Re: IIS 5.1 (XP Pro) XML Security Issue

From: Paul Lynch (paul.lynch_at_nospam.com)
Date: 01/14/04 

Date: Wed, 14 Jan 2004 13:21:36 +0000

On Wed, 14 Jan 2004 00:21:08 -0800, Richard Stewart
<stewbier@hotmail.com> wrote:

>I am running IIS 5.1 on XP Pro and running into an issue with an asp page this is trying to create an XMLDOM (see code snippet below). I get an error that object is required. After quite a bit of trial and error I think it is a security issue. If I change the IIS App to logon with windows (not anonymous), it works fine. It also works fine if I set the anonymous user to Administrator (or normal user for that matter). I have the same app running on Win 2003 and was running it on Win 2K and never had troubles. What security permission do I need to give the I_USR account to make it work (using msxml3 by the way) or do I need to abandon I_USR and make a new one? Thanks in advance, going on the third day of guessing here.
>
>Code Snippet:
>set XMLDoc = Server.CreateObject("Microsoft.XMLDOM")
>XMLDoc.async = false
>XMLDoc.load ("http://v105-richard/AssetManager/dev/assetupload.xml")
>device = xmlDoc.DocumentElement.selectSingleNode("param[@id='device']").Text

Richard,

Its not a security issue, its a permissions problem. I'm guessing that
your IUSR_ account doesn't have the necessary access to to the MSXML
dll files (possibly) but you can verify this by using Filemon.

This KB article explains how :

HOWTO: Track "Permission Denied" Errors on DLL Files
http://support.microsoft.com/?id=286198

Regards,

Paul Lynch
MCSE

Relevant Pages

  • License logging, fax service will not start: Access denied???
    ... AUTHORITY\NetworkService" account? ... I still can 't open Sharpoint or the ... > The access denied message usually indicates a permissions problem someplace. ... > just start filemon and start the service then stop filemon and save the ...
    (microsoft.public.windows.server.sbs)
  • Re: Server Application Unavailable
    ... had some permissions problem a few weeks ago that I managed to fix. ... and over produces no record of a problem in the event log. ... directory allow access to the configured account. ... That user must have permissions on quite a few folders to get things to ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Error in Web Application accessing a Starcos Smartcard
    ... If you suspect a permissions problem, try enabling auditing and see which ... Keep in mind that the IWAM account and NOT the IUSR account is being used to ... > function opens the connection to the card reader on the serial port COM1. ...
    (microsoft.public.win2000.security)
  • Re: Error in Web Application accessing a Starcos Smartcard
    ... If you suspect a permissions problem, try enabling auditing and see which ... Keep in mind that the IWAM account and NOT the IUSR account is being used to ... > function opens the connection to the card reader on the serial port COM1. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Error in Web Application accessing a Starcos Smartcard
    ... If you suspect a permissions problem, try enabling auditing and see which ... Keep in mind that the IWAM account and NOT the IUSR account is being used to ... > function opens the connection to the card reader on the serial port COM1. ...
    (microsoft.public.security)