|
Home > Archive > IIS Server Security > January 2005 > IIS6 + ISAPI Filter + Application Pool Identity problem
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
IIS6 + ISAPI Filter + Application Pool Identity problem
|
|
|
| Hi,
What permissions are required from an account that is used for Application
pool in IIS6 so that ISAPI filter works properly? I created a normal User
account on AD. I configured Application pool according to:
http://www.microsoft.com/resources/...cc_wpenable.asp
Evrything works fine. I can access the ASP.NET related content. Now I also
want to use an ISAPI filter for the whole web site. It completely fails to
load. No errors, no security audits. If I add that User account to
Administrators, everything is fine, ISAPI filter is loaded and works. If I
use default Network Service account, everything works fine also.
My question is: What permissions are required from account used in
Application Pool, so that ISAPI filter can be loaded by IIS6 and work
properly?
Thank you for any help on this
| |
| Wade A. Hilmo [MS] 2005-01-19, 2:48 am |
| Hi LF,
To satisfy IIS's requirements, the account must be a member of the IIS_WPG
group. Since requests are being served, it sounds like this has been done.
The filter itself may have its own requirements, depending on what it does,
how it's ACLed, etc. It's possible that the filter calls some API or
accesses some object that requires a high privilege. The only way to
determine the requirements for sure, is to contact the vendor for the
filter. If you are the developer for the filter, then you will need to run
it under a debugger to determine why it's failing.
Finally, if IIS attempts to load a filter and it fails, it will always log
an event. Since it's working when the app pool is running with high
privilege, we can assume that it's installed correctly. Therefore, if a
failure occurs when IIS attempts to call LoadLibraryExW on it, or if it's
GetFilterVersion returns FALSE, an event will be logged with the Win32 error
code as the data for the event. If no event is getting logged, then it
sounds like the filter is loading, but it is not doing what you expect due
to some privilege issue as above.
I hope that this helps to point you in the right direction.
Thank you,
-Wade A. Hilmo,
-Microsoft
"LF" <lf@nospam.nospam> wrote in message
news:uSwluAe$EHA.2572@tk2msftngp13.phx.gbl...
> Hi,
>
> What permissions are required from an account that is used for Application
> pool in IIS6 so that ISAPI filter works properly? I created a normal User
> account on AD. I configured Application pool according to:
>
http://www.microsoft.com/resources/...cc_wpenable.asp
>
> Evrything works fine. I can access the ASP.NET related content. Now I also
> want to use an ISAPI filter for the whole web site. It completely fails to
> load. No errors, no security audits. If I add that User account to
> Administrators, everything is fine, ISAPI filter is loaded and works. If I
> use default Network Service account, everything works fine also.
>
> My question is: What permissions are required from account used in
> Application Pool, so that ISAPI filter can be loaded by IIS6 and work
> properly?
>
> Thank you for any help on this
>
>
>
| |
| David Wang [Msft] 2005-01-19, 7:48 am |
| If an ISAPI Filter DLL fails to load, you WILL get event log entries stating
which DLL failed to load and for what reason (the "data" of the event
indicates the Win32 error code) as well as security audits for resources
access failure. Please report them.
Since the filter works when you change the custom app pool User account's
group membership, I suspect that you simply did not give that User account
account Read/Execute access to the ISAPI Filter DLL. In that case, the
event log entry will indicate an error number of "5" (i.e. Access Denied).
To allow an ISAPI Filter to load, you just need to ACL the filter DLL with
Read/Execute permissions to the IIS_WPG group (or if you are on a domain
controller, the AppPool Identity of all app pools that will load the DLL).
This is because IIS uses the process identity to LoadLibrary the ISAPI
Filter DLL -- hence that process identity must have access to the DLL or
else you will see failure.
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"LF" <lf@nospam.nospam> wrote in message
news:uSwluAe$EHA.2572@tk2msftngp13.phx.gbl...
Hi,
What permissions are required from an account that is used for Application
pool in IIS6 so that ISAPI filter works properly? I created a normal User
account on AD. I configured Application pool according to:
http://www.microsoft.com/resources/...cc_wpenable.asp
Evrything works fine. I can access the ASP.NET related content. Now I also
want to use an ISAPI filter for the whole web site. It completely fails to
load. No errors, no security audits. If I add that User account to
Administrators, everything is fine, ISAPI filter is loaded and works. If I
use default Network Service account, everything works fine also.
My question is: What permissions are required from account used in
Application Pool, so that ISAPI filter can be loaded by IIS6 and work
properly?
Thank you for any help on this
| |
|
| Hello,
Unfortunately I'm not getting any events anywhere. Not in the Event log, and
not in the IIS log. Auditing is enabled for errors for everything in Local
security policy for the machine.
Exact same steps work perfectly fine on another AD and Win2k3 IIS6
configuration.
I have source to the ISAPI filter. I also created simple filter that doesn't
do anything besides exporting proper functions. I tried to log an event from
DllMain and from GetFilterVersion either to system Event Viewer or to a
folder to which I gave Everyone Full Control. Under regular User account
nothing gets output to either log. The minute I add user to Administrators
group, I see the log entries.
When I view ISAPI filters tab in the IIS6 Web Site properties, it has green
arrow next to the filter and says it's loaded. Yet, no DllMain or
GetFilterVersion was called.
This happens for either AD User or local machine User accounts. For example,
Network Service account works fine.
Is there anything that comes to mind that can do this? Or how to find the
cause? I'm about to write a util to dump all privileges given to the User
account on that Domain; maybe it will help.
Thank you for any help
"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:uFDM6Xh$EHA.3616@TK2MSFTNGP11.phx.gbl...
> If an ISAPI Filter DLL fails to load, you WILL get event log entries
> stating
> which DLL failed to load and for what reason (the "data" of the event
> indicates the Win32 error code) as well as security audits for resources
> access failure. Please report them.
>
> Since the filter works when you change the custom app pool User account's
> group membership, I suspect that you simply did not give that User account
> account Read/Execute access to the ISAPI Filter DLL. In that case, the
> event log entry will indicate an error number of "5" (i.e. Access Denied).
>
> To allow an ISAPI Filter to load, you just need to ACL the filter DLL with
> Read/Execute permissions to the IIS_WPG group (or if you are on a domain
> controller, the AppPool Identity of all app pools that will load the DLL).
> This is because IIS uses the process identity to LoadLibrary the ISAPI
> Filter DLL -- hence that process identity must have access to the DLL or
> else you will see failure.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> //
> "LF" <lf@nospam.nospam> wrote in message
> news:uSwluAe$EHA.2572@tk2msftngp13.phx.gbl...
> Hi,
>
> What permissions are required from an account that is used for Application
> pool in IIS6 so that ISAPI filter works properly? I created a normal User
> account on AD. I configured Application pool according to:
> http://www.microsoft.com/resources/...cc_wpenable.asp
>
> Evrything works fine. I can access the ASP.NET related content. Now I also
> want to use an ISAPI filter for the whole web site. It completely fails to
> load. No errors, no security audits. If I add that User account to
> Administrators, everything is fine, ISAPI filter is loaded and works. If I
> use default Network Service account, everything works fine also.
>
> My question is: What permissions are required from account used in
> Application Pool, so that ISAPI filter can be loaded by IIS6 and work
> properly?
>
> Thank you for any help on this
>
>
>
>
| |
|
| > Finally, if IIS attempts to load a filter and it fails, it will always log
> an event.
I don't think it's being loaded at all. I have source for the filter. I also
created a filter that doesn't do anything at all. What can cause IIS6 not to
load filter at all? I responded to the other post. If you could, please
refer to that post. Thank you very much for your reply
"Wade A. Hilmo [MS]" <wadeh@microsoft.com> wrote in message
news:%23JaOoff$EHA.2584@TK2MSFTNGP09.phx.gbl...
> Hi LF,
>
> To satisfy IIS's requirements, the account must be a member of the IIS_WPG
> group. Since requests are being served, it sounds like this has been
> done.
>
> The filter itself may have its own requirements, depending on what it
> does,
> how it's ACLed, etc. It's possible that the filter calls some API or
> accesses some object that requires a high privilege. The only way to
> determine the requirements for sure, is to contact the vendor for the
> filter. If you are the developer for the filter, then you will need to
> run
> it under a debugger to determine why it's failing.
>
> Finally, if IIS attempts to load a filter and it fails, it will always log
> an event. Since it's working when the app pool is running with high
> privilege, we can assume that it's installed correctly. Therefore, if a
> failure occurs when IIS attempts to call LoadLibraryExW on it, or if it's
> GetFilterVersion returns FALSE, an event will be logged with the Win32
> error
> code as the data for the event. If no event is getting logged, then it
> sounds like the filter is loading, but it is not doing what you expect due
> to some privilege issue as above.
>
> I hope that this helps to point you in the right direction.
>
> Thank you,
> -Wade A. Hilmo,
> -Microsoft
>
> "LF" <lf@nospam.nospam> wrote in message
> news:uSwluAe$EHA.2572@tk2msftngp13.phx.gbl...
> http://www.microsoft.com/resources/...cc_wpenable.asp
>
>
| |
|
| >Unfortunately I'm not getting any events anywhere
Correction, I'm getting normal IIS events in its own log about page access.
But nothing else that can shed the light on the problem.
"LF" <lf@nospam.nospam> wrote in message
news:Oh2IyNp$EHA.3236@TK2MSFTNGP15.phx.gbl...
> Hello,
>
> Unfortunately I'm not getting any events anywhere. Not in the Event log,
> and not in the IIS log. Auditing is enabled for errors for everything in
> Local security policy for the machine.
>
> Exact same steps work perfectly fine on another AD and Win2k3 IIS6
> configuration.
>
> I have source to the ISAPI filter. I also created simple filter that
> doesn't do anything besides exporting proper functions. I tried to log an
> event from DllMain and from GetFilterVersion either to system Event Viewer
> or to a folder to which I gave Everyone Full Control. Under regular User
> account nothing gets output to either log. The minute I add user to
> Administrators group, I see the log entries.
>
> When I view ISAPI filters tab in the IIS6 Web Site properties, it has
> green arrow next to the filter and says it's loaded. Yet, no DllMain or
> GetFilterVersion was called.
>
> This happens for either AD User or local machine User accounts. For
> example, Network Service account works fine.
>
> Is there anything that comes to mind that can do this? Or how to find the
> cause? I'm about to write a util to dump all privileges given to the User
> account on that Domain; maybe it will help.
>
> Thank you for any help
>
>
> "David Wang [Msft]" <someone@online.microsoft.com> wrote in message
> news:uFDM6Xh$EHA.3616@TK2MSFTNGP11.phx.gbl...
>
>
| |
| WenJun Zhang[msft] 2005-01-20, 2:54 am |
| Hi,
If Network Service and Administartor accounts worked but normal local
or domain users not, please add the user to IIS_WPG group to test.
And the following article contains the comprehensive permissions
granted to Network Service(it's also a member of IIS_WPG).
Default permissions and user rights for IIS 6.0
http://support.microsoft.com/?id=812614
Another thought is, can you guarantee the user account has privilege
to write event log?
Event Logging Security
http://msdn.microsoft.com/library/d...ary/en-us/debug
/base/event_logging_security.asp
Thanks.
Best regards,
WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security
| |
| David Wang [Msft] 2005-01-20, 2:54 am |
| 1. Are you running IIS6 on a DC. Is this machine stand-alone or in a domain.
2. Writing to event log is privileged on WS03, so lack of events does not
mean the filter did not load -- the filter could have loaded but failed to
write to the event log
3. If IIS6 failed to load the ISAPI Filter for any reason, such as access
denied, missing dependency DLL, missing file, etc -- it will fail the
AppPool.
I am still suspecting that the custom user account is lacking some
privileges due to GPO or being on a DC. On a non-DC, you just need to add
the custom user account to IIS_WPG to ensure it has the necessary
privileges. Administrators group is definitely not necessary for IIS to run
an ISAPI Filter -- the ISAPI Filter may have additional arbitrary
permissions requirements which the user is responsible for reconciling.
Honestly, I do not trust the UI to correctly show filter status on IIS6
(there are many known situations that it is just broken). I also do not
trust your logging methods to the file or event log because they involve
additional ACLs that have nothing to do with the original issue.
I suggest using TLIST -m "filter_name.dll" from the Debugging Toolkit
(http://www.microsoft.com/ddk/debugging ) to determine if the Filter DLL is
loaded and in what process after you've made a single request to the
websites that trigger it to be loaded.
I also suggest directly attaching debugger onto w3wp.exe to obtain the Win32
error code from the LoadLibraryExW function call (public symbols for all
this -- the URL leads to instructions telling you what to do).
I still suspect ACL issues on your server, so I am proposing the most direct
ways to obtain the necessary information without clouding from any
intervening layers.
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"LF" <lf@nospam.nospam> wrote in message
news:uPLUIVp$EHA.1188@tk2msftngp13.phx.gbl...
>Unfortunately I'm not getting any events anywhere
Correction, I'm getting normal IIS events in its own log about page access.
But nothing else that can shed the light on the problem.
"LF" <lf@nospam.nospam> wrote in message
news:Oh2IyNp$EHA.3236@TK2MSFTNGP15.phx.gbl...
> Hello,
>
> Unfortunately I'm not getting any events anywhere. Not in the Event log,
> and not in the IIS log. Auditing is enabled for errors for everything in
> Local security policy for the machine.
>
> Exact same steps work perfectly fine on another AD and Win2k3 IIS6
> configuration.
>
> I have source to the ISAPI filter. I also created simple filter that
> doesn't do anything besides exporting proper functions. I tried to log an
> event from DllMain and from GetFilterVersion either to system Event Viewer
> or to a folder to which I gave Everyone Full Control. Under regular User
> account nothing gets output to either log. The minute I add user to
> Administrators group, I see the log entries.
>
> When I view ISAPI filters tab in the IIS6 Web Site properties, it has
> green arrow next to the filter and says it's loaded. Yet, no DllMain or
> GetFilterVersion was called.
>
> This happens for either AD User or local machine User accounts. For
> example, Network Service account works fine.
>
> Is there anything that comes to mind that can do this? Or how to find the
> cause? I'm about to write a util to dump all privileges given to the User
> account on that Domain; maybe it will help.
>
> Thank you for any help
>
>
> "David Wang [Msft]" <someone@online.microsoft.com> wrote in message
> news:uFDM6Xh$EHA.3616@TK2MSFTNGP11.phx.gbl...
http://www.microsoft.com/resources/...cc_wpenable.asp[vbcol=seagreen]
>
>
| |
|
| It is definitely a member of IIS_WPG. But even if it doesn't have permission
to write to Event log, I'm writing to a file and its folder has Everyone
with FullControl. And it does output to file when running under Network
Service account. I see in the event log Success events for Login event of
the User account I specified, then Login event for machine account and
that's all. ISAPI is not loaded. I was mistaken before. There is no green
arrow next to the ISAPI filter when running under User account. And yet
there are no Failure events in the Event log. We created new DC and new
Win2k3 machine. Works fine with regular User account and required privileges
for IIS Application pool identity.
But still, it would be nice to know how machine could get to that failed
state. I even un-joined that computer from domain. Still same behavior. No
ISAPI is loaded.
""WenJun Zhang[msft]"" <v-wzhang@online.microsoft.com> wrote in message
news:UtIgT$p$EHA.768@cpmsftngxa10.phx.gbl...
> Hi,
>
> If Network Service and Administartor accounts worked but normal local
> or domain users not, please add the user to IIS_WPG group to test.
> And the following article contains the comprehensive permissions
> granted to Network Service(it's also a member of IIS_WPG).
>
> Default permissions and user rights for IIS 6.0
> http://support.microsoft.com/?id=812614
>
> Another thought is, can you guarantee the user account has privilege
> to write event log?
>
> Event Logging Security
> http://msdn.microsoft.com/library/d...ary/en-us/debug
> /base/event_logging_security.asp
>
> Thanks.
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Support
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> Get Secure! - www.microsoft.com/security
>
| |
|
| > 1. Are you running IIS6 on a DC. Is this machine stand-alone or in a
> domain.
Tried both. Same behavior.
> 3. If IIS6 failed to load the ISAPI Filter for any reason, such as access
> denied, missing dependency DLL, missing file, etc -- it will fail the
> AppPool.
AppPool is not marked as disabled. I see successfull Login event for the
User I specified for AppPool.
It is definitely a member of IIS_WPG. But even if it doesn't have permission
to write to Event log, I'm writing to a file and its folder has Everyone
with FullControl. And it does output to file when running under Network
Service account. I see in the event log Success events for Login event of
the User account I specified, then Login event for machine account and
that's all. ISAPI is not loaded. I was mistaken before. There is no green
arrow next to the ISAPI filter when running under User account. And yet
there are no Failure events in the Event log. We created new DC and new
Win2k3 machine. Works fine with regular User account and required privileges
for IIS Application pool identity.
But still, it would be nice to know how machine could get to that failed
state. I even un-joined that computer from domain. Still same behavior. No
ISAPI is loaded.
I still need to try TLIST -m or SysInternals Process Explorer to see if
ISAPI is really loaded or not. But I very much doubt it is.
Unfortunately I can't debug it on that server due to firewall issues. I used
mvcmon on the server and VS.NET2003. But there is a firewall in-between.
"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:%23MFFYzq$EHA.3376@TK2MSFTNGP12.phx.gbl...
> 1. Are you running IIS6 on a DC. Is this machine stand-alone or in a
> domain.
> 2. Writing to event log is privileged on WS03, so lack of events does not
> mean the filter did not load -- the filter could have loaded but failed to
> write to the event log
> 3. If IIS6 failed to load the ISAPI Filter for any reason, such as access
> denied, missing dependency DLL, missing file, etc -- it will fail the
> AppPool.
>
> I am still suspecting that the custom user account is lacking some
> privileges due to GPO or being on a DC. On a non-DC, you just need to add
> the custom user account to IIS_WPG to ensure it has the necessary
> privileges. Administrators group is definitely not necessary for IIS to
> run
> an ISAPI Filter -- the ISAPI Filter may have additional arbitrary
> permissions requirements which the user is responsible for reconciling.
>
> Honestly, I do not trust the UI to correctly show filter status on IIS6
> (there are many known situations that it is just broken). I also do not
> trust your logging methods to the file or event log because they involve
> additional ACLs that have nothing to do with the original issue.
>
> I suggest using TLIST -m "filter_name.dll" from the Debugging Toolkit
> (http://www.microsoft.com/ddk/debugging ) to determine if the Filter DLL
> is
> loaded and in what process after you've made a single request to the
> websites that trigger it to be loaded.
>
> I also suggest directly attaching debugger onto w3wp.exe to obtain the
> Win32
> error code from the LoadLibraryExW function call (public symbols for all
> this -- the URL leads to instructions telling you what to do).
>
> I still suspect ACL issues on your server, so I am proposing the most
> direct
> ways to obtain the necessary information without clouding from any
> intervening layers.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> //
> "LF" <lf@nospam.nospam> wrote in message
> news:uPLUIVp$EHA.1188@tk2msftngp13.phx.gbl...
> Correction, I'm getting normal IIS events in its own log about page
> access.
> But nothing else that can shed the light on the problem.
>
>
> "LF" <lf@nospam.nospam> wrote in message
> news:Oh2IyNp$EHA.3236@TK2MSFTNGP15.phx.gbl...
> http://www.microsoft.com/resources/...cc_wpenable.asp
>
>
>
| |
| David Wang [Msft] 2005-01-21, 7:47 am |
| I suggest you give windbg from Microsoft Debugging Toolkit (
http://www.microsoft.com/ddk/debugging ) a try on the server. Light-weight
exe and gives very similar GUI experience of VS.Net with the commandline
goodies of traditional NTSD/CDB/KD.
I suggest:
1. Use FileMon from www.sysinternals.com to verify what happens when IIS6
tries to LoadLibraryEx the Filter DLL
2. Use TLIST / Process Explorer to determine whether the Filter DLL is in
memory
3. Make sure your Filter DLL is not based to some weird location in memory
As you said that the same steps worked on another IIS6/AD machine, I have a
feeling the problem is specific to some attribute on this machine and make
take effort to figure it out. Your claim that the Filter DLL fails to load
but IIS6 does not fail the Application Pool is interesting to me because
that would be a good bug -- but the conditions causing it is just as
interesting...
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"LF" <lf@nospam.nospam> wrote in message
news:un2vlQ3$EHA.2984@TK2MSFTNGP09.phx.gbl...
> 1. Are you running IIS6 on a DC. Is this machine stand-alone or in a
> domain.
Tried both. Same behavior.
> 3. If IIS6 failed to load the ISAPI Filter for any reason, such as access
> denied, missing dependency DLL, missing file, etc -- it will fail the
> AppPool.
AppPool is not marked as disabled. I see successfull Login event for the
User I specified for AppPool.
It is definitely a member of IIS_WPG. But even if it doesn't have permission
to write to Event log, I'm writing to a file and its folder has Everyone
with FullControl. And it does output to file when running under Network
Service account. I see in the event log Success events for Login event of
the User account I specified, then Login event for machine account and
that's all. ISAPI is not loaded. I was mistaken before. There is no green
arrow next to the ISAPI filter when running under User account. And yet
there are no Failure events in the Event log. We created new DC and new
Win2k3 machine. Works fine with regular User account and required privileges
for IIS Application pool identity.
But still, it would be nice to know how machine could get to that failed
state. I even un-joined that computer from domain. Still same behavior. No
ISAPI is loaded.
I still need to try TLIST -m or SysInternals Process Explorer to see if
ISAPI is really loaded or not. But I very much doubt it is.
Unfortunately I can't debug it on that server due to firewall issues. I used
mvcmon on the server and VS.NET2003. But there is a firewall in-between.
"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:%23MFFYzq$EHA.3376@TK2MSFTNGP12.phx.gbl...
> 1. Are you running IIS6 on a DC. Is this machine stand-alone or in a
> domain.
> 2. Writing to event log is privileged on WS03, so lack of events does not
> mean the filter did not load -- the filter could have loaded but failed to
> write to the event log
> 3. If IIS6 failed to load the ISAPI Filter for any reason, such as access
> denied, missing dependency DLL, missing file, etc -- it will fail the
> AppPool.
>
> I am still suspecting that the custom user account is lacking some
> privileges due to GPO or being on a DC. On a non-DC, you just need to add
> the custom user account to IIS_WPG to ensure it has the necessary
> privileges. Administrators group is definitely not necessary for IIS to
> run
> an ISAPI Filter -- the ISAPI Filter may have additional arbitrary
> permissions requirements which the user is responsible for reconciling.
>
> Honestly, I do not trust the UI to correctly show filter status on IIS6
> (there are many known situations that it is just broken). I also do not
> trust your logging methods to the file or event log because they involve
> additional ACLs that have nothing to do with the original issue.
>
> I suggest using TLIST -m "filter_name.dll" from the Debugging Toolkit
> (http://www.microsoft.com/ddk/debugging ) to determine if the Filter DLL
> is
> loaded and in what process after you've made a single request to the
> websites that trigger it to be loaded.
>
> I also suggest directly attaching debugger onto w3wp.exe to obtain the
> Win32
> error code from the LoadLibraryExW function call (public symbols for all
> this -- the URL leads to instructions telling you what to do).
>
> I still suspect ACL issues on your server, so I am proposing the most
> direct
> ways to obtain the necessary information without clouding from any
> intervening layers.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> //
> "LF" <lf@nospam.nospam> wrote in message
> news:uPLUIVp$EHA.1188@tk2msftngp13.phx.gbl...
> Correction, I'm getting normal IIS events in its own log about page
> access.
> But nothing else that can shed the light on the problem.
>
>
> "LF" <lf@nospam.nospam> wrote in message
> news:Oh2IyNp$EHA.3236@TK2MSFTNGP15.phx.gbl...
>
http://www.microsoft.com/resources/...cc_wpenable.asp
>
>
>
|
|
|
|
|