IIS Out of Process Pooled Applications Security



Good Afternoon,

Recently one of the following windows updates / hotfixes for my Windows 2000
Server, altered the security settings of my "IIS Out of Process Pooled
Applications" COM object. This caused my web server to stop working...

The account that was displayed was the IWAM_machine account, I noted that
the username was present, but not the password with ******** in the field
under it. In calling for software support for my third party web
application, they altered the user account to be "Interactive User" (One
Logged in to the Computer).

Here are my questions:

1) What hotfix would have affected the setting or password?

2) Is there anything wrong in making the security for Out of Process Pooled
Applicaitons as the "Interactive User"?

3) If the user really should be the IWAM account, how do I sync the IWAM
account password with the COM object so that the password is present in the
fields?

4) Is there greater security in having the user as the interactive or as the
IWAM account?

5) Making it the interactive user account, does this mean that someone with
rights to run the COM service, needs to log into the machine, and remain
logged in at all times? (In the past I could just reboot the server, and
leave it at the logon screen no user was required to log in.)

----

Windows updates - After the reboot the IIS Out of Process Pooled applicaiton
service would not start, I got event 36 for the server failing to load
'/LM/W3SVC/1/ROOT', the error was the "Server Execution Failed".

Attempting to start the service in COM Services, resulted in an error 80080005

Thanks
J

Here is the list of fixes:

KB
--
890830 - Mal Software Removal Tool
911564 - Media Player Plugin Update
829019 - .NET Framework 2.0
900725 - Security Updates for W2K
905749 - (same)
908519 - (same)
899589 - (same)
912919 - (same)
901017 - (same)
904706 - (same)
908523 - (same)
896424 - (same)
902400 - (same)
905414 - (same)
905915 - Cumulative Update for IE6 SP1
905495 - Security Update for IE6 SP1
904368 - Update for W2K
.



Relevant Pages

  • Re: write with cURL
    ... you can stop making excuses. ... Part of Jerrys' security is not letting you on his server... ... up an account for you, process the billing, etc. ...
    (alt.php)
  • RE: New Update for #70-299
    ... > Segment A contains a single server named TestKing1. ... > Segment B contains all other computers, ... > TestKing?s written security policy states that Segment B ... > Updates on all computers in Segment B to use ...
    (microsoft.public.cert.exam.mcse)
  • Re: write with cURL
    ... you can stop making excuses. ... up an account for you, process the billing, etc. ... possible features from a web site to make up for the security issues. ... Nothing you have told me shows me you know how to lock down a server ...
    (alt.php)
  • Re: write with cURL
    ... It takes time to set up an account for you, process the billing, etc. ... Sorry, my servers are secure. ... Nothing you have told me shows me you know how to lock down a server so that it is secure - other than to use the server's file security. ...
    (alt.php)
  • Re: Error 10061, 0x800ccc0e, bug?
    ... It's definitely the April Windows update!!!! ... Checked program files after restore and the updates are gone and OE is ... receive mail after changing account in windows. ... Mike, the error indicates that you are failing to connect to the server, ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)