Problem with ColdFusion 2018 Update 12 (Permissions Issue)

After installing this update, all IIS sites show the following message:

You do not have permission to view this directory or page.

 

No other changes to the server have been made.  This looks to be a permissions issue, but I cannot tell why.  I tried re-applying NTFS permissions from the root directory (c:\ColdFusion2018), but that did not work. 

By @albertogenty

I wouldn't tamper with NTFS permissions. You didn't have to before installing Update 12, so you shouldn't now. If you have made any such permissions changes, reverse them and go back to how things were.

... when I try to uninstall the update using the following command:

java -jar C:\ColdFusion2018\cfusion\hf-updates\hf-2018-00012-328566\uninstall /uninstaller.jar

The command prompt returns the following error: 

Error: Unable to access jarfile C:\ColdFusion2018\cfusion\hf-updates\hf-2018-00012-328566\uninstall

The result of a typographical error: you mistakenly typed a space character between "uninstall" and "/uninstaller.jar".

I was able to uninstall the update manually by stopping the CF service, deleting the jar file and copying the files and folders back to the instance root directory.  

This kind of manual "Uninstall+Reinstall" can cause problems at the best of times. For example, you might inadvertently uninstall/reinstall using a Java installation different from the one ColdFusion runs on. You could also miss adding or changing certain registry settings. You yourself have mentioned yet another possible source of problems: process and path permissions.

It is difficult, if not impossible, for a human to keep track of all the vital processes necessary during an Uninstall+Reinstall. Hence the need for installers.

Which brings me to my suggestion: use the updating tool in the ColdFusion Administrator to upgrade from Update 11 to Update 12. Before you do, check all your logs to make sure there are no show-stopping errors. Remember to also check the connector logs ( C:\ColdFusion2018\config\wsconfig\[MAGIC_NUMBER]\isapi_redirect.log ).

Alberto, a few questions to try to help (or reach out for direct help in a consulting session):

• Had you or anyone there applied the auto lock down tool (new, and optional in cf2018)? If so, it imposes significant changes to permissions all over the place.
• How did you apply the update, in the cf admin or from the command line?
• Have you made a request (for a page via iis) on the server? Did it show more details? (If not, the iis settings for "error pages" may be hiding actual iis error details.) And I would wonder if the problem is in the request for the jakarta/isapi_redirect.dll that is called concurrently with any cfm page. If so, check the permissions for THAT for the iis app pool identity, or iis site anonymous user identity.

To be clear, I'm not aware of anything special about this update 12 that would cause your problems, but my first question may be why ANY update could have permissions issues.