IIS Server Security - Error Using Perfmon after IISLockdown with URLScan

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > November 2004 > Error Using Perfmon after IISLockdown with URLScan





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Error Using Perfmon after IISLockdown with URLScan
Ralf

2004-11-19, 2:48 am

Hello,

we use IISLockdown with urlscan to protect our IIS 5.0.
But now every time we start perfmon (Total Processor use) we get an error

The configuration information of the performance library
"C:\WINNT\system32\w3ctrs.dll" for the "W3SVC" service does not match the
trusted performance library information stored in the registry. The
functions in this library will not be treated as trusted.

We implemented the solution of http://support.microsoft.com/kb/267831.
Now it works fine.

But my question is, does this Workaround any changes undone which are
implemented by IISLockdown and URLScan. And is the IIS now nonsecure.

Thanks Ralf

Bernard

2004-11-19, 7:47 am

Nope, that is just reloading the perfmon counter.
Not really related to URLSCAN.

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



"Ralf" <Ralf@discussions.microsoft.com> wrote in message
news:A8B4B3FE-F0D9-4785-BAC1-102AB8336345@microsoft.com...
> Hello,
>
> we use IISLockdown with urlscan to protect our IIS 5.0.
> But now every time we start perfmon (Total Processor use) we get an error
>
> The configuration information of the performance library
> "C:\WINNT\system32\w3ctrs.dll" for the "W3SVC" service does not match the
> trusted performance library information stored in the registry. The
> functions in this library will not be treated as trusted.
>
> We implemented the solution of http://support.microsoft.com/kb/267831.
> Now it works fine.
>
> But my question is, does this Workaround any changes undone which are
> implemented by IISLockdown and URLScan. And is the IIS now nonsecure.
>
> Thanks Ralf
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com