Home All Groups Group Topic Archive Search About

Web site can't be browsed when logging out from IISv6.0 Server

microsoft.public.inetserver.iis.security
Author
12 Oct 2006 3:04 PM
B
On IIS v6.0, when logged in as local administrator or Domain Administrator, I
am able to browse the website.  However, once log out, I am not able to
browse the website (page can't be displayed).  Can anybody help??

Here is the iislog.

2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
10.27.14.135
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
301 0 0
2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder/Default.asp
|3|ASP_0177_:_8000401a|Server.CreateObject_Failed 80 - 10.27.14.135
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
500 0 0
2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
10.27.14.135
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
301 0 0
2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder/Default.asp
- 80 - 10.27.14.135
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
200 0 0
2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
/dealbuilder/stylesheet/default/form.css - 80 - 10.27.14.135
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
200 0 0
2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
/dealbuilder/image/default/page_background.gif - 80 - 10.27.14.135
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
200 0 0
2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
/dealbuilder/stylesheet/default/base.css - 80 - 10.27.14.135
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
200 0 64
2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
/dealbuilder/image/default/page_header.gif - 80 - 10.27.14.135
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
200 0 0

Author
13 Oct 2006 12:13 PM
Roger Abell [MVP]
The log seems to show that the account used for anonymous
access is able to cause static parts of the default.asp page to
render, but that it lack sufficient permissions to instance whatever
object it is that the page attempts to use.

Show quoteHide quote
"B" <B@discussions.microsoft.com> wrote in message
news:CEB4DDEE-A116-4EBC-80CF-9A590B4544AF@microsoft.com...
> On IIS v6.0, when logged in as local administrator or Domain
> Administrator, I
> am able to browse the website.  However, once log out, I am not able to
> browse the website (page can't be displayed).  Can anybody help??
>
> Here is the iislog.
>
> 2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
> 10.27.14.135
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> 301 0 0
> 2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET
> /dealbuilder/Default.asp
> |3|ASP_0177_:_8000401a|Server.CreateObject_Failed 80 - 10.27.14.135
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> 500 0 0
> 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
> 10.27.14.135
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> 301 0 0
> 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> /dealbuilder/Default.asp
> - 80 - 10.27.14.135
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> 200 0 0
> 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> /dealbuilder/stylesheet/default/form.css - 80 - 10.27.14.135
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> 200 0 0
> 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> /dealbuilder/image/default/page_background.gif - 80 - 10.27.14.135
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> 200 0 0
> 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> /dealbuilder/stylesheet/default/base.css - 80 - 10.27.14.135
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> 200 0 64
> 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> /dealbuilder/image/default/page_header.gif - 80 - 10.27.14.135
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> 200 0 0
>
>
>
Author
13 Oct 2006 12:56 PM
B
Roger,
Would you explain a little more details to trouble shoot this issue?  I need
what should look at it and how to fix what.  If you need more information,
let me know.  Thank you,

Show quoteHide quote
"Roger Abell [MVP]" wrote:

> The log seems to show that the account used for anonymous
> access is able to cause static parts of the default.asp page to
> render, but that it lack sufficient permissions to instance whatever
> object it is that the page attempts to use.
>
> "B" <B@discussions.microsoft.com> wrote in message
> news:CEB4DDEE-A116-4EBC-80CF-9A590B4544AF@microsoft.com...
> > On IIS v6.0, when logged in as local administrator or Domain
> > Administrator, I
> > am able to browse the website.  However, once log out, I am not able to
> > browse the website (page can't be displayed).  Can anybody help??
> >
> > Here is the iislog.
> >
> > 2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
> > 10.27.14.135
> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > 301 0 0
> > 2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET
> > /dealbuilder/Default.asp
> > |3|ASP_0177_:_8000401a|Server.CreateObject_Failed 80 - 10.27.14.135
> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > 500 0 0
> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
> > 10.27.14.135
> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > 301 0 0
> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> > /dealbuilder/Default.asp
> > - 80 - 10.27.14.135
> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > 200 0 0
> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> > /dealbuilder/stylesheet/default/form.css - 80 - 10.27.14.135
> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > 200 0 0
> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> > /dealbuilder/image/default/page_background.gif - 80 - 10.27.14.135
> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > 200 0 0
> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> > /dealbuilder/stylesheet/default/base.css - 80 - 10.27.14.135
> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > 200 0 64
> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> > /dealbuilder/image/default/page_header.gif - 80 - 10.27.14.135
> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > 200 0 0
> >
> >
> >
>
>
>
Author
14 Oct 2006 9:52 AM
David Wang
The support personel of the ASP application needs to tell you how to
configure their application to run without being a system administrator
or requiring an interactive logon console -- because that requirement
is a security vulnerability.

The application may require such privileges to function, in which case
you have a choice of either running the vulnerable application or
finding another application which fits your needs and is more secure.

If the application does not really require such privileges, then the
support personel should tell you what privileges are necessary and how
to configure IIS to achieve that.

Once you obtain information about the requirements of the ASP
application from its support personel, then we can better help you
perform the proper IIS configuration (which they should be doing for
you, BTW). Otherwise, we would just be guessing at the answer and
providing support for the software that someone else is responsible to
perform. Think of it this way - if you have problems getting support
from the application's provider right now, is it such a good idea to
use and depend on that application?


//David
http://w3-4u.blogspot.com
//


B wrote:
Show quoteHide quote
> Roger,
> Would you explain a little more details to trouble shoot this issue?  I need
> what should look at it and how to fix what.  If you need more information,
> let me know.  Thank you,
>
> "Roger Abell [MVP]" wrote:
>
> > The log seems to show that the account used for anonymous
> > access is able to cause static parts of the default.asp page to
> > render, but that it lack sufficient permissions to instance whatever
> > object it is that the page attempts to use.
> >
> > "B" <B@discussions.microsoft.com> wrote in message
> > news:CEB4DDEE-A116-4EBC-80CF-9A590B4544AF@microsoft.com...
> > > On IIS v6.0, when logged in as local administrator or Domain
> > > Administrator, I
> > > am able to browse the website.  However, once log out, I am not able to
> > > browse the website (page can't be displayed).  Can anybody help??
> > >
> > > Here is the iislog.
> > >
> > > 2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
> > > 10.27.14.135
> > > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > > 301 0 0
> > > 2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET
> > > /dealbuilder/Default.asp
> > > |3|ASP_0177_:_8000401a|Server.CreateObject_Failed 80 - 10.27.14.135
> > > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > > 500 0 0
> > > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
> > > 10.27.14.135
> > > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > > 301 0 0
> > > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> > > /dealbuilder/Default.asp
> > > - 80 - 10.27.14.135
> > > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > > 200 0 0
> > > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> > > /dealbuilder/stylesheet/default/form.css - 80 - 10.27.14.135
> > > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > > 200 0 0
> > > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> > > /dealbuilder/image/default/page_background.gif - 80 - 10.27.14.135
> > > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > > 200 0 0
> > > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> > > /dealbuilder/stylesheet/default/base.css - 80 - 10.27.14.135
> > > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > > 200 0 64
> > > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> > > /dealbuilder/image/default/page_header.gif - 80 - 10.27.14.135
> > > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> > > 200 0 0
> > >
> > >
> > >
> >
> >
> >
Author
14 Oct 2006 1:25 PM
Roger Abell [MVP]
Well, as David has outlined, there is not much for us to go on.
Your logs show that there is a failure to instance some object
|3|ASP_0177_:_8000401a|Server.CreateObject_Failed
during the attempt to render the default.asp page.  We do not
know what this object is, whether the failure is due to permissions
to use the object, how the object is or is not configured, what the
object tries to do during its initialization, etc.
But, that is where you would need to look, for this problem on
this page.  If as David assumes, this is not your code, then it is
very possible that getting past this problem would only get you to
the next, and so those that put the code together would be the best
source for you to contact.

Roger
Show quoteHide quote
"B" <B@discussions.microsoft.com> wrote in message
news:C75238E9-30D6-49A5-BBA7-F1B40E4DF3BA@microsoft.com...
> Roger,
> Would you explain a little more details to trouble shoot this issue?  I
> need
> what should look at it and how to fix what.  If you need more information,
> let me know.  Thank you,
>
> "Roger Abell [MVP]" wrote:
>
>> The log seems to show that the account used for anonymous
>> access is able to cause static parts of the default.asp page to
>> render, but that it lack sufficient permissions to instance whatever
>> object it is that the page attempts to use.
>>
>> "B" <B@discussions.microsoft.com> wrote in message
>> news:CEB4DDEE-A116-4EBC-80CF-9A590B4544AF@microsoft.com...
>> > On IIS v6.0, when logged in as local administrator or Domain
>> > Administrator, I
>> > am able to browse the website.  However, once log out, I am not able to
>> > browse the website (page can't be displayed).  Can anybody help??
>> >
>> > Here is the iislog.
>> >
>> > 2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
>> > 10.27.14.135
>> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
>> > 301 0 0
>> > 2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET
>> > /dealbuilder/Default.asp
>> > |3|ASP_0177_:_8000401a|Server.CreateObject_Failed 80 - 10.27.14.135
>> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
>> > 500 0 0
>> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
>> > 10.27.14.135
>> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
>> > 301 0 0
>> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
>> > /dealbuilder/Default.asp
>> > - 80 - 10.27.14.135
>> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
>> > 200 0 0
>> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
>> > /dealbuilder/stylesheet/default/form.css - 80 - 10.27.14.135
>> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
>> > 200 0 0
>> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
>> > /dealbuilder/image/default/page_background.gif - 80 - 10.27.14.135
>> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
>> > 200 0 0
>> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
>> > /dealbuilder/stylesheet/default/base.css - 80 - 10.27.14.135
>> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
>> > 200 0 64
>> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
>> > /dealbuilder/image/default/page_header.gif - 80 - 10.27.14.135
>> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
>> > 200 0 0
>> >
>> >
>> >
>>
>>
>>
Author
17 Oct 2006 2:28 PM
B
OK.  I understood what you meant.  Thank you so much for your support anyway!

Show quoteHide quote
"Roger Abell [MVP]" wrote:

> Well, as David has outlined, there is not much for us to go on.
> Your logs show that there is a failure to instance some object
> |3|ASP_0177_:_8000401a|Server.CreateObject_Failed
> during the attempt to render the default.asp page.  We do not
> know what this object is, whether the failure is due to permissions
> to use the object, how the object is or is not configured, what the
> object tries to do during its initialization, etc.
> But, that is where you would need to look, for this problem on
> this page.  If as David assumes, this is not your code, then it is
> very possible that getting past this problem would only get you to
> the next, and so those that put the code together would be the best
> source for you to contact.
>
> Roger
> "B" <B@discussions.microsoft.com> wrote in message
> news:C75238E9-30D6-49A5-BBA7-F1B40E4DF3BA@microsoft.com...
> > Roger,
> > Would you explain a little more details to trouble shoot this issue?  I
> > need
> > what should look at it and how to fix what.  If you need more information,
> > let me know.  Thank you,
> >
> > "Roger Abell [MVP]" wrote:
> >
> >> The log seems to show that the account used for anonymous
> >> access is able to cause static parts of the default.asp page to
> >> render, but that it lack sufficient permissions to instance whatever
> >> object it is that the page attempts to use.
> >>
> >> "B" <B@discussions.microsoft.com> wrote in message
> >> news:CEB4DDEE-A116-4EBC-80CF-9A590B4544AF@microsoft.com...
> >> > On IIS v6.0, when logged in as local administrator or Domain
> >> > Administrator, I
> >> > am able to browse the website.  However, once log out, I am not able to
> >> > browse the website (page can't be displayed).  Can anybody help??
> >> >
> >> > Here is the iislog.
> >> >
> >> > 2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
> >> > 10.27.14.135
> >> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> >> > 301 0 0
> >> > 2006-10-12 14:50:04 W3SVC1 NYIISLAB 10.19.11.36 GET
> >> > /dealbuilder/Default.asp
> >> > |3|ASP_0177_:_8000401a|Server.CreateObject_Failed 80 - 10.27.14.135
> >> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> >> > 500 0 0
> >> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET /dealbuilder - 80 -
> >> > 10.27.14.135
> >> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> >> > 301 0 0
> >> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> >> > /dealbuilder/Default.asp
> >> > - 80 - 10.27.14.135
> >> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> >> > 200 0 0
> >> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> >> > /dealbuilder/stylesheet/default/form.css - 80 - 10.27.14.135
> >> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> >> > 200 0 0
> >> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> >> > /dealbuilder/image/default/page_background.gif - 80 - 10.27.14.135
> >> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> >> > 200 0 0
> >> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> >> > /dealbuilder/stylesheet/default/base.css - 80 - 10.27.14.135
> >> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> >> > 200 0 64
> >> > 2006-10-12 14:50:17 W3SVC1 NYIISLAB 10.19.11.36 GET
> >> > /dealbuilder/image/default/page_header.gif - 80 - 10.27.14.135
> >> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
> >> > 200 0 0
> >> >
> >> >
> >> >
> >>
> >>
> >>
>
>
>



Post Other interesting topics
Is posting from http to https secure?
Multiple websites in one IIS with Integrated Windows Authentication
SSLv3 with certificate issued by Intermediate certificae authority
Cannot get logon prompted on web page on one machine
Problem with Impersonation / Delegation
How do you get rid of IIS Anonymous Event Logs?
Create Virtual Directory from DMZ to LAN
firefox 1.5 & iis6.0
Password protecting a single page on IIS
SSL Problem