Hi everyone,

we see the Application Server Error whenever we call an ASP page on our
server lately. This happens when the application mode for the web is pooled
or isolated. As I figured out by now, this should be related somehow to a
security problem.
What we did to solve the problem so far:
- We tried the often talked about IWAMSYNC.VBS article
- We checked the kb article discussing the configuration of the needed ntfs
security
- IWAM has launch-permission in the standard dcomcnfg security dialog
- lots of searching on google

As nothing has helped so far, did anyone envounter that problem so far and
found a solution that was not related to iwamsync.vbs?

The eventlog entries we see are:
Ereignistyp: Warnung
Ereignisquelle: W3SVC
Ereigniskategorie: Keine
Ereigniskennung: 36
Datum:  26.04.2004
Zeit:  08:51:22
Benutzer:  Nicht zutreffend
Computer: 025-ST
Beschreibung:
Der Server konnte Anwendung '/LM/W3SVC/XXX/ROOT/scripts' nicht laden. Fehler
'Starten des Servers fehlgeschlagen
'.
Weitere Informationen zu dieser Meldung finden Sie auf der
Microsoft-Onlinesupportsite: http://www.microsoft.com/contentredirect.asp.

Ereignistyp: Fehler
Ereignisquelle: DCOM
Ereigniskategorie: Keine
Ereigniskennung: 10010
Datum:  26.04.2004
Zeit:  08:51:22
Benutzer:  NT-AUTORITÄT\SYSTEM
Computer: 025-ST
Beschreibung:
Der Server "{3D14228D-FBE1-11D0-995D-00C04FD919C1}" konnte innerhalb de
s
angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Thanks for your time

Florian

[ Post a follow-up to this message ]

Please see:
http://support.microsoft.com/?id=327153
PRB: ASP Pages Do Not Process and DCOM Event 10010 Appears in System Log

Also, you can try one of the German language groups. Otherwise if you wish
to post here, can I suggest you also try to translate the error messages in
addition to posting them? Thankyou.

Cheers
Ken

"Florian Zimmermann" <florian@domplatz1.de> wrote in message
news:%23xsHTC3KEHA.268@TK2MSFTNGP11.phx.gbl...
: Hi everyone,
:
: we see the Application Server Error whenever we call an ASP page on our
: server lately. This happens when the application mode for the web is
pooled
: or isolated. As I figured out by now, this should be related somehow to a
: security problem.
: What we did to solve the problem so far:
: - We tried the often talked about IWAMSYNC.VBS article
: - We checked the kb article discussing the configuration of the needed
ntfs
: security
: - IWAM has launch-permission in the standard dcomcnfg security dialog
: - lots of searching on google
:
: As nothing has helped so far, did anyone envounter that problem so far and
: found a solution that was not related to iwamsync.vbs?
:
: The eventlog entries we see are:
: Ereignistyp: Warnung
: Ereignisquelle: W3SVC
: Ereigniskategorie: Keine
: Ereigniskennung: 36
: Datum:  26.04.2004
: Zeit:  08:51:22
: Benutzer:  Nicht zutreffend
: Computer: 025-ST
: Beschreibung:
: Der Server konnte Anwendung '/LM/W3SVC/XXX/ROOT/scripts' nicht laden.
Fehler
: 'Starten des Servers fehlgeschlagen
: '.
: Weitere Informationen zu dieser Meldung finden Sie auf der
: Microsoft-Onlinesupportsite: http://www.microsoft.com/contentredirect.asp.
:
: Ereignistyp: Fehler
: Ereignisquelle: DCOM
: Ereigniskategorie: Keine
: Ereigniskennung: 10010
: Datum:  26.04.2004
: Zeit:  08:51:22
: Benutzer:  NT-AUTORITÄT\SYSTEM
: Computer: 025-ST
: Beschreibung:
: Der Server "{3D14228D-FBE1-11D0-995D-00C04FD919C1}" konnte innerhalb 
des
: angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
:
: Thanks for your time
:
: Florian
:
:

[ Post a follow-up to this message ]

Hi Ken

> Please see:
> http://support.microsoft.com/?id=327153
> PRB: ASP Pages Do Not Process and DCOM Event 10010 Appears in System Log

thanks for the feedback. The article contains the error messages in english
that we see, unfortunatly the solution did not help for us. The funny thing
is: if we put the IWAM User in the admin group, all is running (of course
not a real-life solution), if we remove it again from the admin group and
monitor with ntfilemon, we don't get any access denied result. So while all
info found on the net is indicating it is a rights problem, I have my
difficulties to trace it down (have not found any failures with regmon,
too).

> Also, you can try one of the German language groups. Otherwise if you wish
> to post here, can I suggest you also try to translate the error messages
> in
> addition to posting them? Thankyou.

Sorry for not translating the error messages. I chose the english newsgroup
as it is more populated and the problem seems (to me) to be a bit wired.

Thanks

Florian

[ Post a follow-up to this message ]

Hi,

Do you see errors in the %systemroot%\IIS5.log file?

Cheers
Ken


"Florian Zimmermann" <florian@domplatz1.de> wrote in message
news:OWQUdbDLEHA.1312@TK2MSFTNGP12.phx.gbl...
: Hi Ken
:
: > Please see:
: > http://support.microsoft.com/?id=327153
: > PRB: ASP Pages Do Not Process and DCOM Event 10010 Appears in System Log
:
: thanks for the feedback. The article contains the error messages in
english
: that we see, unfortunatly the solution did not help for us. The funny
thing
: is: if we put the IWAM User in the admin group, all is running (of course
: not a real-life solution), if we remove it again from the admin group and
: monitor with ntfilemon, we don't get any access denied result. So while
all
: info found on the net is indicating it is a rights problem, I have my
: difficulties to trace it down (have not found any failures with regmon,
: too).
:
: > Also, you can try one of the German language groups. Otherwise if you
wish
: > to post here, can I suggest you also try to translate the error messages
: > in
: > addition to posting them? Thankyou.
:
: Sorry for not translating the error messages. I chose the english
newsgroup
: as it is more populated and the problem seems (to me) to be a bit wired.
:
: Thanks
:
: Florian
:
:

[ Post a follow-up to this message ]

Hi Ken,

> Do you see errors in the %systemroot%\IIS5.log file?

Thanks for the tipp, hadn't checked that file yet.

nothing lately. I searched for "fail" as mentioned in the comment and the
only error that did show up (3 times - all in december) was:
[12/2/2002 7:27:20] OC_COMPLETE_INSTALLATION:iis_www:!FAIL!
[12/2/2002 7:27:20]
 OC_COMPLETE_INSTALLATION:iis_www:Migrate
KeyToPStore():CopyKRCertToCAPIStore(
):Upgrade
KR key to CAPI for incomplete1.  FAILED.

That doesn't sound to me as if it could be related to the problem I have, I
would not say though I am 100% sure ;)
Other than that, I did not find any failures (There are some entries with
ERROR though they look like
 OC_COMPLETE_INSTALLATION:iis_www::CMDKey
::GetData[LM/W3SVC:6008:MD_CUSTO
M_ERROR]
which seems to me more like a succedded entry.

the iis log for the website shows entries like that:
2004-04-27 10:40:29 212.223.4.12 - 025-ST 212.63.156.200 80 GET
/testindex.asp Out-of-process+ISAPI+extension+request+failed. 500 262 312
156 HTTP/1.1 www.domainnamehere.de
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322)
 ASPSESSIONIDAADCTDSB=IOEMBEMCODECKFCIEPP
INIHE -

Thanks for your time

Florian

[ Post a follow-up to this message ]