|
Home > Archive > IIS Server Security > April 2004 > [IIS5] Application Server Error on ASP pages in pooled or isolated mode
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
[IIS5] Application Server Error on ASP pages in pooled or isolated mode
|
|
| Florian Zimmermann 2004-04-26, 5:34 am |
| Hi everyone,
we see the Application Server Error whenever we call an ASP page on our
server lately. This happens when the application mode for the web is pooled
or isolated. As I figured out by now, this should be related somehow to a
security problem.
What we did to solve the problem so far:
- We tried the often talked about IWAMSYNC.VBS article
- We checked the kb article discussing the configuration of the needed ntfs
security
- IWAM has launch-permission in the standard dcomcnfg security dialog
- lots of searching on google
As nothing has helped so far, did anyone envounter that problem so far and
found a solution that was not related to iwamsync.vbs?
The eventlog entries we see are:
Ereignistyp: Warnung
Ereignisquelle: W3SVC
Ereigniskategorie: Keine
Ereigniskennung: 36
Datum: 26.04.2004
Zeit: 08:51:22
Benutzer: Nicht zutreffend
Computer: 025-ST
Beschreibung:
Der Server konnte Anwendung '/LM/W3SVC/XXX/ROOT/scripts' nicht laden. Fehler
'Starten des Servers fehlgeschlagen
'.
Weitere Informationen zu dieser Meldung finden Sie auf der
Microsoft-Onlinesupportsite: http://www.microsoft.com/contentredirect.asp.
Ereignistyp: Fehler
Ereignisquelle: DCOM
Ereigniskategorie: Keine
Ereigniskennung: 10010
Datum: 26.04.2004
Zeit: 08:51:22
Benutzer: NT-AUTORITÄT\SYSTEM
Computer: 025-ST
Beschreibung:
Der Server "{3D14228D-FBE1-11D0-995D-00C04FD919C1}" konnte innerhalb des
angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Thanks for your time
Florian
| |
| Ken Schaefer 2004-04-26, 11:34 pm |
| Please see:
http://support.microsoft.com/?id=327153
PRB: ASP Pages Do Not Process and DCOM Event 10010 Appears in System Log
Also, you can try one of the German language groups. Otherwise if you wish
to post here, can I suggest you also try to translate the error messages in
addition to posting them? Thankyou.
Cheers
Ken
"Florian Zimmermann" <florian@domplatz1.de> wrote in message
news:%23xsHTC3KEHA.268@TK2MSFTNGP11.phx.gbl...
: Hi everyone,
:
: we see the Application Server Error whenever we call an ASP page on our
: server lately. This happens when the application mode for the web is
pooled
: or isolated. As I figured out by now, this should be related somehow to a
: security problem.
: What we did to solve the problem so far:
: - We tried the often talked about IWAMSYNC.VBS article
: - We checked the kb article discussing the configuration of the needed
ntfs
: security
: - IWAM has launch-permission in the standard dcomcnfg security dialog
: - lots of searching on google
:
: As nothing has helped so far, did anyone envounter that problem so far and
: found a solution that was not related to iwamsync.vbs?
:
: The eventlog entries we see are:
: Ereignistyp: Warnung
: Ereignisquelle: W3SVC
: Ereigniskategorie: Keine
: Ereigniskennung: 36
: Datum: 26.04.2004
: Zeit: 08:51:22
: Benutzer: Nicht zutreffend
: Computer: 025-ST
: Beschreibung:
: Der Server konnte Anwendung '/LM/W3SVC/XXX/ROOT/scripts' nicht laden.
Fehler
: 'Starten des Servers fehlgeschlagen
: '.
: Weitere Informationen zu dieser Meldung finden Sie auf der
: Microsoft-Onlinesupportsite: http://www.microsoft.com/contentredirect.asp.
:
: Ereignistyp: Fehler
: Ereignisquelle: DCOM
: Ereigniskategorie: Keine
: Ereigniskennung: 10010
: Datum: 26.04.2004
: Zeit: 08:51:22
: Benutzer: NT-AUTORITÄT\SYSTEM
: Computer: 025-ST
: Beschreibung:
: Der Server "{3D14228D-FBE1-11D0-995D-00C04FD919C1}" konnte innerhalb des
: angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
:
: Thanks for your time
:
: Florian
:
:
| |
| Florian Zimmermann 2004-04-27, 5:34 am |
| Hi Ken
> Please see:
> http://support.microsoft.com/?id=327153
> PRB: ASP Pages Do Not Process and DCOM Event 10010 Appears in System Log
thanks for the feedback. The article contains the error messages in english
that we see, unfortunatly the solution did not help for us. The funny thing
is: if we put the IWAM User in the admin group, all is running (of course
not a real-life solution), if we remove it again from the admin group and
monitor with ntfilemon, we don't get any access denied result. So while all
info found on the net is indicating it is a rights problem, I have my
difficulties to trace it down (have not found any failures with regmon,
too).
> Also, you can try one of the German language groups. Otherwise if you wish
> to post here, can I suggest you also try to translate the error messages
> in
> addition to posting them? Thankyou.
Sorry for not translating the error messages. I chose the english newsgroup
as it is more populated and the problem seems (to me) to be a bit wired.
Thanks
Florian
| |
| Ken Schaefer 2004-04-27, 7:34 am |
| Hi,
Do you see errors in the %systemroot%\IIS5.log file?
Cheers
Ken
"Florian Zimmermann" <florian@domplatz1.de> wrote in message
news:OWQUdbDLEHA.1312@TK2MSFTNGP12.phx.gbl...
: Hi Ken
:
: > Please see:
: > http://support.microsoft.com/?id=327153
: > PRB: ASP Pages Do Not Process and DCOM Event 10010 Appears in System Log
:
: thanks for the feedback. The article contains the error messages in
english
: that we see, unfortunatly the solution did not help for us. The funny
thing
: is: if we put the IWAM User in the admin group, all is running (of course
: not a real-life solution), if we remove it again from the admin group and
: monitor with ntfilemon, we don't get any access denied result. So while
all
: info found on the net is indicating it is a rights problem, I have my
: difficulties to trace it down (have not found any failures with regmon,
: too).
:
: > Also, you can try one of the German language groups. Otherwise if you
wish
: > to post here, can I suggest you also try to translate the error messages
: > in
: > addition to posting them? Thankyou.
:
: Sorry for not translating the error messages. I chose the english
newsgroup
: as it is more populated and the problem seems (to me) to be a bit wired.
:
: Thanks
:
: Florian
:
:
| |
| Florian Zimmermann 2004-04-27, 8:34 am |
| Hi Ken,
> Do you see errors in the %systemroot%\IIS5.log file?
Thanks for the tipp, hadn't checked that file yet.
nothing lately. I searched for "fail" as mentioned in the comment and the
only error that did show up (3 times - all in december) was:
[12/2/2002 7:27:20] OC_COMPLETE_INSTALLATION:iis_www:!FAIL!
[12/2/2002 7:27:20]
OC_COMPLETE_INSTALLATION:iis_www:Migrate
KeyToPStore():CopyKRCertToCAPIStore():Up
grade
KR key to CAPI for incomplete1. FAILED.
That doesn't sound to me as if it could be related to the problem I have, I
would not say though I am 100% sure ;)
Other than that, I did not find any failures (There are some entries with
ERROR though they look like
OC_COMPLETE_INSTALLATION:iis_www::CMDKey
::GetData[LM/W3SVC:6008:MD_CUSTOM_ERROR]
which seems to me more like a succedded entry.
the iis log for the website shows entries like that:
2004-04-27 10:40:29 212.223.4.12 - 025-ST 212.63.156.200 80 GET
/testindex.asp Out-of-process+ISAPI+extension+request+failed. 500 262 312
156 HTTP/1.1 www.domainnamehere.de
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322)
ASPSESSIONIDAADCTDSB=IOEMBEMCODECKFCIEPP
INIHE -
Thanks for your time
Florian
|
|
|
|
|