Table of Contents



Issue


Opening the Active Directory Rights Management Services console fails with an error.

AD RMS on Windows Server 2008 R2 SP1: Runtime Error.


Application event log

Log Name:      Application
Source:        ASP.NET 2.0.50727.0
Date:          20/02/2015 11:40:08 AM
Event ID:      1314
Task Category: Web Event
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      ADRMS.contoso.com
Description:
Event code: 4010
Event message: An unhandled security exception has occurred.
Event time: 20/02/2015 11:40:08 AM
Event time (UTC): 20/02/2015 4:40:08 PM
Event ID: af3b5f4d82b54c3cb4b999b1bbddb020
Event sequence: 2
Event occurrence: 1
Event detail code: 0
 
Application information:
    Application domain: /LM/W3SVC/1/ROOT/_wmcs/admin-1-130689240080259958
    Trust level: Medium
    Application Virtual Path: /_wmcs/admin
    Application Path: D:\inetpub\wwwroot\_wmcs\admin\
    Machine name: ADRMS01
 
Process information:
    Process ID: 4716
    Process name: w3wp.exe
    Account name: CONTOSO\svc_RMS
 
Request information:
    Request URL: https://RMS01:443/_wmcs/admin/RoleMgr.asmx
    Request path: /_wmcs/admin/RoleMgr.asmx
    User host address: 10.178.11.52
    User:  
    Is authenticated: False
    Authentication Type:  
    Thread account name: CONTOSO\svc_RMS


AD RMS on Windows Server 2012 R2: Inheritance security rules violated by type: 'ASP.global_asax'. Derived types must either match the security accessibility of the base type or be less accessible.



Application event log

Log Name:      Application
Source:        ASP.NET 4.0.30319.0
Date:          2/20/2015 11:55:47
Event ID:      1309
Task Category: Web Event
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      RMS01.cpandl.com
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 2/20/2015 11:55:47 AM
Event time (UTC): 2/20/2015 4:55:47 PM
Event ID: e563cecb500d441cab8eb0233e3e0799
Event sequence: 3
Event occurrence: 1
Event detail code: 0
 
Application information:
    Application domain: /LM/W3SVC/1/ROOT/_wmcs/admin-2-130689249258539829
    Trust level: Medium
    Application Virtual Path: /_wmcs/admin
    Application Path: C:\inetpub\wwwroot\_wmcs\admin\
    Machine name: RMS01
 
Process information:
    Process ID: 2364
    Process name: w3wp.exe
    Account name: CPANDL\svc_adrms
 
Exception information:
    Exception type: HttpException
    Exception message: Inheritance security rules violated by type: 'ASP.global_asax'. Derived types must either match the security accessibility of the base type or be less accessible.
   at System.Web.Compilation.BuildManager.ReportTopLevelCompilationException()
   at System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled()
   at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters, PolicyLevel policyLevel, Exception appDomainCreationException)

Inheritance security rules violated by type: 'ASP.global_asax'. Derived types must either match the security accessibility of the base type or be less accessible.
   at System.Reflection.RuntimeAssembly.GetType(RuntimeAssembly assembly, String name, Boolean throwOnError, Boolean ignoreCase, ObjectHandleOnStack type)
   at System.Reflection.RuntimeAssembly.GetType(String name, Boolean throwOnError, Boolean ignoreCase)
   at System.Reflection.Assembly.GetType(String name)
   at System.Web.Compilation.BaseTemplateBuildProvider.GetGeneratedType(CompilerResults results, Boolean useDelayLoadTypeIfEnabled)
   at System.Web.Compilation.BuildProvider.CreateBuildResult(CompilerResults results)
   at System.Web.Compilation.BuildProvider.GetBuildResult(CompilerResults results)
   at System.Web.Compilation.ApplicationBuildProvider.GetGlobalAsaxBuildResult(Boolean isPrecompiledApp)
   at System.Web.Compilation.BuildManager.CompileGlobalAsax()
   at System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled()

 Request information:
    Request URL: https://rms01:443/_wmcs/admin/RoleMgr.asmx
    Request path: /_wmcs/admin/RoleMgr.asmx
    User host address: fe80::21c4:2701:582b:91f7
    User:  
    Is authenticated: False
    Authentication Type:  
    Thread account name: CPANDL\svc_adrms
 
Thread information:
    Thread ID: 180
    Thread account name: CPANDL\svc_adrms
    Is impersonating: False
    Stack trace:    at System.Web.Compilation.BuildManager.ReportTopLevelCompilationException()
   at System.Web.Compilation.BuildManager.EnsureTopLevelFilesCompiled()
   at System.Web.Hosting.HostingEnvironment.Initialize(ApplicationManager appManager, IApplicationHost appHost, IConfigMapPathFactory configMapPathFactory, HostingEnvironmentParameters hostingParameters, PolicyLevel policyLevel, Exception appDomainCreationException)
 

Cause

.NET Trust Levels in IIS was set to something other than Full (internal).

Resolution

In the IIS Manager console go to Sites -> Default Web Site and select .NET Trust Level from the center pane.



In the trust level drop down select Full (internal) then apply in the right pane.