Windows 2003/IIS 6: Only Classic ASP won't load (500_Server_Error)

[Elliot Ramos]

I have done a lot of searching and I have yet to find a solution to
this problem.

Background:
- Installing and configuring a new server running Windows Server 2003
and IIS 6
- Some newer web content is ASP.NET, some older content is Classic ASP.
- Show friendly messages is unchecked (turned off) in Internet Explorer

Problem:
- Classic ASP pages will not load at all and will only display a
"HTTP/1.1 500 Server Error" message even when "Show Friendly HTTP Error
Messages" is unchecked. (I get the same error in Firefox.) On the
server, "Send detailed ASP error messages to client" is selected.

Notes:
- The Classic ASP applications work fine on another server running
Windows Server 2003 and IIS 6. (Not a code problem)
- ASP.NET applications work fine on this new server.
- Active Server Pages is Allowed in the Web Service Extensions tab of
the IIS Manager.

Example from the w3svc Log:
2006-05-25 14:49:39 W3SVC1069186588 xxx.xxx.xx.xxx GET
/gallery/index.asp |-|ASP_0147|500_Server_Error 80 - xxx.xxx.xx.xxx
Mozilla/5.0+(Windows;+U;+Windows+NT+5.1;+en-US;+rv:1.8.0.3)+Gecko/20060426+Firefox/1.5.0.3
500 0 0

>From the Server Event Viewer:

Event Type: Error
Event Source: Active Server Pages
Event Category: None
Event ID: 5
Date: 5/25/2006
Time: 2:13:02 PM
User: N/A
Computer:
Description:
Error: ASP will not serve requests because it could not perform the
first request initialization..

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

I have also attached the text file output from IISState. I have no clue
on how to interpret the log file.

---------START IISSTATE LOG ------------

Opened log file 'C:\iisstate\output\IISState-5240.log'

***********************
Starting new log output
IISState version 3.3.1

Wed May 24 15:51:53 2006

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 5240

Note: Thread times are formatted as HH:MM:SS.ms

***********************

Thread ID: 0
System Thread ID: 1064
Kernel Time: 0:0:0.15
User Time: 0:0:0.31
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0006fc08 7c822124 ntdll!KiFastSystemCallRet
01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12
04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d
06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd
07 0006ff0c 0100187c w3core!UlW3Start+0x26e
08 0006ff44 01001a23 w3wp!wmain+0x22a
09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b
0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23

Thread ID: 1
System Thread ID: 1170
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 009eff9c 7c821364 ntdll!KiFastSystemCallRet
01 009effa0 7c81fe26 ntdll!NtDelayExecution+0xc
02 009effb8 77e66063 ntdll!RtlpTimerThread+0x47
03 009effec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 2
System Thread ID: 1378
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00a2ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 00a2ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 00a2ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 00a2ffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 3
System Thread ID: 133c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 00a8ff70 7c821364 ntdll!KiFastSystemCallRet
01 00a8ff74 77c5fa28 ntdll!NtDelayExecution+0xc
02 00a8ff8c 77c5f824 RPCRT4!TIMER::Wait+0x2b
03 00a8ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0xe8
04 00a8ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
05 00a8ffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 4
System Thread ID: 424
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00c8ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00c8ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00c8ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00c8ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00c8ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00c8ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00c8ffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 5
System Thread ID: 290
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00ccff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00ccff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00ccff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00ccff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00ccffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00ccffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00ccffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 6
System Thread ID: 13b8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00d0ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00d0ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00d0ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00d0ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00d0ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00d0ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00d0ffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 7
System Thread ID: 13b4
Kernel Time: 0:0:0.46
User Time: 0:0:0.312
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00d4ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00d4ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00d4ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00d4ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00d4ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00d4ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00d4ffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 8
System Thread ID: 13bc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00e0fcec 7c822114 ntdll!KiFastSystemCallRet
01 00e0fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc
02 00e0ffb8 77e66063 ntdll!RtlpWaitThread+0x161
03 00e0ffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 9
System Thread ID: 13c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 017efa84 7c822124 ntdll!KiFastSystemCallRet
01 017efa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 017efaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 017efb0c 5a3b8147 kernel32!WaitForSingleObject+0x12
04 017effb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 017effec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 10
System Thread ID: 1380
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 0182fe18 7c821c54 ntdll!KiFastSystemCallRet
01 0182fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 0182ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 0182ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 0182ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 0182ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 0182ffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 11
System Thread ID: 13cc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0186ff8c 7c821364 ntdll!KiFastSystemCallRet
01 0186ff90 7c815267 ntdll!NtDelayExecution+0xc
02 0186ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f
03 0186ffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 12
System Thread ID: 65c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 0253ff0c 7c822124 ntdll!KiFastSystemCallRet
01 0253ff10 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0253ff80 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0253ff94 709fc91b kernel32!WaitForSingleObject+0x12
04 0253ffb4 709fc8f3 asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x1e
05 0253ffb8 77e66063 asp!CApplnCleanupMgr::ApplnCleanupThread+0xa
06 0253ffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 13
System Thread ID: 115c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 0369fe1c 7c822114 ntdll!KiFastSystemCallRet
01 0369fe20 77e6711b ntdll!NtWaitForMultipleObjects+0xc
02 0369fec8 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a
03 0369ff24 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 0369ff40 709fbcbe USER32!MsgWaitForMultipleObjects+0x1f
05 0369ff84 77bcb530 asp!CMTACallbackThread::Thread+0x4f
06 0369ffb8 77e66063 msvcrt!_endthreadex+0xa3
07 0369ffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 14
System Thread ID: 1050
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 009aff70 7c821bf4 ntdll!KiFastSystemCallRet
01 009aff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 009affb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 009affec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 15
System Thread ID: 122c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00acff70 7c821bf4 ntdll!KiFastSystemCallRet
01 00acff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 00acffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 00acffec 00000000 kernel32!BaseThreadStart+0x34

Closing open log file C:\iisstate\output\IISState-5240.log

--------- END IISSTATE LOG ------------

I appreciate all recommendations and advice.

Thanks,
Elliot

[Bernard Cheah [MVP]]

Seen this but no solution so far ? have you try add/remove asp component ?
or even reinstall IIS ?

anything else in event log ?
--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/

"Elliot Ramos" <ellio...@gmail.com> wrote in message
news:1148589668.4...@j33g2000cwa.googlegroups.com...

[Elliot Ramos]

I found more information in the error logs:
from httperr:

2006-05-25 15:19:04 130.126.82.149 2012 130.126.82.240 80 HTTP/1.1 GET
/gallery/ - 1069186588 Timer_AppPool DefaultAppPool

And one of these in the event log:
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 5/25/2006
Time: 3:54:00 PM
User: N/A
Computer:
Description:
Faulting application w3wp.exe, version 6.0.3790.1830, faulting module
iisutil.dll, version 6.0.3790.1830, fault address 0x000162f1.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 77 33 77 ure w3w
0018: 70 2e 65 78 65 20 36 2e p.exe 6.
0020: 30 2e 33 37 39 30 2e 31 0.3790.1
0028: 38 33 30 20 69 6e 20 69 830 in i
0030: 69 73 75 74 69 6c 2e 64 isutil.d
0038: 6c 6c 20 36 2e 30 2e 33 ll 6.0.3
0040: 37 39 30 2e 31 38 33 30 790.1830
0048: 20 61 74 20 6f 66 66 73 at offs
0050: 65 74 20 30 30 30 31 36 et 00016
0058: 32 66 31 2f1

[Consultant]

ill suggest a couple of utils:
-debugviewNT
-authdiag

"Elliot Ramos" <ellio...@gmail.com> wrote in message
news:1148589668.4...@j33g2000cwa.googlegroups.com...

[Bernard Cheah [MVP]]

Still not much info can't be related to this :)

have you try my previous suggestion ?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/

"Elliot Ramos" <ellio...@gmail.com> wrote in message

news:1148655777.9...@g10g2000cwb.googlegroups.com...

[Elliot Ramos]

I have tried everything except reinstalling IIS. I am checking with
one of my colleagues to see how difficult it would be to reinstall just
IIS.

Thanks for your suggestions, I'll keep you posted.

Elliot

[Elliot Ramos]

Latest Update:

IIS 6 was reinstalled yesterday.

Today, I was getting a 401.3 error for only the .asp files.
(Encouraging compared to the old random 500 error.)

I went through the default permissions in the document and set the
appropriate ones:
http://support.microsoft.com/kb/812614/

Still no luck. (I did discover that only Administrators could access
the .asp files when Integrated Windows Authentication is checked -->
the file must have ACL allowing on Administrators).

I set the permissions on ASP.DLL (in c:\windows\system32\inetsrv\) to
allow Read and Execute for the IUSR account.

The result:
Now, I am getting the 500 Server Error AGAIN and the Event Log once
again reports this error: "ASP will not serve requests because it could

not perform the first request initialization."

At this point, I'm hella salty, but I'm going to keep looking for the
solution.

Has anyone experienced these same headaches before?

Thanks,
Elliot

[Bernard Cheah [MVP]]

Mmm.... it does look like permission issues. Have you try filemon and regmon
?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/

"Elliot Ramos" <ellio...@gmail.com> wrote in message

news:1149192663.7...@y43g2000cwc.googlegroups.com...

[Elliot Ramos]

I have run Filemon and Regmon to try to catch the problem...Now I don't
know what it is telling me. There are no "ACCESS DENIED" entries.

In the attached logs, here is what I did at each time marker:
11:06:53 - Went to the main site in Internet Explorer (index.aspx), it
loads with no problem
11:07:19 - Go to bigdummy.asp. (Simple ASP with one line: <%
response.write ("Big Dummy.") %>) The windows authentication popup
comes up. I try to pass with a user not in the admin group. It fails.
11:08:26 - I try the same user again, fails.
11:08:58 - It fails a 3rd time.
11:09:30 - bigdummy.asp loads when I authenticate with an administrator
log in.

Do you see any hints in the Filemon/Regmon log that I am overlooking?
Are there any ACLs specific to only Active Server Pages that I am
missing?

Thanks,
Elliot

--------Attachment 1: Filemon.log--------------
1 11:06:53 AM w3wp.exe:3732 OPEN F:\Website\ SUCCESS Options: Open
NoBuffer Access: All
2 11:06:53 AM w3wp.exe:3732 QUERY INFORMATION F:\Website\ BUFFER
OVERFLOW FileFsVolumeInformation
3 11:06:53 AM w3wp.exe:3732 QUERY INFORMATION F:\Website\ BUFFER
OVERFLOW FileAllInformation
4 11:06:53 AM w3wp.exe:3732 CLOSE F:\Website\ SUCCESS
5 11:06:53 AM w3wp.exe:3732 OPEN F:\Website\index.aspx SUCCESS Options:
Open Access: All
6 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\index.aspx BUFFER
OVERFLOW FileFsVolumeInformation
7 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\index.aspx BUFFER OVERFLOW FileAllInformation
8 11:06:53 AM w3wp.exe:3732 CLOSE F:\Website\index.aspx SUCCESS
9 11:06:53
AM w3wp.exe:3732 OPEN F:\Website\scripts\omsascripts.js SUCCESS Options:
Open NoBuffer Access: All
10 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\scripts\omsascripts.js BUFFER
OVERFLOW FileFsVolumeInformation
11 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\scripts\omsascripts.js BUFFER
OVERFLOW FileAllInformation
12 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\scripts\omsascripts.js SUCCESS Length: 1714
13 11:06:53 AM w3wp.exe:3732 READ
F:\Website\scripts\omsascripts.js SUCCESS Offset: 0 Length: 2048
14 11:06:53
AM w3wp.exe:3732 CLOSE F:\Website\scripts\omsascripts.js SUCCESS
15 11:06:53
AM w3wp.exe:3732 OPEN F:\Website\stylesheets\omsatemplate.css SUCCESS Options:
Open NoBuffer Access: All
16 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\stylesheets\omsatemplate.css BUFFER
OVERFLOW FileFsVolumeInformation
17 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\stylesheets\omsatemplate.css BUFFER
OVERFLOW FileAllInformation
18 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\stylesheets\omsatemplate.css SUCCESS Length:
6353
19 11:06:53 AM w3wp.exe:3732 READ
F:\Website\stylesheets\omsatemplate.css SUCCESS Offset: 0 Length:
6656
20 11:06:53
AM w3wp.exe:3732 OPEN F:\Website\images\header2.gif SUCCESS Options:
Open NoBuffer Access: All
21 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\header2.gif BUFFER
OVERFLOW FileFsVolumeInformation
22 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\header2.gif BUFFER
OVERFLOW FileAllInformation
23 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\header2.gif SUCCESS Length: 17186
24 11:06:53 AM w3wp.exe:3732 READ
F:\Website\images\header2.gif SUCCESS Offset: 0 Length: 17408
25 11:06:53
AM w3wp.exe:3732 CLOSE F:\Website\stylesheets\omsatemplate.css SUCCESS
26 11:06:53
AM w3wp.exe:3732 CLOSE F:\Website\images\header2.gif SUCCESS
27 11:06:53
AM w3wp.exe:3732 OPEN F:\Website\images\frontpage_graphic_gray.jpg SUCCESS Options:
Open NoBuffer Access: All
28 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\frontpage_graphic_gray.jpg BUFFER
OVERFLOW FileFsVolumeInformation
29 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\frontpage_graphic_gray.jpg BUFFER
OVERFLOW FileAllInformation
30 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\frontpage_graphic_gray.jpg SUCCESS Length:
49825
31 11:06:53 AM w3wp.exe:3732 READ
F:\Website\images\frontpage_graphic_gray.jpg SUCCESS Offset: 0 Length:
50176
32 11:06:53
AM w3wp.exe:3732 OPEN F:\Website\images\omsa_header_background.gif SUCCESS Options:
Open NoBuffer Access: All
33 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\omsa_header_background.gif BUFFER
OVERFLOW FileFsVolumeInformation
34 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\omsa_header_background.gif BUFFER
OVERFLOW FileAllInformation
35 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\omsa_header_background.gif SUCCESS Length:
291
36 11:06:53 AM w3wp.exe:3732 READ
F:\Website\images\omsa_header_background.gif SUCCESS Offset: 0 Length:
512
37 11:06:53
AM w3wp.exe:3732 CLOSE F:\Website\images\frontpage_graphic_gray.jpg SUCCESS
38 11:06:53
AM w3wp.exe:3732 OPEN F:\Website\images\watermark.jpg SUCCESS Options:
Open NoBuffer Access: All
39 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\watermark.jpg BUFFER
OVERFLOW FileFsVolumeInformation
40 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\watermark.jpg BUFFER
OVERFLOW FileAllInformation
41 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\watermark.jpg SUCCESS Length: 18084
42 11:06:53 AM w3wp.exe:3732 READ
F:\Website\images\watermark.jpg SUCCESS Offset: 0 Length: 18432
43 11:06:53
AM w3wp.exe:3732 CLOSE F:\Website\images\omsa_header_background.gif SUCCESS
44 11:06:53
AM w3wp.exe:3732 CLOSE F:\Website\images\watermark.jpg SUCCESS
45 11:06:53
AM w3wp.exe:3732 OPEN F:\Website\images\google_grey.gif SUCCESS Options:
Open NoBuffer Access: All
46 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\google_grey.gif BUFFER
OVERFLOW FileFsVolumeInformation
47 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\google_grey.gif BUFFER
OVERFLOW FileAllInformation
48 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\google_grey.gif SUCCESS Length: 1473
49 11:06:53 AM w3wp.exe:3732 READ
F:\Website\images\google_grey.gif SUCCESS Offset: 0 Length: 1536
50 11:06:53
AM w3wp.exe:3732 OPEN F:\Website\images\vsmlformal.gif SUCCESS Options:
Open NoBuffer Access: All
51 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\vsmlformal.gif BUFFER
OVERFLOW FileFsVolumeInformation
52 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\vsmlformal.gif BUFFER
OVERFLOW FileAllInformation
53 11:06:53 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\images\vsmlformal.gif SUCCESS Length: 280
54 11:06:53 AM w3wp.exe:3732 READ
F:\Website\images\vsmlformal.gif SUCCESS Offset: 0 Length: 512
55 11:06:53
AM w3wp.exe:3732 CLOSE F:\Website\images\google_grey.gif SUCCESS
56 11:06:53
AM w3wp.exe:3732 CLOSE F:\Website\images\vsmlformal.gif SUCCESS
57 11:07:19
AM w3wp.exe:3732 OPEN F:\Website\bigdummy.asp SUCCESS Options: Open
Access: All
58 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\bigdummy.asp BUFFER
OVERFLOW FileFsVolumeInformation
59 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\bigdummy.asp BUFFER OVERFLOW FileAllInformation
60 11:07:19 AM w3wp.exe:3732 CLOSE F:\Website\bigdummy.asp SUCCESS
61 11:07:19
AM w3wp.exe:3732 OPEN C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS Options:
Open Access: All
62 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-3.htm BUFFER
OVERFLOW FileFsVolumeInformation
63 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-3.htm BUFFER
OVERFLOW FileAllInformation
64 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS Length:
1608
65 11:07:19 AM w3wp.exe:3732 READ
C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS Offset: 0 Length:
1608
66 11:07:19
AM w3wp.exe:3732 CLOSE C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS
67 11:07:19
AM w3wp.exe:3732 OPEN C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Options:
Open Access: All
68 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm BUFFER
OVERFLOW FileFsVolumeInformation
69 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm BUFFER
OVERFLOW FileAllInformation
70 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Length:
1539
71 11:07:19 AM w3wp.exe:3732 READ
C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Offset: 0 Length:
1539
72 11:07:19
AM w3wp.exe:3732 CLOSE C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS
73 11:07:19
AM w3wp.exe:3732 OPEN F:\Website\bigdummy.asp SUCCESS Options: Open
Access: All
74 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\bigdummy.asp BUFFER
OVERFLOW FileFsVolumeInformation
75 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION F:\Website\bigdummy.asp BUFFER OVERFLOW FileAllInformation
76 11:07:19 AM w3wp.exe:3732 OPEN F:\Website SUCCESS Options: Open
Access: All
77 11:07:19 AM w3wp.exe:3732 DIRECTORY F:\Website Change Notify
78 11:07:19 AM w3wp.exe:3732 QUERY
SECURITY F:\Website\bigdummy.asp BUFFER OVERFLOW
79 11:07:19 AM w3wp.exe:3732 QUERY
SECURITY F:\Website\bigdummy.asp SUCCESS
80 11:07:19 AM w3wp.exe:3732 CLOSE F:\Website\bigdummy.asp SUCCESS
81 11:07:19
AM w3wp.exe:3732 OPEN C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS Options:
Open Access: All
82 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-3.htm BUFFER
OVERFLOW FileFsVolumeInformation
83 11:07:19 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-3.htm BUFFER
OVERFLOW FileAllInformation
84 11:07:19
AM w3wp.exe:3732 OPEN C:\WINDOWS\HELP\IISHELP\COMMON SUCCESS Options:
Open Access: All
85 11:07:19
AM w3wp.exe:3732 DIRECTORY C:\WINDOWS\HELP\IISHELP\COMMON NOTIFY
CLEANUP Change Notify
86 11:07:19 AM w3wp.exe:3732 QUERY
SECURITY C:\WINDOWS\help\iisHelp\common\401-3.htm BUFFER OVERFLOW
87 11:07:19 AM w3wp.exe:3732 QUERY
SECURITY C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS
88 11:07:19 AM w3wp.exe:3732 READ
C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS Offset: 0 Length:
1608
89 11:07:19
AM w3wp.exe:3732 CLOSE C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS
90 11:08:26
AM w3wp.exe:3732 OPEN C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Options:
Open Access: All
91 11:08:26 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm BUFFER
OVERFLOW FileFsVolumeInformation
92 11:08:26 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm BUFFER
OVERFLOW FileAllInformation
93 11:08:26 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Length:
1539
94 11:08:26 AM w3wp.exe:3732 READ
C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Offset: 0 Length:
1539
95 11:08:26
AM w3wp.exe:3732 CLOSE C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS
96 11:08:36
AM w3wp.exe:3732 CLOSE C:\WINDOWS\HELP\IISHELP\COMMON SUCCESS
97 11:08:58
AM w3wp.exe:3732 OPEN C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Options:
Open Access: All
98 11:08:58 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm BUFFER
OVERFLOW FileFsVolumeInformation
99 11:08:58 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm BUFFER
OVERFLOW FileAllInformation
100 11:08:58 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Length:
1539
101 11:08:58 AM w3wp.exe:3732 READ
C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Offset: 0 Length:
1539
102 11:08:58
AM w3wp.exe:3732 CLOSE C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS
103 11:08:58
AM w3wp.exe:3732 OPEN C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS Options:
Open Access: All
104 11:08:58 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-3.htm BUFFER
OVERFLOW FileFsVolumeInformation
105 11:08:58 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-3.htm BUFFER
OVERFLOW FileAllInformation
106 11:08:58 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS Length:
1608
107 11:08:58 AM w3wp.exe:3732 READ
C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS Offset: 0 Length:
1608
108 11:08:58
AM w3wp.exe:3732 CLOSE C:\WINDOWS\help\iisHelp\common\401-3.htm SUCCESS
109 11:09:30
AM w3wp.exe:3732 OPEN C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Options:
Open Access: All
110 11:09:30 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm BUFFER
OVERFLOW FileFsVolumeInformation
111 11:09:30 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm BUFFER
OVERFLOW FileAllInformation
112 11:09:30 AM w3wp.exe:3732 QUERY
INFORMATION C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Length:
1539
113 11:09:30 AM w3wp.exe:3732 READ
C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS Offset: 0 Length:
1539
114 11:09:30
AM w3wp.exe:3732 CLOSE C:\WINDOWS\help\iisHelp\common\401-1.htm SUCCESS
115 11:09:30
AM w3wp.exe:3732 OPEN F:\WEBSITE\BIGDUMMY.ASP SUCCESS Options: Open
Access: All
116 11:09:30 AM w3wp.exe:3732 QUERY
INFORMATION F:\WEBSITE\BIGDUMMY.ASP BUFFER
OVERFLOW FileFsVolumeInformation
117 11:09:30 AM w3wp.exe:3732 QUERY
INFORMATION F:\WEBSITE\BIGDUMMY.ASP BUFFER OVERFLOW FileAllInformation
118 11:09:30 AM w3wp.exe:3732 QUERY
SECURITY F:\WEBSITE\BIGDUMMY.ASP BUFFER OVERFLOW
119 11:09:30 AM w3wp.exe:3732 QUERY
SECURITY F:\WEBSITE\BIGDUMMY.ASP SUCCESS
120 11:09:30 AM w3wp.exe:3732 QUERY
INFORMATION F:\WEBSITE\BIGDUMMY.ASP SUCCESS Length: 35
121 11:09:30 AM w3wp.exe:3732 CLOSE F:\WEBSITE\BIGDUMMY.ASP SUCCESS

----------Attachment 2: Regmon.log----------
1 11:09:30 AM w3wp.exe:3732 QueryValue HKLM\SOFTWARE\Network
Associates\TVD\Shared Components\On Access
Scanner\ScriptScan\DebugDumpDirectory NOT FOUND
2 11:09:30 AM w3wp.exe:3732 OpenKey HKCU SUCCESS
3 11:09:30 AM w3wp.exe:3732 OpenKey HKCU\Control
Panel\International SUCCESS
4 11:09:30 AM w3wp.exe:3732 CloseKey HKCU SUCCESS
5 11:09:30 AM w3wp.exe:3732 QueryValue HKCU\Control
Panel\International\Locale SUCCESS "00000409"
6 11:09:30 AM w3wp.exe:3732 CloseKey HKCU\Control
Panel\International SUCCESS
7 11:09:30 AM w3wp.exe:3732 QueryValue HKLM\SOFTWARE\Network
Associates\TVD\Shared Components\On Access
Scanner\ScriptScan\ScriptScanEnabled SUCCESS 0x1

[Elliot Ramos]

I discovered the problem:

I was rechecking the permissions for the n-th time and they all still
made sense according to the Microsoft bulletin for default IIS 6.0
Permissions (http://support.microsoft.com/kb/812614/), EXCEPT I noticed
that the bulletin does not mention that the IUSR and IWAM accounts need
to be in the Users group.

I just added them and now it works. I hope my experience can be used
to help other users in the future.

Thanks for all you help!

[Bernard Cheah [MVP]]

OMG...... what's the orginal member for the users group?
if you have 'authenticated users' then both accounts upon authentication
should be part of the user group.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/

"Elliot Ramos" <ellio...@gmail.com> wrote in message

news:1149522245.6...@c74g2000cwc.googlegroups.com...

[johnny olesen]

look at this, this will solve your problem

http://support.microsoft.com/kb/913384/en-us

*** Sent via Developersdex http://www.developersdex.com ***

[Tonny]

I need to know if the IIS is running on a domain controller?

If so see this: http://support.microsoft.com/?id=842493

--
Tonny R Poulsen