VB.Net application query

Question

VB.Net application query

Chacko, Santhosh 10

Hi,

One of the Application user lost his Admin access on one VB.Net application.

No admin settings defined in db tables. Nothing set up in web. config. Can't find the reason.

We have no Visual studio/Asp.net installed on the server. Can only open in aspx/master file in Notepad.

Any help appreciated

Thanks

Santhosh Chacko

Senthil kumar 2,410 Reputation points

2026-06-22T13:15:25.3233333+00:00

Hi @Chacko, Santhosh

I am ready to help with you. share your issue.

Thanks.
Chacko, Santhosh 10 Reputation points

2026-06-22T13:21:53.3633333+00:00

Hi,

One of the Application user lost his Admin access on one VB.Net application.

No admin settings defined in db tables. Nothing set up in web. config. Can't find the reason.

We have no Visual studio/Asp.net installed on the server. Can only open in aspx/master file in Notepad.

Any help appreciated

Thanks

Santhosh Chacko
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Senthil kumar 2,410 Reputation points

2026-06-22T13:23:39.2166667+00:00

Hi @Chacko, Santhosh

you have any cs or vb file extensions. just confirm.
Senthil kumar 2,410 Reputation points

2026-06-22T13:26:05.26+00:00

dont share any code. just share the screenshots will check from here. any keywords are you able to sql or db like that.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

9 answers

Your answer

Senthil kumar 2,410 Reputation points

2026-06-22T13:15:25.3233333+00:00

Hi @Chacko, Santhosh

I am ready to help with you. share your issue.

Thanks.
Chacko, Santhosh 10 Reputation points

2026-06-22T13:21:53.3633333+00:00

Hi,

One of the Application user lost his Admin access on one VB.Net application.

No admin settings defined in db tables. Nothing set up in web. config. Can't find the reason.

We have no Visual studio/Asp.net installed on the server. Can only open in aspx/master file in Notepad.

Any help appreciated

Thanks

Santhosh Chacko
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Senthil kumar 2,410 Reputation points

2026-06-22T13:23:39.2166667+00:00

Hi @Chacko, Santhosh

you have any cs or vb file extensions. just confirm.
Senthil kumar 2,410 Reputation points

2026-06-22T13:26:05.26+00:00

dont share any code. just share the screenshots will check from here. any keywords are you able to sql or db like that.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Answer 1

Chacko, Santhosh 10

Hi @Senthil kumar

Its vb.

Also master pages created for this applicaiton

Thanks

Santhosh

0 comments

Answer 2

Chacko, Santhosh 10

@Senthil kumar

The application user suddenly lost his admin access. No admin setup maintained in db or in config file. We have access to the aspx files, but can't troubleshoot the issue as no visual studio dotnet installed in the server.

Thanks

Santhosh

Senthil kumar 2,410 Reputation points

2026-06-22T17:50:05.32+00:00

No issue. share login page apsx file screenshot. will check here.
Chacko, Santhosh 10 Reputation points

2026-06-24T16:17:19.46+00:00

master page

Answer 3

Senthil kumar 2,410

Hi @Chacko, Santhosh

Ok, are you able to see web config file. if available share screenshot suppose any password is there just blur it and share .

0 comments

Answer 4

Danny Nguyen (WICLOUD CORPORATION) 8,725 Microsoft External Staff Moderator

Hi @Chacko, Santhosh ,

Visual Studio not being installed on the server is not likely the cause here.

For a VB.NET / ASP.NET Web Forms app, admin access may be checked from the code, compiled DLLs in the bin folder, web.config, database tables, or Windows/AD groups.

Since only one user lost admin access, I suggest comparing this user with another user who still has admin access:

Check all web.config files, including any inside subfolders, for authorization or role settings.
Check whether the app uses ASP.NET Membership/Roles tables, such as aspnet_Roles or aspnet_UsersInRoles.
Check whether the user was removed from any Windows/AD security group.
Check if there was any recent deployment, database restore, or user account change.

If there are no .vb files on the server, the main logic may already be compiled into DLLs in the bin folder, so checking only .aspx / .master files may not show where the Admin role is decided.

For reference, you can check these docs: Control authorization permissions in ASP.NET Membership in ASP.NET Web Forms

In short, find where the app decides the user is an Admin, then compare the affected user with a working admin user.

If you found my response helpful or informative, I would greatly appreciate it if you could follow this guidance or provide feedback.

Thank you.

Danny Nguyen (WICLOUD CORPORATION) 8,725 Reputation points Microsoft External Staff Moderator

2026-06-24T09:25:06.3933333+00:00
Hi @Chacko, Santhosh

From the screenshot, I see connection strings and general ASP.NET settings. I do not see clear authentication, authorization, membership, or roleManager settings here.

So the Admin access check is likely handled somewhere else, such as:

Application code / compiled DLLs in the bin folder

Database tables or stored procedures

Another web.config file under a subfolder

Windows / AD group membership, if Windows authentication is used

Please also avoid sharing full connection strings, usernames, or passwords publicly.

If possible, I suggest finding where the application decides whether the user is Admin.
Chacko, Santhosh 10 Reputation points

2026-06-24T13:16:19.5+00:00

Hi @Danny Nguyen (WICLOUD CORPORATION)

This is the master page. From here the user directed to the home page. If the user has admin privileges then he can see an additional section. That's the session he misses now. Thanks
Danny Nguyen (WICLOUD CORPORATION) 8,725 Reputation points Microsoft External Staff Moderator

2026-06-25T10:07:53.32+00:00

Thanks, this screenshot helps.

The master page already contains the admin menu: asp:Menu ID="AdminHome" with items like Add, Edit, Delete. So the admin section is not missing from the .master file.

If the user cannot see it, the menu is likely being hidden or enabled/disabled from the code-behind, because the page points to:

CodeBehind="Ordering.master.vb"
Inherits="WebApplication1.Ordering"

Please check the original Ordering.master.vb source code, or the compiled DLLs in the bin folder if the .vb file is not on the server.

Search for things like:

AdminHome.Visible
Session
Admin
Role
Privilege
IsInRole

Also compare this user with another working admin user in the database or AD group membership.

Based on this screenshot, the next key check is the code-behind logic that decides whether AdminHome should be visible.
Nancy Vo (WICLOUD CORPORATION) 8,155 Reputation points Microsoft External Staff Moderator

2026-06-29T02:24:04.9166667+00:00

Hi @Chacko, Santhosh,

I wonder if there is any update on this post. If you have any question, feel free to reach out. I'm happy to support you.
Chacko, Santhosh 10 Reputation points

2026-06-29T08:10:51.7433333+00:00

Hi @Nancy Vo (WICLOUD CORPORATION)

No updates. Still the issue persists. User can still not able to see the admin stuff

Thanks

Santhosh
Nancy Vo (WICLOUD CORPORATION) 8,155 Reputation points Microsoft External Staff Moderator

2026-06-30T10:38:10.4533333+00:00
Hello @Chacko, Santhosh ,

I'm Nancy, a colleague of Danny. I answer on behalf of Danny as he is out of office for the next few days

Based on your screenshots and the application's architecture, this VB.Net application is highly likely using the built-in ASP.NET Membership and Role Provider system to manage admin privileges. The code that hides your <asp:Menu ID="AdminHome"> is secretly checking a configuration file to see where the list of allowed admins is stored.

To find out why this specific user lost access, we need to locate that connection. Please open your main web.config file in Notepad and search for any of the following tags:

<roleManager>

<membership>

<authentication>

Once you find the <roleManager> section, it will tell you where the application stores its admins.

If it points to Active Directory (for ex: AspNetWindowsTokenRoleProvider): The application relies on your company's network groups. The user was likely removed from a Windows Security Group. Your IT/Network team will need to add them back to the correct admin group.

If it points to a SQL Database (for ex: SqlRoleProvider): The application is using hidden Microsoft system tables, which is why you didn't see the admin settings in your normal tables. Look in your database for tables starting with aspnet_ (specifically aspnet_UsersInRoles). You will need to map the user's ID back to the Admin Role ID in that specific table.

I hope this addresses your question. If any part of this explanation helped address your question, please consider following the guidance to provide feedback. Thank you for your patience.
Danny Nguyen (WICLOUD CORPORATION) 8,725 Reputation points Microsoft External Staff Moderator

2026-07-02T03:06:14.6066667+00:00

Hi @Chacko, Santhosh ,

Since this thread has been open for some time and there hasn't been any new information recently, I'll go ahead and close it for now.

If you have any updates, new findings, or need further assistance, please feel free to come back and continue the discussion. We'll be happy to help.

Thank you for your time and participation.

Answer 5

Chacko, Santhosh 10

@Senthil kumar

User's image

Senthil kumar 2,410 Reputation points

2026-06-24T08:32:28.8133333+00:00

Here i able to see database connection username and password. if you have access the database check the n table names like user or login, their check any admin rights provided to particular users. suppose not available open login.aspx or user.aspx file check their any admin rights given for particular users.
Chacko, Santhosh 10 Reputation points

2026-06-24T13:15:48.2133333+00:00

This is the master page. From here the user directed to the home page. If the user has admin privileges then he can see an additional section. That's the session he misses now. Thanks