|
Home > Archive > IIS Server Security > September 2004 > CreateObject("CDONTS.NewMail") fails
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
CreateObject("CDONTS.NewMail") fails
|
|
| Richard 2004-08-19, 5:57 pm |
| We have an ASP page running on IIS 5.0 running on Win2K Server with Exchange
Server running on the same box.
This ASP page runs has a line of code that sends an email using:
CreateObject("CDONTS.NewMail")
This page runs fine under windows ingegrated authentication, but fails with
anonymous user access (IUSR_<computername> ). What do we need to make it work
under anonymous access.
I have seen similar question before in this posting, but the fixes suggest
do not work for me, as we have no virtual SMTP running under IIS.
We have tried to use workaround 2 mention in the following KB, but its
failing:
http://support.microsoft.com/default.aspx?kbid=816789
We have tried givng Read/execute permission to IUSR_<computername> on
CDONT.DLL. I have
tried giving Read/execute permission to IUSR_<computername> on the NTFS
folder that has the asp page.
May I know how to set the right permissions to allow the ASP page work under
anonymous access.
--
Richard Vosylius
Endeavor Commerce
| |
| Ken Schaefer 2004-08-19, 8:48 pm |
| ....and what is the exact error message etc? "doesn't work" isn't very
helpful :-)
Cheers
Ken
"Richard" <Richard@discussions.microsoft.com> wrote in message
news:60380AFB-FE2B-48C1-9B24-3BED58A2FC9A@microsoft.com...
> We have an ASP page running on IIS 5.0 running on Win2K Server with
> Exchange
> Server running on the same box.
>
> This ASP page runs has a line of code that sends an email using:
>
> CreateObject("CDONTS.NewMail")
>
> This page runs fine under windows ingegrated authentication, but fails
> with
> anonymous user access (IUSR_<computername> ). What do we need to make it
> work
> under anonymous access.
>
> I have seen similar question before in this posting, but the fixes suggest
> do not work for me, as we have no virtual SMTP running under IIS.
>
> We have tried to use workaround 2 mention in the following KB, but its
> failing:
> http://support.microsoft.com/default.aspx?kbid=816789
>
> We have tried givng Read/execute permission to IUSR_<computername> on
> CDONT.DLL. I have
>
> tried giving Read/execute permission to IUSR_<computername> on the NTFS
> folder that has the asp page.
>
> May I know how to set the right permissions to allow the ASP page work
> under
> anonymous access.
>
> --
> Richard Vosylius
> Endeavor Commerce
| |
| Richard 2004-08-24, 7:05 pm |
| Ken,
I get "Permission Denied" on the line that says
"CreateObject("CDONTS.NewMail")" in the ASP page.
The same page works find under Integrated Auth.
Thanks
Richard
"Ken Schaefer" wrote:
> ....and what is the exact error message etc? "doesn't work" isn't very
> helpful :-)
>
> Cheers
> Ken
>
> "Richard" <Richard@discussions.microsoft.com> wrote in message
> news:60380AFB-FE2B-48C1-9B24-3BED58A2FC9A@microsoft.com...
>
>
>
| |
| Ken Schaefer 2004-08-24, 10:04 pm |
| Hi,
RegMon and FileMon from www.sysinternals.com will tell you what user account
is being denied access to what registry key or file.
Cheers
Ken
"Richard" <Richard@discussions.microsoft.com> wrote in message
news:1D6CFD3F-A86E-4984-AEB7-7826B2946F44@microsoft.com...[vbcol=seagreen]
> Ken,
>
> I get "Permission Denied" on the line that says
> "CreateObject("CDONTS.NewMail")" in the ASP page.
>
> The same page works find under Integrated Auth.
>
> Thanks
> Richard
>
> "Ken Schaefer" wrote:
>
| |
| Richard 2004-09-02, 6:45 pm |
| Hi Ken,
This helped. The Filemon notified that user IUSR_<servername> didn't have
write permission on "C:\Program Files\Exchsrvr\Mailroot\vsi 1\PickUp" folder.
I gave the read/write permissions and got the code to work.
But I have security concerns, as I have heard that we should not give write
permissions to IUSR_<servername>.
So would you suggest to create a new user for the web site that runs the asp
code to write the mail, give anonymous user acces to this user for this web
site, and give write permission to this user on "Mailroot" folder.
Thanks,
Richard
"Ken Schaefer" wrote:
> Hi,
>
> RegMon and FileMon from www.sysinternals.com will tell you what user account
> is being denied access to what registry key or file.
>
> Cheers
> Ken
>
>
> "Richard" <Richard@discussions.microsoft.com> wrote in message
> news:1D6CFD3F-A86E-4984-AEB7-7826B2946F44@microsoft.com...
>
>
>
|
|
|
|
|