Help: ISAPI DLL cannot reach DCOM appserver (access denied)

nicola.farina_at_info-line.it
Date: 02/01/05 

Date: 1 Feb 2005 07:48:54 -0800

Hello all

I am desperately looking for help on this problem.
(I hope this is the right ng, if not sorry and please let me know which
can be the right one)

We have an ISAPI dll which connects to a DCOM application server in
this
scenario:

IIS (5.0 on W2K server machine, not PDC, joined to the main domain) is
configured with Integrated Security and Anonymous access disabled

A domain group (say "JOBWEB_GROUP") was created to collect all the
domain users that should be able to use the procedure.
These users are all domain users (not local users of the IIS server).

The application server runs on the same machine of IIS

In DCOMCNFG the application server has an identity associated ("this
user" option which is an administrator) and in launch/access permission
there is JOBWEB_GROUP

The problem is that all works only if JOBWEB_GROUP is included in
"local
administrator group".
If JOBWEB_GROUP is not included in administrators we got "Access
denied"
Obviously it is not desired to let JOBWEB_GROUP in administrator for
security reasons. So we need to determine which particular access right
is missing when users are not administrators

I tried to monitor with Regmon, Filemon (sysinternals) but I see no
obvious failure.
I also tried audit logon events, object access, privilege use (as in MS
articole 269330) but event viewer shows no errors.

What else can I do???
Any help will be very appreciated!
Thanks in advance
Bye
Nicola

Relevant Pages

  • Re: Problem with connect computer wizard
    ... You mentioned that you're using Anonymous access with Administrator ... Open ConnectComputer properties in IIS. ... And there is only the DNS server be configured on client ...
    (microsoft.public.windows.server.sbs)
  • Re: 2003 server hangs at Applying Computer Settings - Cant login
    ... Or maybe the server was configured to auto-login the administrator -- and ... has always been catestrophic and requires reinstalling IIS. ... > accounts still loaded in memory, and therefore Exchange and other services ...
    (microsoft.public.windows.server.general)
  • Re: FrontPage Extension
    ... Even though others may not recommend it, I always uninstall the FP 2000 SE before I install the FP 2002 SE ... - In Add/Remove Windows Components select IIS and in details unselect the FP 2000 SE ... Test it by opening FP and your FP 2002 SE server based web using File Open site and entering http://localhost/ ... The administrator program is too old to old to ...
    (microsoft.public.frontpage.extensions.windowsnt)
  • I cannot publish to our WebServer running IIS 5 from FrontPage 2003.
    ... I cannot publish to our WebServer running IIS 5 from FrontPage 2003. ... Windows SharePoint Services site files. ... Running Virtual Server version 5.0.2.4330 as seen in SharePoint ... I logon as the Webserver Administrator when setting up site and subsite in ...
    (microsoft.public.frontpage.client)
  • user cannot access the server
    ... is from Dell. ... All of the machines can access the server as administrator ... and domain users except for one machine. ...
    (microsoft.public.windowsxp.security_admin)