Re: Problems with IIS6 and ASP and COM+

From: jokes54321 (jokes54321_at_nospam.com)
Date: 11/14/03 

Date: Fri, 14 Nov 2003 10:33:43 -0700

Okay, I was able to get our ASP page to call our COM+ components while
running in IIS6 isolation mode, but I had to change the Identity of the
application pool to run as a Local System account instead of the Network
Service account. I think this pretty much narrows the problem down to
permissions. I'm at a loss as to what permissions I need to set.

In component services under COM+ Applications I found my component's
application ID. Then I went down to DCOM Config and found that application
id and I granted the Network Service launch permissions for that component,
but it still isn't working. What tools can I use to determine what's trying
to be accessed when our ASP page tries to create that object? I'd imagine
that if I could at least find that info I could grant the appropriate
permissions on all the objects.

Thank you,

Denny

"jokes54321" <jokes54321@nospam.com> wrote in message
news:OUTeiNkqDHA.488@tk2msftngp13.phx.gbl...
> I posted this question earlier and apologize for posting it again but the
> problem is slightly different being I started over.
>
> 1) I setup a new webserver with Windows 2000 and IIS 5.
> 2) Copied over our web pages from the server we want to retire
> 3) Created the website in the IIS admin
> 4) Installed the COM+ components from the remote server
>
> Everything worked great so I upgraded the server to Windows Server 2003.
>
> After the upgrade everything still works great, however it's running in
IIS
> 5 isolation mode. I unchecked that box and now the ASP pages cannot create
> the COM+ objects. I found the MS article 810564 and did what I thought I
> should do but it is still not working.
>
> Can anyone offer more grainular instructions? The COM+ components were
> written in VB6 and are hosted on a Windows 2000 server. All of these
servers
> are members of our AD domain running in mixed mode.
>
> Do I need to make any changes to the COM+ server or will everything I need
> to do be on the IIS6 server?
> Do I need to grant NTFS read/execute permissions on any particular DLL's?
> Whom do I grant these permissions to, local accounts or domain accounts?
>
>
> Thanks in advance for any help..
>
> Denny
>
>

Relevant Pages

  • AW: ASP Dot Net Security Guidelines
    ... Betreff: Re: ASP Dot Net Security Guidelines ... Basically you'll treat an asp.net application server as you would an asp ... > to set the permissions as it brings up access denied errors on the ...
    (Focus-Microsoft)
  • RE: Error
    ... Are you able to browse to asp pages if you set the Application protection ... It sounds like there is some permissions issue on the server. ...
    (microsoft.public.inetserver.iis)
  • Re: FolderExists and UNC path
    ... Traditionally ASP uses the IUSR_account so try mapping a drive using that username and password or assigning permissions to that account or changing to a different one if you don't know or can't change the password. ... When I ran this command from the server logged with my user it ...
    (microsoft.public.scripting.vbscript)
  • Re: Migrating form NT server site to 2003 server site
    ... > If copy the home directory for the site to the new server and change the ... > Some other documents are in web shared folders, ... The site consists of static pages and classic ASP pages. ... > permissions for web authors for the site and on FP subweb. ...
    (microsoft.public.frontpage.programming)
  • Re: write with cURL
    ... execute permissions. ... of potential security risks from other users on the same server. ... I made this suggestion because their web host appears to run Apache ... risk to allow Apache's group write access, since all PHP scripts ran ...
    (alt.php)