Re: "Msxml2.ServerXMLHTTP.4.0" Access denied

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 02/06/05 

Date: Sat, 5 Feb 2005 19:57:26 -0700

Resultant set of policy is not a W2k era feature. It was first introduced
with the XP client and is supported in W2k3. You would need to attempt
this on a machine at current OS release levels.

An application should not dictate administrative policy of a Windows
infrastructure. Instead application designers should be able to function
within the infrastructure's administrative policies as they find it.
That said, the RSoP only lets one see what the current settings are.
It is not used to change them. You could use their directions for adjusting
setting levels and assume your environment is correctly configured so
that they are effective (after whatever propagation delays may be
involved.). 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Wendy Elizabeth" <WendyElizabeth@discussions.microsoft.com> wrote in
message news:3E3450BE-B9D0-42F6-B927-2629E751A574@microsoft.com...
> I am trying to test a classic ASP application from my workstation and have
it
> communite with a secure website within the company. Right before the call
to
> the secure website, when trying to use the "Msxml2.ServerXMLHTTP.4.0"
> component. The error number that > >shows up is: -2147024891.
> > >The error description is: "Access is denied".
>
> I then tried the following from the following download site:
>
>
"http://msdn.microsoft.com/library/default.asp?url=/downloads/list/xmlgenera
> >l.asp"
> >url to download MSXML 4.0 Service Pack 2 (This is the service pack 2
release
> >of Microsoft XML Core Services (MSXML) 4.0, formerly called the Microsoft
> >XML Parser. This version has a number of improvements compared to MSXML
> >3.0.)
> >
> >I read the release notes and I completed the steps up until "Resultant
Set >of Policy".
> >" Security tightened when posting data using the ServerXmlHttp object
>Security in the implementation of the MSXML 4.0 SP2 ServerXmlHttp object
has >been enhanced to check the Internet Explorer security policy setting
for >submitting non-encrypted form data. A security policy setting of
"Disable" >or "Prompt" for the "Submit nonencrypted form data" option will
result in an >"Access Denied" error message when attempting to post form
data using the
> >ServerXmlHttp object. This is a change that can potentially break
existing >code that uses earlier versions of the ServerXmlHttp object (such
as prior
> >released versions of both MSXML 3.0 and MSXML 4.0) to post form data when
>the Internet Explorer security policy setting for submitting non-encrypted
> >form data is not enabled.
> >
> >To configure Internet Explorer security to allow submitting nonencrypted
>form data for all users on a computer, do the following in Windows 2000 and
>later:
> >
> > From the Start menu, click Run, type "mmc" and then press ENTER.
> > From the File menu, select Add/Remove Snap-In.
> >In Add/Remove Snap-In, click Add.
> >In Add Standalone Snap-In, from the list of available snap-ins, scroll to
> >Resultant Set of Policy and select it, and then click Add. >The Resultant
Set of Policy Wizard appears."
> >
> >The "Resultant Set of Policy" never appeared in the dropdown list. Thus,
I >was not able to complete this step.
>
> I checked the installs for Windows 2000, and the Resultant Set of Policy
was
> not an optional component to add.
>
> Thus, what would you suggest I do?

Relevant Pages

  • Re: My Documents redirect stopped working on one user profile.
    ... So I'm guessing that My Documents redirection Group Policy is not getting ... When something is disabled usually means the some group policy is ... Resultant Set of Policy or run gpresult from cmd. ... There is also a registry setting for folder redirection. ...
    (microsoft.public.windows.server.sbs)
  • Re: Win XP - Explorer
    ... snap in 'Resultant Set of Policy' will enable me to assign different ... > setting up fine-grained permissions is complicated. ... > do a lot of reading. ...
    (microsoft.public.windowsxp.general)
  • Re: User GPOs getting applied to all users on a system
    ... If you are using Windows 2003 try running the Resultant Set of Policy for ... the computer/user that is having unexpected policy applied to them to see ... until a user from OU 2.A logs into a machine commonly ...
    (microsoft.public.windows.group_policy)
  • RSoP Error
    ... Using resultant set of policy, and one computer always gives an error under ... "Computer Configuration": ... "Security processed successfully but failed to log resultant set of policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: Can a GPO be applied to a "machine" without the user logging in?
    ... Group Policy is applied to the computer at boot. ... Resultant Set of Policy is determined by the location of the computer ... account in the Active Directory ... ...
    (microsoft.public.windows.group_policy)