We've now got our new application server running, and we're moving all of our Web applications over. The new server uses Windows Server 2003 R2, which has tighter security than the previous version, and that has slowed us down a little bit.
In particular, the Feedback feature on a number of our Websites writes to the Application Log if it encounters an exception. Only, a Website running as NETWORK SERVICE doesn't have permission to create new event sources. So we got an unhandled SecurityException every time we tried to send Feedback.
NETWORK SERVICE
Here's the offending line of code:
EventLog.CreateEventSource(eventSource, logName);
The solution (shown below; open the image in another window to see it full-size) was to give the NETWORK SERVICE permission to create event sources. (Another option was to make all of the Web sites on the server run as Local System. This violates the Principle of Least Privilege, so we rejected it.)
Local System