473,854 Members | 1,449 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

'access denied' calling remote DCOM NT service from ASP

Having following problem

1. Client: ASP application with anonymous access to be running as
DOMAIN\my_user on WinXP
2. Server: DCOM NT Service runs on remote host (W2K Server) under the same
account DOMAIN\my_user
security within server is initialized using
hr = CoInitializeSec urity(&appid, -1, NULL, NULL, 0, 0, 0, EOAC_APPID,
NULL);

when trying to access the application from ASP - gettting
DCOM got error "General access denied error " from the computer MY_SERVER
when attempting to activate the server:
in System event log. Granting "everyone" on target system resolves the
problem, but I would like to have limited user access.

When running the same client scenario from test C++ application running
under DOMAIN\my_user interactive account - everything works with no problem.

The question is what could be wrong with configuration of security under
IIS?

Thanks in advance.

Jul 22 '05 #1
5 6382

"Sergey V" <se******@mail. ru> wrote in message
news:eF******** ******@TK2MSFTN GP12.phx.gbl...
when trying to access the application from ASP - gettting
DCOM got error "General access denied error " from the computer MY_SERVER
when attempting to activate the server:
in System event log. Granting "everyone" on target system resolves the
problem, but I would like to have limited user access.

When running the same client scenario from test C++ application running
under DOMAIN\my_user interactive account - everything works with no problem.
The question is what could be wrong with configuration of security under
IIS?


Are you logging on via the web page or running anonymous? Does the
anonymous user have access via DCOM?
Jul 22 '05 #2

"Jeff Fink" <jf********@yah oo.com> wrote in message
news:%2******** ********@TK2MSF TNGP14.phx.gbl. ..

"Sergey V" <se******@mail. ru> wrote in message
news:eF******** ******@TK2MSFTN GP12.phx.gbl...
when trying to access the application from ASP - gettting
DCOM got error "General access denied error " from the computer MY_SERVER
when attempting to activate the server:
in System event log. Granting "everyone" on target system resolves the
problem, but I would like to have limited user access.

When running the same client scenario from test C++ application running
under DOMAIN\my_user interactive account - everything works with no

problem.

The question is what could be wrong with configuration of security under
IIS?


Are you logging on via the web page or running anonymous? Does the
anonymous user have access via DCOM?


IIS Virtual Directory security is set to anonymous, but "Account used for
anonymous access" is DOMAIN\my_user. And I suppose it should be used to both
access file system and make RPC calls. Isn't it? Did not found references on
that topic in documentation.
Jul 22 '05 #3
Just found the solution, the trick is to :

1.. Set IIS Virtual Dir "Applicatio n Protection" to High (Isloated), now
we'll get COM+ application registered
2.. Go to Control Panel -> Administrative Tools -> Component service

and find the application under Component Services -> My Computer -> COM+
Applications :

and specify the user on Identity tab
"Sergey V" <se******@mail. ru> wrote in message
news:eF******** ******@TK2MSFTN GP12.phx.gbl...
Having following problem

1. Client: ASP application with anonymous access to be running as
DOMAIN\my_user on WinXP
2. Server: DCOM NT Service runs on remote host (W2K Server) under the same
account DOMAIN\my_user
security within server is initialized using
hr = CoInitializeSec urity(&appid, -1, NULL, NULL, 0, 0, 0, EOAC_APPID,
NULL);

when trying to access the application from ASP - gettting
DCOM got error "General access denied error " from the computer MY_SERVER
when attempting to activate the server:
in System event log. Granting "everyone" on target system resolves the
problem, but I would like to have limited user access.

When running the same client scenario from test C++ application running
under DOMAIN\my_user interactive account - everything works with no
problem.

The question is what could be wrong with configuration of security under
IIS?

Thanks in advance.

Jul 22 '05 #4

"Sergey V" <se******@mail. ru> wrote in message
news:uR******** ******@TK2MSFTN GP15.phx.gbl...

IIS Virtual Directory security is set to anonymous, but "Account used for
anonymous access" is DOMAIN\my_user. And I suppose it should be used to both access file system and make RPC calls. Isn't it? Did not found references on that topic in documentation.


Saw that you found your solution, but I thought I would comment on your
question. Several years ago, I worked at MS in Redmond and was given the
task of setting up a prototype web personalization system using existing MS
products so we could do performance measurements of the different
components. The idea being that we would use the best parts and build
better ones for the places where performance was a problem.

So I put the system together and used an early ADSI build to query a DS from
an ASP web page (IIS 4). I found dramatically different results when
querying via ASP versus an identical VBS script run from the command line.
So different in fact, that you could only query ADSI 64 times via ASP
(didn't matter if it was 64 times on one page or 64 pages with 1 query)
before the Windows LDAP client would lock up and stop issuing queries. The
VBS script had no such limitations.

They got me a fix, but I never really understood what the problem was. The
only difference between my ASP and VBS code was the function I called to
output the results. So there was something in IIS that greatly affected the
way the objects were called and run. I would suspect that in some ways
there still is.

-Jeff


Jul 22 '05 #5
This really has nothing to do with the OP's problem.

The reason Sergey hit an access denied, is that by default, an ASP
application runs as IWAN_<computer> .

Brian
Jul 22 '05 #6

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

9
6336
by: | last post by:
Hi All, I have allready tried to ask a similar question , but got no answer until now. In the meantime, I found, that I cannot understand some thread-settings for the Main() function . If I use the attribute for the Main() function, I get "access denied error", if I use a ManagementEventWatcher to connect to the local machine to receive events. Is there anybody out there, how possibly can explain why this happens?? If I remove this...
3
3638
by: Roy Osherove | last post by:
Hi folks. I have an ASP.Net application that runs a .Net dll that uses WMI and ADSI(both managed) to connect to a given IIS root and search through it. When not using the ASP.Net client, but running from a winforms project - I can connect to both local and remote machines. However, when using the ASP.Net project - I get an "Access denied" exception. This happens when calling the ManagementScope.Connect() method.
1
2277
by: DotNetJunkies User | last post by:
Hi, I have a web application that accesses a DCOM. Every thing works fine on Windows XP sp1 but when I installed service pack 2 I got an access denied when the application tried to create an instance to the DCOM. C# code where I get the access is denied occurred. OPCserverObj = Activator.CreateInstance(typeofOPCserver); Does anybody have an idée on how to solve this problem? Many Thanks
3
3263
by: Ubbe17 | last post by:
Hi, I have a web application that accesses a DCOM. Every thing works fine on Windows XP sp1 but when I installed service pack 2 I got an access denied when the application tried to create an instance to the DCOM. C# code where I get the access is denied occurred. OPCserverObj = Activator.CreateInstance(typeofOPCserver); Does anybody have an idée on how to solve this problem?
1
2710
by: Selden McCabe | last post by:
I have a web service the uses MS Word to do mail merge and printing documents. When I run the service on my development box, it works. When I run in on the server, I get "Access Denied" when it tries to start Word. At first, I was getting a dcom launch failure in the event log, but I fixed that with DCOMCNFG settings. But I'm still getting Access Denied. I tried setting the user for Word (in dcomcnfg) as a local acmin account on the...
0
3900
by: matsla | last post by:
I have followed all guide lines to set up remote debugging but is it possible to do cross-domain remote debugging? I use same account/password on both computers (XP => 2003), added users to debug group, change DCOM security etc. I get following error in the event log when try to start the remote debugging Visual Studio 2003... DCOM got error "General access denied error" from the computer COMP1
0
1789
by: Rico | last post by:
Helolo, I have an ASP.NET application on a Windows 2003 Server machine WITHOUT VS. I am working on an XPPro machine with VS 2003. I have installed the remote debugging components on the server. Aside from having administrative rights, I have also put myself in the Debugger Users group. I have added ASPNET and even IUSR_SERVERNAME to the Debuggers group (don't worry, it's a dev server not a live machine) and I still get "Access Denied"...
3
5439
by: Simon | last post by:
Hi All, I'm hoping someone will have some words of wisdom for me regarding MS Clustering on Windows 2003. I have a service that runs on a cluster. During invocation it's supposed to determine from the cluster which node is active (this is a active/standby configuration) and either proceed or sleep depending on the status. The interface to the cluster is that advertised by the standard interop layer built by Visual Studio for the...
0
430
by: royan | last post by:
Help please! I have the same problem which this post http://groups.google.com/group/microsoft.public.vsnet.vstools.office/browse_thread/thread/91275741fa1e100f/164638c6d6ba3872?lnk=gst&q=System.UnauthorizedAccessException%3A+Access+is+denied.&rnum=1&hl=en#164638c6d6ba3872 When I deploy our ASP.NET Application web form to Windows server 2003 I got access deny error. We are using the Microsoft.Office.Interop.Word COM DLL. We need to read a...
0
9901
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, well explore What is ONU, What Is Router, ONU & Routers main usage, and What is the difference between ONU and Router. Lets take a closer look ! Part I. Meaning of...
0
9751
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
11024
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10679
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
0
9513
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development projectplanning, coding, testing, and deploymentwithout human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
7914
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupr who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
7081
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5741
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
1
4560
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.