RE: IIS 6.0 COM App cant write to event log

From: Robb Murdock (rmurdock_at_luxortech.com)
Date: 10/27/03 

Date: Mon, 27 Oct 2003 10:05:46 -0800

Wei-Dong:

I really appreciate your help on this issue.

Here's the scenario.

I have written an ActiveX DLL.
I have created a WSDL from it using the SOAP Toolkit.
I have Installed SOAP 3.0 on the web server.
I have registered the WSDL extension to point to the
SOAPIS30.DLL
I have set up the ananomous user for the site to be a
local user with USER privledges.
I have set an Application Pool with the same user (also
adding that user to the IIS_WPG).

When I connect from a SOAP client, my ActiveX DLL starts
and works just fine, except that any writes to the Event
log are ignored.

If I also add the local user to the Administration group,
then it will write.

I tried chaning the web server to IIS 5.0 Isolation mode;
but that made no difference. I don't think I would want
to do that anyway as I would like to take advantage of the
IIS 6.0 features.

The app needs the ability to write to the event log in
order to track should-not-occur conditions. I can't leave
the user as part of the administration group and get
passed a security audit; nor can I wait till an error
occurs and then switch to the administration privledges
and expect the use to re-create the condition so I can get
a trace.

Can you think where I might be able to look next to figure
this out ?

THanks,

Robb Murdock
>-----Original Message-----
>Hi Robb,
>
>Thank you for replying!
>
>It will be appreciated you tell me which kind your ISAPI
dll is: ISAPI Filter or ISAPI Extension.
>
>For the filter, there is two kb articles may help you
some on this issue. Please go to:
>327611 IIS 6.0: ISAPI Filters for Earlier Versions of IIS
May Not Load
>http://support.microsoft.com/?id=327611
>
>317204 IIS 6.0: ISAPI Filter Loads After First Request to
the Web Site
>http://support.microsoft.com/?id=317204
>
>If the issue remains, I'd suggest you tell me more about
the scenario for this issue.
>
>Please feel free to let me know if you have any questions.
>
>Thank you for using Microsoft NewsGroup!
>
>Wei-Dong Xu
>Microsoft Product Support Services
>Get Secure! - www.microsoft.com/security
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>
>.
>

Relevant Pages

  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... culprits whenever IIS is not behaving the way it should. ... It sounds like the ISAPI Filter is doing one standard Custom ... back a HTML page that POSTs the username/password back to the server. ... Account: COMPUTERNAME\ACCOUNTNAME Access type: FULL ...
    (microsoft.public.inetserver.iis.security)
  • An exercise to exploit IIS ISAPI filter
    ... I began curious how they manage to reproduce around the Internet ... The filter is used by IIS on Window ... Service Manager,choose properties, then ISAPI Filter and from here you can ... An Access violation exception happen when IIS filter handling the ...
    (Vuln-Dev)
  • Re: Using IIS ISAPI filters on ISA 2000 as web filters
    ... that works wonderfully in IIS. ... configure an IIS ISAPI filter to act as a "webfilter" within the ... that intercepts HTTP requests and lets you authenticate ... >> Activate filter code ...
    (comp.security.firewalls)
  • Re: Using IIS ISAPI filters on ISA 2000 as web filters
    ... that works wonderfully in IIS. ... configure an IIS ISAPI filter to act as a "webfilter" within the ... that intercepts HTTP requests and lets you authenticate ... >> Activate filter code ...
    (comp.security.firewalls)
  • Re: Web Svc VS remote component hosted in IIS
    ... There is nothing that says SOAP is used only over port 80. ... IIS listens on ... > Why would anyone use SOAP formatter with Remoting? ...
    (microsoft.public.dotnet.languages.csharp)
Quantcast