ASP on IIS6 (opposite question; was RE: [thelist] ASP.NET on IIS 5?)

Ken Schaefer ken.schaefer at gmail.com
Fri Sep 24 00:05:48 CDT 2004


On Thu, 23 Sep 2004 21:17:32 -0700, Shane Miller
<smiller at callcenters24x7.com> wrote:
> To reiterate --- it was nothing obvious.
> 
> I had performed everything indicated in 812614, and several other articles.
> I'm not a neophyte.


Not suggesting you are. However you did employ a custom lockdown
policy, so the obvious solution would be to reverse whatever you did.
Also, you mentioned before that you found an article on
IIS5/Windows2000 which you followed, not an article on IIS6.

> Your statement about the lockdown policy is partly true.  Yes, I had locked
> the machine down tightly and also in part according to my own procedures.
> All the KB articles about IIS 6, Windows2003 Server, ASP, etc were properly
> applied and it still didn't work --- however, typically the various
> resources don't always work on anything other than default installations, or
> installations modified according to published procedures.  Departing from
> the published procedures is rather sporting.
> 
> But, in conclusion:
> 
> 1.  I think that the knowledge base for IIS 6 and Windows 2003 server still
> has some growing to do.  That's self-evident but also true based on my
> experience, having spent lots of time over the years in the KB for a number
> of Microsoft products.


Implementing a custom lockdown policy depends on whether the changes
you are making are supported or not (for example, running IIS services
under any account other than LocalSystem is not supported). There are
not going to be articles on stuff that's simply not supported - it'd
take too long to write all the permutations...

Cheers
Ken


> -----Original Message-----
> From: thelist-bounces at lists.evolt.org
> [mailto:thelist-bounces at lists.evolt.org] On Behalf Of Ken Schaefer
> Sent: Thursday, September 23, 2004 8:52 PM
> To: thelist at lists.evolt.org
> Subject: Re: ASP on IIS6 (opposite question;was RE: [thelist] ASP.NET on IIS
> 5?)
> 
> So the tediousness of getting ASP working again had more to do with
> your lockdown policy than any inherent problem with "re-enabling ASP"
> 
> As for permissions, you could have used this:
> http://support.microsoft.com/?kbid=812614
> Default permissions and user rights for IIS 6.0
> 
> HTH
> 
> Cheers
> Ken
> 
> On Thu, 23 Sep 2004 20:28:53 -0700, Shane Miller
> <smiller at callcenters24x7.com> wrote:
> > Hi,
> >
> > It was tedious because when we locked down the machine just before taking
> it
> > to production, we really locked it down --- I don't recall exactly what we
> > did but it was extensive, much more than the normal procedure.  We didn't
> > anticipate wanting classic asp to run on that machine, ever.  And, we made
> > the decision to enable it after it went into production.  It's normally a
> > simple procedure, but --- anyone who has been an NT administrator for long
> > knows things don't always go as expected.  So we couldn't simply run basic
> > reinstall procedures without bringing services down for awhile, which we
> > wanted to avoid.  Eventually what I did was find a Knowledge Base article
> > that detailed default file permissions, but for Windows 2000, but I was
> able
> > to adapt that to our Windows2003 Server.  We didn't document much as we
> > went, but I posted to a newsgroup, I'll see if I can drum it up and will
> > reply to the list as it contains some more detail on the problem.
> >
> > Shane Miller
> > http://www.callcenters24x7.com
> --
> 
> * * Please support the community that supports you.  * *
> http://evolt.org/help_support_evolt/
> 
> For unsubscribe and other options, including the Tip Harvester
> and archives of thelist go to: http://lists.evolt.org
> Workers of the Web, evolt !
> 
> --
> 
> * * Please support the community that supports you.  * *
> http://evolt.org/help_support_evolt/
> 
> For unsubscribe and other options, including the Tip Harvester
> and archives of thelist go to: http://lists.evolt.org
> Workers of the Web, evolt !
>


More information about the thelist mailing list