Re: IIS5/COM permissions problem

From: Andy (amitchell_at_remove_casey.vic.gov.au)
Date: 11/07/05


Date: Mon, 7 Nov 2005 22:29:34 +1100

X-posted to security related newsgroups in the hope that someone can help
out.

Thanks
Andy.

Andy Mitchell wrote:
> Hi,
> I've recently had to do a full restore of our Windows 2000 IIS5
> server (used for an intranet). All files and the full system state
> (including IIS metadata) was recovered. The server is a member of a
> Windows Server 2003 AD domain.
>
> Since the restore, any user attempting to access any asp page that
> uses COM components (server.createobject.....) gets a 500 internal
> server error. Turning off friendly errors gives the following:
> Server object error 'ASP 0177 : 8002801d'
>
> Server.CreateObject Failed
>
> //global.asa, line 146
>
> Library not registered.
>
>
>
>
>
> Line146 is:
>
> Set saveLogObject=Server.CreateObject("Scripting.FileSystemObject")
>
> IIS is configured to use integrated authentication and if I make the
> user in question a member of the Administrators group on the server
> the applications work fine. Based on this, it would appear that the
> library is registered correctly.
>
>
>
> Does anyone have any clues as to where I should start looking? It
> looks like a COM+ permissions issue, but I'm not sure where to start
> looking.
>
>
> TIA
>
> Andy.

-- 
Kwyj 


Relevant Pages

  • Re: IIS5/COM permissions problem
    ... > server. ... > (including IIS metadata) was recovered. ... > server error. ... > user in question a member of the Administrators group on the server ...
    (microsoft.public.win2000.security)
  • Re: IIS5/COM permissions problem
    ... > server. ... > (including IIS metadata) was recovered. ... > server error. ... > user in question a member of the Administrators group on the server ...
    (microsoft.public.windows.server.security)
  • IIS Metadata backup with additional SID information.
    ... I have a server running Windows 2003 and IIS6. ... I created a backup of ... the IIS Metadata using the IISBack.vbs script located in to ... Is there a way to save the SID information to a file and later be able ...
    (microsoft.public.windows.server.migration)
  • Re: KRB Error
    ... There is so much that can be done with a security template that wouldn't be obvious from any common interface that the best bet would be to identify what changes were made. ... > party vendor was used to harden security on this server and another ... > both members of Domain A. Another member server on Domain A did not> have ... >>> Member servers on Domain A cannot access resources on Domain B. ...
    (microsoft.public.win2000.active_directory)
  • Re: KRB Error
    ... party vendor was used to harden security on this server and another ... both members of Domain A. Another member server on Domain A did not have ... back of my brain about differences with Authenticated Users from Windows ... Member servers on Domain A cannot access resources on Domain B. ...
    (microsoft.public.win2000.active_directory)