Build started 12/11/2018 4:35:49 PM.
Building with tools version "15.0".
Target SFAppGetApplicationName:
Using "GetApplicationName" task from assembly "C:\Program Files (x86)\Microsoft Visual Studio\Preview\Enterprise\MSBuild\Sdks\Microsoft.SFApp.Sdk\build\..\tools\Microsoft.VisualStudio.Azure.SFApp.BuildTasks.dll".
Task "GetApplicationName"
Done executing task "GetApplicationName".
Target SFAppFindServiceProjects:
Using "FindServiceProjects" task from assembly "C:\Program Files (x86)\Microsoft Visual Studio\Preview\Enterprise\MSBuild\Sdks\Microsoft.SFApp.Sdk\build\..\tools\Microsoft.VisualStudio.Azure.SFApp.BuildTasks.dll".