Groups | Blog | Home
all groups > iis security > february 2005 >

iis security : Server.CreateObject fails on W2K3 IIS6


Thomas Stensitzki
2/28/2005 11:58:29 AM
Hello,

I do have a problem using a Server.CreateObject command within an ASP page.

The code:
Set adoCon = Server.CreateObject("ADODB.Connection")

Throws an VBScript runtime error:
Microsoft VBScript runtime error '800a01ad'
ActiveX component can't create object

The System is running Windows 2003 Server, IIS6, .NET Framework 1.1
All lastest Service Packs and Patches are installed.
The Server has Share Point Portal Server installed, but the website having
the problem is not running as a SharePoint Portal Site.

The problems occurs in a virtual folder with is nested in a .NET
Application. The Website uses the DefaultAppPool is running under NETWORK
SERVICE.

I have granted the NETWORK SERVICE read access to the Program Files\Common
Files\System\Ado folder.

There are no event log entries in the application event log.

How can I fix this??

Regards,
Thomas

Thomas Stensitzki
2/28/2005 3:22:50 PM
Ken:

[quoted text, click to view]

I 've checked the MDAC installation using the ComCheck Tool. The tool found
MDAC 2.8 RTM. This version comes with Windows Server 2003.
The ComCheck tool found 3 files which mismatch the regular installation. I
think that those files were replaced during a Security Patch installation.

<group name="MISMATCH" count="3"><file
xmlns="http://tempuri.org/CCFilestream_template.xsd" name="ODBCBCP.DLL"
dir="%SYSTEMDIR%\">
<release name="MDAC 2.8 RTM" version="2000.85.1022.0"/>
<found xmlns="" Description="Microsoft BCP for ODBC" date="12/12/2003"
fileVersion="2000.085.1025.00 built by: (_sqlbld)" size="24576"
version="2000.85.1025.0"/><result xmlns=""
mismatch_fields="version"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd"
name="SQLSRV32.DLL" dir="%SYSTEMDIR%\" CoreFile="Yes">
<release name="MDAC 2.8 RTM" version="2000.85.1022.0"/>
<found xmlns="" Description="Microsoft SQL Server ODBC Driver"
date="11/18/2003" fileVersion="2000.085.1025.00 built by: (_sqlbld)"
size="401408" version="2000.85.1025.0"/><result xmlns=""
mismatch_fields="version"/></file>
<file xmlns="http://tempuri.org/CCFilestream_template.xsd" name="msxml3.dll"
dir="%SYSTEMDIR%">
<release name="MDAC 2.8 RTM" version="8.40.9419.0"/>
<found xmlns="" Description="MSXML 3.0 SP 5" date="09/22/2004"
fileVersion="8.50.2162.0" size="1380352" version="8.50.2162.0"/><result
xmlns="" mismatch_fields="version"/></file>
</group>

[quoted text, click to view]

I did a check using FileMon. But I do not see any permission probelms.
Therefore I am somewhat lost in space :-(

15:20:50 w3wp.exe:5396 IRP_MJ_CREATE D:\InetPub\SF-Tools\forum\Default.asp
SUCCESS Options: Open Access: All
15:20:50 w3wp.exe:5396 IRP_MJ_QUERY_VOLUME_INFORMATION
D:\InetPub\SF-Tools\forum\Default.asp BUFFER OVERFLOW
FileFsVolumeInformation
15:20:50 w3wp.exe:5396 IRP_MJ_QUERY_INFORMATION
D:\InetPub\SF-Tools\forum\Default.asp BUFFER OVERFLOW FileAllInformation
15:20:50 w3wp.exe:5396 IRP_MJ_CLEANUP D:\InetPub\SF-Tools\forum\Default.asp
SUCCESS
15:20:50 w3wp.exe:5396 IRP_MJ_CLOSE D:\InetPub\SF-Tools\forum\Default.asp
SUCCESS

Do you have any other ideas how to drill that down?

Regards,
Thomas

Ken Schaefer
3/1/2005 12:45:25 AM
Two suggestions:

a) ensure that your MDAC is OK. You can use the ComCheck tool to do this:
http://www.microsoft.com/downloads/details.aspx?FamilyId=8F0A8DF6-4A21-4B43-BF53-14332EF092C9&displaylang=en

b) Check that there isn't a permissions problem on one of the MDAC dlls. You
can use filemon for this:
www.sysinternals.com

Cheers
Ken

[quoted text, click to view]
: Hello,
:
: I do have a problem using a Server.CreateObject command within an ASP
page.
:
: The code:
: Set adoCon = Server.CreateObject("ADODB.Connection")
:
: Throws an VBScript runtime error:
: Microsoft VBScript runtime error '800a01ad'
: ActiveX component can't create object
:
: The System is running Windows 2003 Server, IIS6, .NET Framework 1.1
: All lastest Service Packs and Patches are installed.
: The Server has Share Point Portal Server installed, but the website having
: the problem is not running as a SharePoint Portal Site.
:
: The problems occurs in a virtual folder with is nested in a .NET
: Application. The Website uses the DefaultAppPool is running under NETWORK
: SERVICE.
:
: I have granted the NETWORK SERVICE read access to the Program Files\Common
: Files\System\Ado folder.
:
: There are no event log entries in the application event log.
:
: How can I fix this??
:
: Regards,
: Thomas
:
:

Parvez
4/29/2005 11:23:39 AM
Hi Thomas,

Try this.

Delete the COM from DCOM application.

Try to manually registering your dll and test your apps.

regsrv32 "e:\test.dll"

See if it works.









[quoted text, click to view]
technus
5/6/2005 10:40:11 AM

Hi There. I am having the same problem with a small variation: I had a
W2k Server with some web-published folders on it, by using an asp page
to list the files.
We migrated the site to a w2k3 server, and now the site cannot list
the files, and it shows a "800a0046 permission denied error", referring
to line 58 in /inc/workspace.inc.

The line is:

OfficeWebFolder.Init Server, Request

I have checked permissions on both servers and ther is no any
difference, even reinstalled Office Server Extensions on the new server
(the troubled one).

I guess there is some permission missing, but cannot figure where it
is. Your help would be greatly appreciated.



[quoted text, click to view]



--
technus
------------------------------------------------------------------------
Posted via http://www.webservertalk.com
------------------------------------------------------------------------
View this thread: http://www.webservertalk.com/message936943.html
AddThis Social Bookmark Button