Lockdown IIS 5.1 only for localhost

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ IIS
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Directory Browsing display question On our intranet (using IIS) we have a certain page that we want to only be used to view the contents of the folder (i.e. Directory Browsing). All is well in achieving this. However, to the left of each item, there is the date/time filed where the item was updated as well as the size of the item. Is there a way to show only the file/folder in the directory without these other fields? Thanks Tag: Lockdown IIS 5.1 only for localhost Tag: 385730
  - 2
    - Reverse Lookup on Virtual Directory Hi, I was reading about reverse lookup and saw it was possible to do it on a specific web site. I couldn't find information about doint the same thing but for a specific virtual directory. Does anyone know if it's possible? Thank you Tag: Lockdown IIS 5.1 only for localhost Tag: 385729
  - 3
    - IIS Default Domain keeps changing I run a front end exchange server with a default domain set. However it keeps changing on its own and I have no idea why. I do not have any GPOs that can change this default policy. There are GPOS in place but no policy is in place to change it to something else. What can I do to stop this? Tag: Lockdown IIS 5.1 only for localhost Tag: 385728
  - 4
    - IIS6 Crash analysis - mscorwks.dll Hi, I need some help with analysing a dump file from a DebugDiag, since I do not know enough to do this myself yet. Basic description: In an ASP.NET application I have a page that simply loads a lot of records into a dropdownlist when you click on the one button on the page. This is all that happens on the page - I created it to reproduce a similar problem in a much bigger system in our production environment. It appears to crash when the page is reloaded (postback) when I click on the button. First indication of something wrong is that the page appears to freeze for a few seconds (less than 10). When I run the app from VS.NET IDE, I then get a Microsoft Development Environment messagebox with the message "An unhandled exception of type 'System.StackOverflowException' occurred in mscorlib.dll", with Break and Continue buttons. Either way, I then get presented with the "connect to ..." inputbox where I get prompted for my username and password. Whatever I do then, the browser ends up displaying a "You are not authorised to view this page" message =3D> HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials. Internet Information Services (IIS) Environment: Windows Server 2003 Visual Studio .NET 2003 Debug Diagnostics Tool v1.0 Windows 2000 domain with Active Directory. Steps: I created a Crash rule for all IIS related processes, opened the problematic page, and went through the process described above to get the page to crash. I have also set the rule to capture First Change exceptions. So I got three dmp files, and the Analysed result is shown below: =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D Analysis Summary Type Description Recommendation Error In w3wp__PID__1832__Date__07_26_2006__Time_05_29_55PM__764__First chance exception 0XC00000FD.dmp the assembly instruction at mscorwks!FieldDesc::GetAddress+1b in C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll from Microsoft Corporation has caused a stack overflow exception (0xC00000FD) when trying to write to memory location 0x01822ffc on thread 16 Please follow up with the vendor Microsoft Corporation for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll Error In w3wp__PID__1832__Date__07_26_2006__Time_05_29_31PM__747__First chance exception 0XE0434F4D.dmp the assembly instruction at kernel32!RaiseException+51 in C:\WINDOWS\system32\kernel32.dll from Microsoft Corporation has caused an unknown exception (0xe0434f4d) on thread 16 This exception originated from mscorwks!RaiseTheException+a0. Review the faulting call stack for thread 16 to determine root cause for the exception. Please follow up with vendor Microsoft Corporation for problem resolution concerning the following file: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll. Error In inetinfo__PID__552__Date__07_26_2006__Time_05_30_00PM__937__First chance exception 0X800706BF.dmp the assembly instruction at kernel32!RaiseException+51 in C:\WINDOWS\system32\kernel32.dll from Microsoft Corporation has caused an unknown exception (0x800706bf) on thread 4 This exception originated from rpcrt4!RpcpRaiseException+1d. Review the faulting call stack for thread 4 to determine root cause for the exception. Please follow up with vendor Microsoft Corporation for problem resolution concerning the following file: C:\WINDOWS\system32\rpcrt4.dll. Information DebugDiag determined that this dump file (w3wp__PID__1832__Date__07_26_2006__Time_05_29_31PM__747__First chance exception 0XE0434F4D.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the IISAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True. Information DebugDiag determined that this dump file (w3wp__PID__1832__Date__07_26_2006__Time_05_29_55PM__764__First chance exception 0XC00000FD.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the IISAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True. Information DebugDiag determined that this dump file (inetinfo__PID__552__Date__07_26_2006__Time_05_30_00PM__937__First chance exception 0X800706BF.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the IISAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True. Analysis Details Table Of Contents inetinfo__PID__552__Date__07_26_2006__Time_05_30_00PM__937__First chance exception 0X800706BF.dmp Faulting Thread Faulting Module Information w3wp__PID__1832__Date__07_26_2006__Time_05_29_31PM__747__First chance exception 0XE0434F4D.dmp Faulting Thread Faulting Module Information w3wp__PID__1832__Date__07_26_2006__Time_05_29_55PM__764__First chance exception 0XC00000FD.dmp Faulting Thread Faulting Module Information Report for inetinfo__PID__552__Date__07_26_2006__Time_05_30_00PM__937__First chance exception 0X800706BF.dmp Type of Analysis Performed Crash Analysis Machine Name TASC0716 Operating System Windows Server 2003 Number Of Processors 1 Process ID 552 Process Image C:\WINDOWS\system32\inetsrv\inetinfo.exe System Up-Time 0 day(s) 01:34:03 Process Up-Time 0 day(s) 00:27:53 Thread 4 - System ID 568 Entry point ntdll!RtlpWorkerThread Create time 26/07/2006 5:02:08 PM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.31 Function Arg 1 Arg 2 Arg 3 Source kernel32!RaiseException+51 800706bf 00000001 00000000 rpcrt4!RpcpRaiseException+1d 800706bf 00135a54 00a7fb60 rpcrt4!NdrProxySendReceive+5e 00135a54 800706bf 06000169 rpcrt4!NdrClientCall2+1bc 7716b2d8 771a2af0 00a7fb98 rpcrt4!ObjectStublessClient+89 00000010 00000005 00a7fba8 rpcrt4!ObjectStubless+f 00135a54 00000002 00121610 ole32!RemoteReleaseRifRefHelper+82 00135a54 000d9028 00000002 ole32!RemoteReleaseRifRef+72 00135a54 000d9028 00000002 ole32!CStdMarshal::DisconnectCliIPIDs+23f 001322f4 001322f0 00000000 ole32!CStdMarshal::Disconnect+191 00000002 00132398 001322f0 ole32!CStdIdentity::~CStdIdentity+87 001322f0 7718a021 00000001 ole32!CStdIdentity::`vector deleting destructor'+8 00000001 ffffffff 0008b8f8 ole32!CStdIdentity::CInternalUnk::Release+69 80000000 771a659d 00132394 ole32!ReleaseCallback+a 00132394 ffffffff 0008f1cc ole32!PerformCallback+15 0008b8f8 771a6505 00132394 ole32!CObjectContext::InternalContextCallback+140 0008b8f8 771a6505 00132394 ole32!CGIPTable::RevokeInterfaceFromGlobal+293 77272618 00000401 00000000 ole32!CGIPTable::RevokeInterfaceFromGlobal+109 77272618 00000401 00000001 coadmin!COConnectionPoint::Terminate+42 00bdcf8c 00000000 00bdcf10 coadmin!CADMCOMW::Terminate+35 00bdcf10 6e0b61b6 00bdcf10 coadmin!CADMCOMW::~CADMCOMW+e 00bdcf10 00bdcf10 6e0b9517 coadmin!CADMCOMW::Release+49 00bdcf10 00000001 00bdcf68 coadmin!CADMCOMW::RemoveObjectFromList+62 00000000 771cfdc9 00bdcf10 coadmin!CADMCOMW::Release+38 00bdcf10 00a7fed4 00000000 coadmin!CADMCOMW::DisconnectOrphaned+51 6e0b608b 77f5da92 00bdcf10 coadmin!CADMCOMW::CallerWatchWaitOrTimerCallback+4e 00bdcf10 00136e00 00136ed8 ntdll!RtlpWaitOrTimerCallout+74 6e0b608b 00bdcf10 00136e00 ntdll!RtlpAsyncWaitCallbackCompletion+23 00136ed8 77fc3040 000de210 ntdll!RtlpWorkerCallout+71 77f5e9f9 00136ed8 00000000 ntdll!RtlpExecuteWorkerRequest+3d 00000000 00136ed8 000de210 ntdll!RtlpApcCallout+10 77f5dcba 00000000 00136ed8 ntdll!RtlpWorkerThread+5f 00000000 00000000 00000000 kernel32!BaseThreadStart+34 77f7e673 00000000 00000000 In inetinfo__PID__552__Date__07_26_2006__Time_05_30_00PM__937__First chance exception 0X800706BF.dmp the assembly instruction at kernel32!RaiseException+51 in C:\WINDOWS\system32\kernel32.dll from Microsoft Corporation has caused an unknown exception (0x800706bf) on thread 4 This exception originated from rpcrt4!RpcpRaiseException+1d. Module Information Image Name: C:\WINDOWS\system32\kernel32.dll Symbol Type: PDB Base address: 0x77e40000 Time Stamp: Tue Mar 25 11:42:44 2003 Checksum: 0x000f488c Comments: COM DLL: False Company Name: Microsoft Corporation ISAPIExtension: False File Description: Windows NT BASE API Client DLL ISAPIFilter: False File Version: 5.2.3790.0 (srv03_rtm.030324-2048) Managed DLL: False Internal Name: kernel32 VB DLL: False Legal Copyright: =A9 Microsoft Corporation. All rights reserved. Loaded Image Name: kernel32.dll Legal Trademarks: Mapped Image Name: Original filename: kernel32 Module name: kernel32 Private Build: Single Threaded: False Product Name: Microsoft=AE Windows=AE Operating System Module Size: 976.00 KBytes Product Version: 5.2.3790.0 Symbol File Name: c:\symcache\kernel32.pdb\3E8016FF2\kernel32.pdb Special Build: & Report for w3wp__PID__1832__Date__07_26_2006__Time_05_29_31PM__747__First chance exception 0XE0434F4D.dmp Type of Analysis Performed Crash Analysis Machine Name TASC0716 Operating System Windows Server 2003 Number Of Processors 1 Process ID 1832 Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe System Up-Time 0 day(s) 01:33:36 Process Up-Time 0 day(s) 00:00:54 Thread 16 - System ID 3992 Entry point mscorwks!ThreadpoolMgr::WorkerThreadStart Create time 26/07/2006 5:28:38 PM Time spent in user mode 0 Days 0:0:0.921 Time spent in kernel mode 0 Days 0:0:0.203 Function Arg 1 Arg 2 Arg 3 Source kernel32!RaiseException+51 e0434f4d 00000001 00000000 mscorwks!RaiseTheException+a0 062c321c 00000000 062c321c mscorwks!JIT_Throw+4d 060414c4 06041284 060414c4 mscorlib_79980000+b99b 00000001 060414c4 062c2c98 809b8aa 0185f920 060414c4 060414c4 809b811 00000005 00530062 00760061 In w3wp__PID__1832__Date__07_26_2006__Time_05_29_31PM__747__First chance exception 0XE0434F4D.dmp the assembly instruction at kernel32!RaiseException+51 in C:\WINDOWS\system32\kernel32.dll from Microsoft Corporation has caused an unknown exception (0xe0434f4d) on thread 16 This exception originated from mscorwks!RaiseTheException+a0. Module Information Image Name: C:\WINDOWS\system32\kernel32.dll Symbol Type: PDB Base address: 0x77e40000 Time Stamp: Tue Mar 25 11:42:44 2003 Checksum: 0x000f488c Comments: COM DLL: False Company Name: Microsoft Corporation ISAPIExtension: False File Description: Windows NT BASE API Client DLL ISAPIFilter: False File Version: 5.2.3790.0 (srv03_rtm.030324-2048) Managed DLL: False Internal Name: kernel32 VB DLL: False Legal Copyright: =A9 Microsoft Corporation. All rights reserved. Loaded Image Name: kernel32.dll Legal Trademarks: Mapped Image Name: Original filename: kernel32 Module name: kernel32 Private Build: Single Threaded: False Product Name: Microsoft=AE Windows=AE Operating System Module Size: 976.00 KBytes Product Version: 5.2.3790.0 Symbol File Name: c:\symcache\kernel32.pdb\3E8016FF2\kernel32.pdb Special Build: & Report for w3wp__PID__1832__Date__07_26_2006__Time_05_29_55PM__764__First chance exception 0XC00000FD.dmp Type of Analysis Performed Crash Analysis Machine Name TASC0716 Operating System Windows Server 2003 Number Of Processors 1 Process ID 1832 Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe System Up-Time 0 day(s) 01:33:58 Process Up-Time 0 day(s) 00:01:17 Thread 16 - System ID 3992 Entry point mscorwks!ThreadpoolMgr::WorkerThreadStart Create time 26/07/2006 5:28:38 PM Time spent in user mode 0 Days 0:0:17.46 Time spent in kernel mode 0 Days 0:0:0.984 Function Arg 1 Arg 2 Arg 3 Source mscorwks!FieldDesc::GetAddress+1b 094aa1ec 094aa1ec 79b8067c mscorwks!FieldDesc::GetInstanceField+3f 094aa1ec 01823060 087b2053 mscorwks!FieldDesc::GetRefValue+2b 094aa1ec 0185fbec 018230c0 mscorwks!COMDelegate::GetMethodDesc+3a 018230c0 79210d25 79210d2f mscorwks!COMDelegate::InternalFindMethodInfo+11 018230a4 094aa1ec 000c0000 1ca630e 0632371c 0601a7e4 0601a7e4 88c2444 0632371c 0601a7e4 0601a7e4 88c2197 0632371c 0601a7e4 05fade78 88a4d9f 0632371c 0632371c 05fae62c 849afaf 05fc1344 0849a9f4 060a25dc 849aa1b 0185faa4 060a25dc 05fd1188 7ff9a73 0185fb20 060a25dc 05fd1188 7ff994b 05f62290 060a26f8 01b82f75 1b86358 01b82f10 0185fca4 000f8ab0 mscorwks!ComCallMLStubCache::CompileMLStub+1af 0185fc50 791b3ce4 0185fcc8 mscorwks!Thread::DoADCallBack+5c 000f8ab0 792fd84c 0185fc50 mscorwks!ComCallMLStubCache::CompileMLStub+2c2 000d82b8 0185fcc8 0185ff58 18ea0bd 000a25e0 000a25e0 0185fd90 mscorwks!EEHashTable<void *,EEPtrHashTableHelper<void *,0>,0>::FindItem+e 000a25e0 0185fdb0 7929817e mscorwks!EEHashTable<void *,EEPtrHashTableHelper<void *,0>,0>::GetValue+b 000a25e0 0185fdac 000d82b8 mscorwks!Thread::SetStaticData+5c 000a25e0 00000000 79298299 mscorwks!Thread::SafeSetStaticData+63 56533357 2f312f43 746f6f52 2f4d4c2f 00000000 00000000 00000000 MSCORWKS!FIELDDESC::GETADDRESS+1BIn w3wp__PID__1832__Date__07_26_2006__Time_05_29_55PM__764__First chance exception 0XC00000FD.dmp the assembly instruction at mscorwks!FieldDesc::GetAddress+1b in C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll from Microsoft Corporation has caused a stack overflow exception (0xC00000FD) when trying to write to memory location 0x01822ffc on thread 16 Module Information Image Name: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll Symbol Type: PDB Base address: 0x791b0000 Time Stamp: Fri Feb 21 05:08:23 2003 Checksum: 0x00268d34 Comments: Microsoft .NET Runtime Common Language Runtime - WorkStation COM DLL: False Company Name: Microsoft Corporation ISAPIExtension: False File Description: Microsoft .NET Runtime Common Language Runtime - WorkStation ISAPIFilter: False File Version: 1.1.4322.573 Managed DLL: True Internal Name: MSCORWKS.DLL VB DLL: False Legal Copyright: Copyright =A9 Microsoft Corporation 1998-2002. All rights reserved. Loaded Image Name: mscorwks.dll Legal Trademarks: Microsoft=AE is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation Mapped Image Name: Original filename: mscorwks.dll Module name: mscorwks Private Build: Single Threaded: False Product Name: Microsoft .NET Framework Module Size: 2.38 MBytes Product Version: 1.1.4322.573 Symbol File Name: c:\symcache\mscorwks.pdb\46C4E78543F54AB186E6B5246AD9EE752\mscorwks.pdb Special Build: & Script Summary Script Name Status Error Code Error Source Error Description Source Line IISAnalysis.asp Completed =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D Can someone help me with reading these results, and pointing me into the best direction for solving this problem? Thanks! fr Tag: Lockdown IIS 5.1 only for localhost Tag: 385727
  - 5
    - Required Tiff IFilter for indexing in Sql Server 2000 I want to Index Tiff images by using Sql Server 2000. I hv Windows 2000 and Office 2003 Professional. But i couldnot find IFilter for Tiff Images in Office 2003. Can anyone help? Does the required dll exist in Office 2003??? Tag: Lockdown IIS 5.1 only for localhost Tag: 385726
  - 6
    - ASP.NET and COM+ producing errors: 'Unable to complete async work' Hi, We have an ASP.NET application that uses Server.CreateObject in the .aspx pages to create (ASP) COM-components (we use the 'aspcompat="true"' option). From the beginning we have seen COM+ errors in the event log and users being hung or getting Internal Server Errors. The error is: The run-time environment has detected an inconsistency in its internal state. This indicates a potential instability in the process that could be caused by the custom components running in the COM+ application, the components they make use of, or other factors. Error in d:\nt\com\complus\src\comsvcs\threads\stawork.cpp(167), hr = 80010108: Unable to complete async work. We have done some testing and as it turns out even just doing executing the command Server.CreateObject('ADODB.Stream') and not doing anything with it, causes this error if the page is called often enough (1 every 150.000 requests). So there must be something basic wrong here. Does anybody else have seen this problem? Or does anybody have a clue as to solve this? Best regards, Niels Tag: Lockdown IIS 5.1 only for localhost Tag: 385725
  - 7
    - Load Balancing IIS configuration Hi Can anyone point me to some documents details how to set up IIS 5 in a Load balanced multiple active node configuration?? Are there any significant advantages introduced in IIS 6.0 with regard to NLB? We are using Windows 2000 Advanced Server. Thanks Tag: Lockdown IIS 5.1 only for localhost Tag: 385724
  - 8
    - AUTH_USER vs LOGON_USER following a name change Hi, This concerns an intranet site written in ASP.NET v1.1 using C#. The site is running on IIS6 on Win2k3S with all the SPs and patches etc. The Session_Start interrogates the AUTH_USER server variable to identify the current user. This is then used to query ActiveDirectory, and the site dynamically configures itself according to which AD groups the current user is a member of - fairly standard stuff. However, one of the users has recently changed her name, let's say from Anne Smith to Anne Jones. As far as I can tell, this has been changed throughout ActiveDirectory. The user now logs into her Windows XP desktop as anne.jones@domain.com instead of anne.smith@domain.com. However, although the LOGON_USER server variable correctly shows her as DOMAIN\Anne.Jones, the AUTH_USER server variable still shows her as DOMAIN\Anne.Smith - why is this? What / where needs to be changed for the AUTH_USER server variable to show the new name? I found the following site: http://www.codeproject.com/asp/request_server_variables.asp which says that AUTH_USER is: "The name of the user as it is derived from the authorization header sent by the client, before the user name is mapped to a Windows account. This variable is no different from REMOTE_USER. If you have an authentication filter installed on your Web server that maps incoming users to accounts, use LOGON_USER to view the mapped user name." What *actually* is the authorization header which the client is sending, and where is the old name still coming from? Any assistance gratefully received. Mark P.S. the solution is obvious... use LOGON_USER instead of AUTH_USER in Session_Start - but I'm now curious as to why AUTH_USER is still being populated with the old name... Tag: Lockdown IIS 5.1 only for localhost Tag: 385719
  - 9
    - IIS 6.0 Condition_Dropped (aspx page freezes) Hello Am working on a .net credit scoring application deployed on 4 servers (2 web servers and 2 applicataion servers) in a load balanced environment. The servers are running windows 2003 and the iis servers communicate with the app servers using web services. The app servers in turn invoke other web services running on different boxes in the enterprise. Off late, I started seeing this error where the aspx pages just freeze. Nothing is displayed and the status bar in the browser just hangs while the window is all white. However, htm pages deployed in the same virtual directory work just fine. Also, applications deployed in other virtual directories are unaffected. On going through HTTPERR log, am seeing errors such as Connection_Dropped, Timer_EntityBody and Connection_Abandoned_By_AppPool. The application starts working fine after a few minutes break only to freeze later. Any help would be greatly appreciated. Out of ideas and out of time. Please help. Vimal Tag: Lockdown IIS 5.1 only for localhost Tag: 385712
  - 10
    - Vulnerable to SQL Injection? Hello! I help a friend with his web site that has an HTML/ASP interface to an Access MDB file for its database. When you attempt to access the database, you get prompted for a user name and password. I want to know if that type of setup is vulnerable to being hacked via SQL injection or other means. How can I test for that? Thank you for your time! Gregg Hill Tag: Lockdown IIS 5.1 only for localhost Tag: 385710
  - 11
    - creating site with Server 2003 Web edition Hello, How many site i can create with Windows Server 2003 Web Edition ? thanks and regards Tag: Lockdown IIS 5.1 only for localhost Tag: 385707
  - 12
    - .NET site set up I want to be able to copy over .NET web pages and place them on a site that has .NET running on it without havint to create virtual directories everytime. BUt when I do I get an error saying I need to set up a virtual directory. Isnt there a way to just copy files over and have them run off of the defualt Web site runnig as a default application? Tag: Lockdown IIS 5.1 only for localhost Tag: 385705
  - 13
    - iisadmpwd with iis 6.0 problem I've just added the iisadmpwd functionality to my OWA server. I have everything configured properly from what I can tell but I'm still having a problem changing passwords. When a normal user account with email attempts to change their password I always receive a error screen: invalid username or password. However, I can make it fail to the bad password, and mismatched password screen easily. If a domain admin attempts to change a password it successful. I can even login to OWA as a domain admin then change another password using the change password options and entering another userid. So, it appears the configuration is correct however I seem to be missing a permission for the change password functionality. Any ideas apprecaited (and yes, iisadmpwd is set to run and execute scripts. Thanks in advance, Hardy Utley Tag: Lockdown IIS 5.1 only for localhost Tag: 385702
  - 14
    - WebDAV Now I was wondering if you could direct me on how I could set up WebDAV in a isolated user mode if possible. When put my username and password in it directs me to the appropriate folder that my user name is assigned like "home directory". I know this can be done using FTP any ideas Tag: Lockdown IIS 5.1 only for localhost Tag: 385701
  - 15
    - Virtual Directory On UNC Share Not Writable Hi all, I have an ASP page on a Win2003 IIS6 server attempting to write a text file via a virtual directory setup to point to a UNC share on another Win2003 server. When the code attempts to create the text file, I get a 8007052e error - bad username or password essentially. Both servers are in the same domain, and I'm using a user in the domain with admin privileges for both the virtual directories Connect As credentials and the anonymous access Directory Security credentials (and Integrated Windows Auth is not checked). The share itself has full perms granted to Everyone. The NTFS perms are also set for full access by Everyone right now. This started happening when I moved the website itself to an IIS6 Win2003 server from an IIS5 Win2000 server. It worked fine for a couple years on the IIS5 server. If I point DNS for the site back to the old Win2000 server with the virtual directory setup exactly the same, it still works. In an effort to troubleshoot, I pointed the virtual directory to a Linux box running Samba so I could view Samba's logs in real time to see if the share is accessed. I get the same error. When I created the virtual directory or accessed it manually from within the IIS snap-in, Samba writes the corresponding access to its log files. However, when I run the script, Samba doesn't write anything. So, this tells me it doesn't seem as if the share isn't even accessed, as if there's something more basic happening. The extremely simple code being used to test is below for reference (the error occurs in the third line). Can anyone point me in the correct direction? Thanks! Toni <% vendor_orders_dir = server.mappath("/vendor_orders") Set XMLFSO = CreateObject("Scripting.FileSystemObject") Set XMLFile = XMLFSO.CreateTextFile(vendor_orders_dir & "\test.xml", True) XMLFile.WriteLine("testing") Tag: Lockdown IIS 5.1 only for localhost Tag: 385693
  - 16
    - Restricting Users to Enter through Homepage I want to restrict users to enter the website through the homepage only. We do not want them to be able to bookmark pages on the site and go directly to them. Can someone recommend a 3rd party product to accomplish this? Our website does not require authentication to enter. Someone recommended a product called iisrewrite (www.qwerksoft.com). Any thoughts on this product or its ability to accomplish the above? Thank you in advance. Tag: Lockdown IIS 5.1 only for localhost Tag: 385688
  - 17
    - Firefox and IIS Okay, I'm trying to set up my server for testing, and I keep getting a password prompt on my site when viewing it through Firefox (IE works fine). How do I turn this off? Tag: Lockdown IIS 5.1 only for localhost Tag: 385685
  - 18
    - http://domain.com/directory converted to http://domain.com/directory/ Hi All, I think I have does this in apache, but does IIS allow such stuff (and if does then how) so that directories when opened in users browser does'nt end with a slash. like http://domain.com/directory should NOT convert to http://domain.com/directory/ and it remains http://domain.com/directory when opened in browser! Thanks J Tag: Lockdown IIS 5.1 only for localhost Tag: 385684
  - 19
    - Content of cached compressed javascript files differs per server in a webfarm We have a webfarm on which http compression is configured like described at: http://www.dotnetjunkies.com/Article/16267D49-4C6E-4063-AB12-853761D3... But I have found out that some servers are creating different content files at the temporary files directory; a filecompare of a compressed javascript file shows that the file is not compressed equally on all webservers. Though all servers seems to be configured alike. The fun part is when I empty all temp compressed dirs, the files get regenerated and guess what? no difference is found !! It seems the differences are occurring when we install a new version of our app (though the (real) content javascript is not changed). We delete all files from the website directory and install the new files. Any insight is appreciated. // Ryan Tag: Lockdown IIS 5.1 only for localhost Tag: 385677
  - 20
    - SSL Object doesn't support Error I was wondering if someone could please tell me why I get this error everytime I run this piece of code. Runtime Error: Object doesn't support this property or method : GetFullResponseProperty. Const FR_PROP_NONE = 0 ' Invalid Const FR_PROP_FULLRESPONSE = 1 ' Binary Const FR_PROP_STATUSINFOCOUNT = 2 ' Long Const FR_PROP_BODYPARTSTRING = 3 ' String, Indexed Const FR_PROP_STATUS = 4 ' Long, Indexed Const FR_PROP_STATUSSTRING = 5 ' String, Indexed Const FR_PROP_OTHERINFOCHOICE = 6 ' Long, Indexed Const FR_PROP_FAILINFO = 7 ' Long, Indexed Const FR_PROP_PENDINFOTOKEN = 8 ' Binary, Indexed Const FR_PROP_PENDINFOTIME = 9 ' Date, Indexed Const FR_PROP_ISSUEDCERTIFICATEHASH =10 ' Binary, Indexed Const FR_PROP_ISSUEDCERTIFICATE =11 ' Binary, Indexed Const FR_PROP_ISSUEDCERTIFICATECHAIN =12 ' Binary, Indexed Const FR_PROP_ISSUEDCERTIFICATECRLCHAIN=13 ' Binary, Indexed Const FR_PROP_ENCRYPTEDKEYHASH =14 ' Binary, Indexed Const FR_PROP_FULLRESPONSENOPKCS7 =15 ' Binary Set CertRequest = CreateObject( "CertificateAuthority.Request" ) RequestStr = CertEnroll.createRequest( XECR_PKCS10_V1_5, DistinguishedName, CertOID ) Disposition = CertRequest.Submit( CR_IN_ENCODEANY Or CR_IN_FORMATANY, RequestStr, "", StrCAConfig ) ID = CertRequest.GetRequestId Disposition = CertAdmin.ResubmitRequest(StrCAConfig, ID) If Disposition = CR_DISP_ISSUED Then Dim Cert Cert = CertRequest.GetFullResponseProperty( FR_PROP_FULLRESPONSE, 0, PROPTYPE_BINARY, CR_OUT_BASE64 ) CertEnroll.acceptResponse Cert Tag: Lockdown IIS 5.1 only for localhost Tag: 385675
  - 21
    - CreateNewSite return E_INVALIDARG I try to create web site with IISWebService::CreateNewSite (C++) HRESULT hr; CComQIPtr<IISWebService> sp; hr = ADsGetObject(L"IIS://localhost/w3svc", __uuidof(IISWebService), (void**)&sp); SAFEARRAY * psa = SafeArrayCreateVector(VT_BSTR, 0, 1); CComBSTR bstr(":80:"); long i = 0; SafeArrayPutElement(psa, &i, bstr); VARIANT var; var.vt = VT_ARRAY | VT_BSTR; var.parray = psa; CComVariant v; //empty - to generate random id CComVariant varID; hr = sp->CreateNewSite(CComBSTR("my"), &var , CComBSTR("c:\\"), v, &varID); return E_INVALIDARG Why? In any time, in any case E_INVALIDARG Please give me properly setted params to run CreateNewSite() successfully Tag: Lockdown IIS 5.1 only for localhost Tag: 385674
  - 22
    - CreateNewSite return E_INVALIDARG I try to create web site with IISWebService::CreateNewSite (C++) HRESULT hr; CComQIPtr<IISWebService> sp; hr = ADsGetObject(L"IIS://localhost/w3svc", __uuidof(IISWebService), (void**)&sp); SAFEARRAY * psa = SafeArrayCreateVector(VT_BSTR, 0, 1); CComBSTR bstr(":80:"); long i = 0; SafeArrayPutElement(psa, &i, bstr); VARIANT var; var.vt = VT_ARRAY | VT_BSTR; var.parray = psa; CComVariant v; //empty - to generate random id CComVariant varID; hr = sp->CreateNewSite(CComBSTR("my"), &var , CComBSTR("c:\\"), v, &varID); return E_INVALIDARG Why? In any time, in any case E_INVALIDARG Please give me properly setted params to run CreateNewSite() successfully Tag: Lockdown IIS 5.1 only for localhost Tag: 385673
  - 23
    - Migrate 1000+ virtual directories from 5 to 6.0 We have a IIS 5.0 (Win2Kserver), which has 1000+ virtual directories and 300+ sites hosted. What's the easiest way or any way to port to IIS 6.0?? Any help would be greatly appreciated. Thanks, Tag: Lockdown IIS 5.1 only for localhost Tag: 385672
  - 24
    - load-testing IIS Hi All: I have a public webserver hosting one website that is on a 10Mbps connection and receives about .5 page requests/sec and 20 requests/sec. It's a Xeon 3.0 with 2 gig ram and 1+0 SCSI RAID. We're anticipating a sudden spike in traffic to coincide with a promotion, where the server will receive up to several thousand page requests per minute for 5-10 minutes. The page being requested has been reduced to about 50K total including some 7 images on the page. There is quite a bit of server-side processing on this page however. Is there any way to accurately load-test the server in this scenario to predict if it will be able to handle the load? Tag: Lockdown IIS 5.1 only for localhost Tag: 385668
  - 25
    - Hide ftp folders in ftp root subfolder Hi all, I have a ftp site with different clients connecting to it. I don't want clients to see the other clients' folders. Having read the posts I could find, I set ntfs permissions for each client then created a virtual directory for each client. My problem is this: If I put the virtual directories directly under my root, each user that logs in is redirected straight to their folder. That is the behaviour I want but in a subfolder of my root, i.e. I want to have: <vroot> - Public - Clients With each client's folder under the 'clients' directory. However when I set this up, one of two things happens: If I set the permissions of 'Clients' to be identical to those of my root, when a client logs in they see a list of all folders - Bad. If I strip the permissions on 'Clients' so that the administrators group has full control and the users group has read but not list, my users get an access violation when trying to navigate to 'clients' (unless they enter the full address such as <vroot>/Clients/clientName). Could anybody tell me how to set it up so that I have my structure as shown above, and when a client navigates to 'Clients' either be redirected to their folder or see only their folder listed? I use windows server 2003 with IIS6.0 Thank you! Tag: Lockdown IIS 5.1 only for localhost Tag: 385666
- Next
  - 1
    - IISState log file Hi guys, Can someone point me to a problem with our web site from this IISState log file: Opened log file 'C:\iisstate\output\IISState-4000.log' *********************** Starting new log output IISState version 3.3.1 Tue Jul 25 11:32:07 2006 OS = Windows 2003 Server Executable: w3wp.exe PID = 4000 Note: Thread times are formatted as HH:MM:SS.ms *********************** IIS has crashed... Beginning Analysis *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll - DLL (!FunctionName) that failed: kernel32!RaiseException Thread ID: 41 System Thread ID: b08 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker failed to load from resource.Failed to load SOS data. No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0198ef9c 79f97065 kernel32!RaiseException+0x3c 01 0198effc 7a05b941 mscorwks!RaiseTheExceptionInternalOnly+0x226 02 0198f010 7a05b9b2 mscorwks!RaiseTheException+0x4c 03 0198f038 7a05b9ea mscorwks!RaiseTheException+0xbe 04 0198f064 7a05b9f5 mscorwks!RealCOMPlusThrow+0x37 05 0198f070 7a0e0701 mscorwks!RealCOMPlusThrow+0xa 06 0198f1a0 7a0e1980 mscorwks!Thread::RaiseCrossContextException+0x63 07 0198f254 7a0e27ef mscorwks!Thread::DoADCallBack+0x26c 08 0198f26c 79ecb442 mscorwks!Thread::UserResumeThread+0xe1 09 0198f300 79ecb364 mscorwks!Thread::DoADCallBack+0x355 0a 0198f33c 7a0e1b7e mscorwks!Thread::DoADCallBack+0x541 0b 0198f364 7a0e1b95 mscorwks!Thread::DoADCallBack+0x575 0c 0198f378 7a07f7b3 mscorwks!ManagedThreadBase::KickOff+0x13 0d 0198f414 79ecb00b mscorwks!ThreadNative::KickOffThread+0x230 0e 0198ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x49 0f 0198ffec 00000000 kernel32!GetModuleFileNameA+0xeb Closing open log file C:\iisstate\output\IISState-4000.log Opened log file 'C:\iisstate\output\IISState-4000.log' *********************** Starting new log output IISState version 3.3.1 Tue Jul 25 12:36:16 2006 OS = Windows 2003 Server Executable: w3wp.exe PID = 4000 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: fb8 Kernel Time: 0:0:0.0 User Time: 0:0:0.31 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0006fc08 7c822124 ntdll!KiFastSystemCallRet 01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0x88 03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12 04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10 05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d 06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd 07 0006ff0c 0100187c w3core!UlW3Start+0x26e 08 0006ff44 01001a23 w3wp!wmain+0x22a 09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b 0a 0006fff0 00000000 kernel32!IsProcessorFeaturePresent+0x9e Thread ID: 1 System Thread ID: c88 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 009eff9c 7c821364 ntdll!KiFastSystemCallRet 01 009effa0 7c81fe26 ntdll!NtDelayExecution+0xc 02 009effb8 77e66063 ntdll!RtlpTimerThread+0x47 WARNING: Stack unwind information not available. Following frames may be wrong. 03 009effec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 2 System Thread ID: dd0 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 00a2ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 00a2ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 00a2ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d WARNING: Stack unwind information not available. Following frames may be wrong. 03 00a2ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 3 System Thread ID: e7c Kernel Time: 0:0:0.859 User Time: 0:0:0.765 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00c8ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00c8ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 00c8ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00c8ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00c8ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00c8ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00c8ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 4 System Thread ID: 7cc Kernel Time: 0:0:2.343 User Time: 0:0:2.156 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00ccff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00ccff28 77e6611a ntdll!NtRemoveIoCompletion+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 00ccff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00ccff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00ccffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00ccffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00ccffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 5 System Thread ID: 650 Kernel Time: 0:0:0.546 User Time: 0:0:0.562 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00d0ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00d0ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 00d0ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00d0ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00d0ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00d0ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00d0ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 6 System Thread ID: f68 Kernel Time: 0:0:1.937 User Time: 0:0:1.812 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00d4ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00d4ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 00d4ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00d4ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00d4ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00d4ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00d4ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 7 System Thread ID: b30 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 00e0fcec 7c822114 ntdll!KiFastSystemCallRet 01 00e0fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc 02 00e0ffb8 77e66063 ntdll!RtlpWaitThread+0x161 WARNING: Stack unwind information not available. Following frames may be wrong. 03 00e0ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 8 System Thread ID: df0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 017efa84 7c822124 ntdll!KiFastSystemCallRet 01 017efa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 017efaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0x88 03 017efb0c 5a3b8147 kernel32!WaitForSingleObject+0x12 04 017effb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126 05 017effec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 9 System Thread ID: 738 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 00a8ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 00a8ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 00a8ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d WARNING: Stack unwind information not available. Following frames may be wrong. 03 00a8ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 10 System Thread ID: f70 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0186ff8c 7c821364 ntdll!KiFastSystemCallRet 01 0186ff90 7c815267 ntdll!NtDelayExecution+0xc 02 0186ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f WARNING: Stack unwind information not available. Following frames may be wrong. 03 0186ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 11 System Thread ID: 8dc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr 00 019cfe14 7c821364 ntdll!KiFastSystemCallRet 01 019cfe18 77e42439 ntdll!NtDelayExecution+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 019cfe80 79f2c9f3 kernel32!SleepEx+0x4d 03 019cfeb4 79f2c9c3 mscorwks!EESleepEx+0xa3 04 019cfee8 79f758ec mscorwks!__DangerousSwitchToThread+0x70 05 019cfef4 79f2c895 mscorwks!__SwitchToThread+0xb 06 019cffb8 77e66063 mscorwks!ThreadpoolMgr::GateThreadStart+0xa1 07 019cffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 12 System Thread ID: 968 Kernel Time: 0:0:2.562 User Time: 0:0:14.640 *** WARNING: Unable to verify checksum for C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\1663394440e1cd40a8b7f1633220d341\System.Data.ni.dll Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01a0ee10 7c822124 ntdll!KiFastSystemCallRet 01 01a0ee14 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 01a0ee84 77e6ba12 kernel32!WaitForSingleObjectEx+0x88 03 01a0ee98 6500d5e2 kernel32!WaitForSingleObject+0x12 04 01a0efec 64ffe21c System_Data!Tcp::ReadSync+0x142 05 01a0f00c 6518f867 System_Data!SNIReadSync+0x55 06 01a0f08c 65307213 System_Data_ni!__dyn_tls_init_callback+0x1367 07 01a0f0c4 65306f5b System_Data_ni!__dyn_tls_init_callback+0x178d13 08 00000000 00000000 System_Data_ni!__dyn_tls_init_callback+0x178a5b Thread ID: 13 System Thread ID: f58 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr 00 01b3fe30 7c822114 ntdll!KiFastSystemCallRet 01 01b3fe34 77e6711b ntdll!NtWaitForMultipleObjects+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 01b3fedc 77e61075 kernel32!ResetEvent+0x45 03 01b3fef8 79ed4b06 kernel32!WaitForMultipleObjects+0x18 04 01b3ff58 79ed4a63 mscorwks!DebuggerRCThread::MainLoop+0xcf 05 01b3ff88 79ed49a6 mscorwks!DebuggerRCThread::ThreadProc+0xca 06 01b3ffb8 77e66063 mscorwks!DebuggerRCThread::ThreadProcStatic+0x82 07 01b3ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 14 System Thread ID: 22c Kernel Time: 0:0:0.296 User Time: 0:0:17.312 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr 00 01dafe68 7c822124 ntdll!KiFastSystemCallRet 01 01dafe6c 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 01dafedc 79e77fd1 kernel32!WaitForSingleObjectEx+0x88 03 01daff20 79e77f9a mscorwks!PEImage::LoadImage+0x199 04 01daff70 79e77f50 mscorwks!CLREvent::WaitEx+0x117 05 01daff80 79f3549b mscorwks!CLREvent::Wait+0x17 06 01daffa8 79f6ece3 mscorwks!SVR::gc_heap::gc_thread_function+0x2e 07 01daffb8 77e66063 mscorwks!SVR::gc_heap::gc_thread_stub+0x9b 08 01daffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 15 System Thread ID: fd8 Kernel Time: 0:0:0.328 User Time: 0:0:15.437 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr 00 01defd68 7c822124 ntdll!KiFastSystemCallRet 01 01defd6c 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 01defddc 79e77fd1 kernel32!WaitForSingleObjectEx+0x88 03 01defe20 79e77f9a mscorwks!PEImage::LoadImage+0x199 04 01defe70 79e77f50 mscorwks!CLREvent::WaitEx+0x117 05 01defe80 79f35411 mscorwks!CLREvent::Wait+0x17 06 01defea8 79f6ece3 mscorwks!SVR::gc_heap::gc_thread_function+0x57 07 01deffb8 77e66063 mscorwks!SVR::gc_heap::gc_thread_stub+0x9b 08 01deffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 16 System Thread ID: 8f0 Kernel Time: 0:0:0.0 User Time: 0:0:0.203 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr 00 01e2fccc 7c822114 ntdll!KiFastSystemCallRet 01 01e2fcd0 77e6711b ntdll!NtWaitForMultipleObjects+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 01e2fd78 77e61075 kernel32!ResetEvent+0x45 03 01e2fd94 79f60b6a kernel32!WaitForMultipleObjects+0x18 04 01e2fdb4 79f34fb4 mscorwks!SVR::WaitForFinalizerEvent+0x7a 05 01e2fdc8 79ecb4a4 mscorwks!SVR::GCHeap::FinalizerThreadWorker+0x75 06 01e2fdd8 79ecb442 mscorwks!Thread::UserResumeThread+0xfb 07 01e2fe6c 79ecb364 mscorwks!Thread::DoADCallBack+0x355 08 01e2fea8 79ed5e8b mscorwks!Thread::DoADCallBack+0x541 09 01e2fed0 79ed5e56 mscorwks!ManagedThreadBase_NoADTransition+0x32 0a 01e2fedc 79f6fd87 mscorwks!ManagedThreadBase::FinalizerBase+0xb 0b 01e2ff14 79ecb00b mscorwks!SVR::GCHeap::FinalizerThreadStart+0xbb 0c 01e2ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x49 0d 01e2ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 17 System Thread ID: d40 Kernel Time: 0:0:0.31 User Time: 0:0:0.15 Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr 00 0202fec8 7c821364 ntdll!KiFastSystemCallRet 01 0202fecc 77e42439 ntdll!NtDelayExecution+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0202ff34 79f446b6 kernel32!SleepEx+0x4d 03 0202ffb0 79f44647 mscorwks!ThreadpoolMgr::TimerThreadFire+0x6d 04 0202ffb8 77e66063 mscorwks!ThreadpoolMgr::TimerThreadStart+0x56 05 0202ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 18 System Thread ID: fac Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: ASP Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 0ecbff0c 7c822124 ntdll!KiFastSystemCallRet 01 0ecbff10 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0ecbff80 77e6ba12 kernel32!WaitForSingleObjectEx+0x88 03 0ecbff94 709fc91b kernel32!WaitForSingleObject+0x12 04 0ecbffb4 709fc8f3 asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x1e 05 0ecbffb8 77e66063 asp!CApplnCleanupMgr::ApplnCleanupThread+0xa 06 0ecbffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 19 System Thread ID: d60 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: ASP Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 0ed7fe1c 7c822114 ntdll!KiFastSystemCallRet 01 0ed7fe20 77e6711b ntdll!NtWaitForMultipleObjects+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0ed7fec8 7739cd08 kernel32!ResetEvent+0x45 03 0ed7ff24 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0ed7ff40 709fbcbe USER32!MsgWaitForMultipleObjects+0x1f 05 0ed7ff84 77bcb530 asp!CMTACallbackThread::Thread+0x4f 06 0ed7ffb8 77e66063 msvcrt!_endthreadex+0xa3 07 0ed7ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 20 System Thread ID: 3c0 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr 00 0edbfcb8 7c822124 ntdll!KiFastSystemCallRet 01 0edbfcbc 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0edbfd2c 79e77fd1 kernel32!WaitForSingleObjectEx+0x88 03 0edbfd70 79e77f9a mscorwks!PEImage::LoadImage+0x199 04 0edbfdc0 79e77f50 mscorwks!CLREvent::WaitEx+0x117 05 0edbfdd0 79f584f4 mscorwks!CLREvent::Wait+0x17 06 0edbfe94 79ecb00b mscorwks!AppDomain::ADUnloadThreadStart+0x2fb 07 0edbffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x49 08 0edbffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 21 System Thread ID: d38 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: ASP Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 0efdfef4 7c822124 ntdll!KiFastSystemCallRet 01 0efdfef8 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0efdff68 77e6ba12 kernel32!WaitForSingleObjectEx+0x88 03 0efdff7c 709fe9b7 kernel32!WaitForSingleObject+0x12 04 0efdffb8 77e66063 asp!CViperReqManager::WatchThread+0x68 05 0efdffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 22 System Thread ID: f04 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0f01fee8 7c822124 ntdll!KiFastSystemCallRet 01 0f01feec 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0f01ff5c 77e6ba12 kernel32!WaitForSingleObjectEx+0x88 03 0f01ff70 75bd4bd0 kernel32!WaitForSingleObject+0x12 04 0f01ff84 77bcb530 comsvcs!CSTAThreadPool::LoadBalanceThreadControlLoop+0x29 05 0f01ffb8 77e66063 msvcrt!_endthreadex+0xa3 06 0f01ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 23 System Thread ID: 750 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0f05fee0 7c822124 ntdll!KiFastSystemCallRet 01 0f05fee4 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0f05ff54 77e6ba12 kernel32!WaitForSingleObjectEx+0x88 03 0f05ff68 75bd464d kernel32!WaitForSingleObject+0x12 04 0f05ff84 77bcb530 comsvcs!CSTAThreadPool::KillThreadControlLoop+0x25 05 0f05ffb8 77e66063 msvcrt!_endthreadex+0xa3 06 0f05ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 24 System Thread ID: 20c Kernel Time: 0:0:0.15 User Time: 0:0:0.31 Thread Status: Thread is in a WAIT state. Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0f09fdcc 7c822114 ntdll!KiFastSystemCallRet 01 0f09fdd0 77e6711b ntdll!NtWaitForMultipleObjects+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0f09fe78 7739cd08 kernel32!ResetEvent+0x45 03 0f09fed4 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0f09fef0 75bd86c6 USER32!MsgWaitForMultipleObjects+0x1f 05 0f09ff84 77bcb530 comsvcs!CSTAThread::WorkerLoop+0x1e5 06 0f09ffb8 77e66063 msvcrt!_endthreadex+0xa3 07 0f09ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 25 System Thread ID: 150 Kernel Time: 0:0:0.156 User Time: 0:0:0.265 Thread Status: Thread is in a WAIT state. Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0f0dfdcc 7c822114 ntdll!KiFastSystemCallRet 01 0f0dfdd0 77e6711b ntdll!NtWaitForMultipleObjects+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0f0dfe78 7739cd08 kernel32!ResetEvent+0x45 03 0f0dfed4 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0f0dfef0 75bd86c6 USER32!MsgWaitForMultipleObjects+0x1f 05 0f0dff84 77bcb530 comsvcs!CSTAThread::WorkerLoop+0x1e5 06 0f0dffb8 77e66063 msvcrt!_endthreadex+0xa3 07 0f0dffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 26 System Thread ID: 954 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0f11fdcc 7c822114 ntdll!KiFastSystemCallRet 01 0f11fdd0 77e6711b ntdll!NtWaitForMultipleObjects+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0f11fe78 7739cd08 kernel32!ResetEvent+0x45 03 0f11fed4 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0f11fef0 75bd86c6 USER32!MsgWaitForMultipleObjects+0x1f 05 0f11ff84 77bcb530 comsvcs!CSTAThread::WorkerLoop+0x1e5 06 0f11ffb8 77e66063 msvcrt!_endthreadex+0xa3 07 0f11ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 27 System Thread ID: f64 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0f15fdcc 7c822114 ntdll!KiFastSystemCallRet 01 0f15fdd0 77e6711b ntdll!NtWaitForMultipleObjects+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0f15fe78 7739cd08 kernel32!ResetEvent+0x45 03 0f15fed4 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0f15fef0 75bd86c6 USER32!MsgWaitForMultipleObjects+0x1f 05 0f15ff84 77bcb530 comsvcs!CSTAThread::WorkerLoop+0x1e5 06 0f15ffb8 77e66063 msvcrt!_endthreadex+0xa3 07 0f15ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 28 System Thread ID: 8e8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0f81ff54 7c821bf4 ntdll!KiFastSystemCallRet 01 0f81ff58 77e6611a ntdll!NtRemoveIoCompletion+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0f81ff84 64ffe9e9 kernel32!GetQueuedCompletionStatus+0x29 03 0f81ffb8 77e66063 System_Data!SNIAsyncWait+0x6c 04 0f81ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 29 System Thread ID: 700 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** WARNING: Unable to verify checksum for C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\6d40d8e23cdeb94bb71d579bb33d9889\mscorlib.ni.dll *** WARNING: Unable to verify checksum for C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\38dd7ea6b61df548ad806b7e65a8df80\System.ni.dll Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr 00 1042eba8 7c822114 ntdll!KiFastSystemCallRet 01 1042ebac 77e6711b ntdll!NtWaitForMultipleObjects+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 1042ec54 79f8ead4 kernel32!ResetEvent+0x45 03 1042ecbc 79f17522 mscorwks!WaitForMultipleObjectsEx_SO_TOLERANT+0x6f 04 1042ecdc 79f17493 mscorwks!Thread::DoAppropriateAptStateWait+0x3c 05 1042ed60 79f1732f mscorwks!Thread::DoAppropriateWaitWorker+0x144 06 1042edb0 7a07b1a5 mscorwks!Thread::DoAppropriateWait+0x40 07 1042eef8 793d4413 mscorwks!WaitHandleNative::CorWaitMultipleNative+0x20a 08 1042ef18 7a5d25fc mscorlib_ni+0x314413 09 1042ef68 793d7a7b System_ni+0x1925fc 0a 1042ef80 79e88f63 mscorlib_ni+0x317a7b 0b 1042ef90 79e88ee4 mscorwks!CallDescrWorker+0x33 0c 1042f010 79e88e31 mscorwks!CallDescrWorkerWithHandler+0xa3 0d 1042f150 79e88d19 mscorwks!MethodDesc::CallDescr+0x19c 0e 1042f168 79e88cf6 mscorwks!MethodDesc::CallTargetWorker+0x20 0f 1042f17c 79ef80d3 mscorwks!MethodDescCallSite::Call+0x18 10 1042f348 79ef7fde mscorwks!ExecuteCodeWithGuaranteedCleanupHelper+0xb2 11 1042f3f8 793684fb mscorwks!ReflectionInvocation::ExecuteCodeWithGuaranteedCleanup+0xf9 12 1042f410 793683ee mscorlib_ni+0x2a84fb 13 1042f428 793d7b5c mscorlib_ni+0x2a83ee 14 1042f440 79e88f63 mscorlib_ni+0x317b5c 15 1042f450 79e88ee4 mscorwks!CallDescrWorker+0x33 16 1042f4d0 79e88e31 mscorwks!CallDescrWorkerWithHandler+0xa3 17 1042f608 79e88d19 mscorwks!MethodDesc::CallDescr+0x19c 18 1042f620 79e88cf6 mscorwks!MethodDesc::CallTargetWorker+0x20 19 1042f634 7a07d585 mscorwks!MethodDescCallSite::Call+0x18 1a 1042f838 79ecb4a4 mscorwks!ThreadNative::KickOffThread_Worker+0x15d 1b 1042f848 79ecb442 mscorwks!Thread::UserResumeThread+0xfb 1c 1042f8dc 79ecb364 mscorwks!Thread::DoADCallBack+0x355 1d 1042f918 79f3a0b3 mscorwks!Thread::DoADCallBack+0x541 1e 1042f924 7a0e17ed mscorwks!Thread::UserResumeThread+0xa6 1f 1042f9d4 7a0e27ef mscorwks!Thread::DoADCallBack+0xd9 20 1042f9ec 79ecb442 mscorwks!Thread::UserResumeThread+0xe1 21 1042fa80 79ecb364 mscorwks!Thread::DoADCallBack+0x355 22 1042fabc 7a0e1b7e mscorwks!Thread::DoADCallBack+0x541 23 1042fae4 7a0e1b95 mscorwks!Thread::DoADCallBack+0x575 24 1042faf8 7a07f7b3 mscorwks!ManagedThreadBase::KickOff+0x13 25 1042fb94 79ecb00b mscorwks!ThreadNative::KickOffThread+0x230 26 1042ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x49 27 1042ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 30 System Thread ID: ff0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr 00 10a4eef8 7c821bf4 ntdll!KiFastSystemCallRet 01 10a4eefc 77e6611a ntdll!NtRemoveIoCompletion+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 10a4ef28 79f2f30a kernel32!GetQueuedCompletionStatus+0x29 03 10a4ef94 79ecb00b mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x11c 04 10a4ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x49 05 10a4ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 31 System Thread ID: a58 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 10b8fe48 7c822114 ntdll!KiFastSystemCallRet 01 10b8fe4c 77e6711b ntdll!NtWaitForMultipleObjects+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 10b8fef4 7739cd08 kernel32!ResetEvent+0x45 03 10b8ff50 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 10b8ff6c 4dda6ad4 USER32!MsgWaitForMultipleObjects+0x1f 05 10b8ffb8 77e66063 gdiplus!BackgroundThreadProc+0x59 06 10b8ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 32 System Thread ID: 6e0 Kernel Time: 0:0:1.343 User Time: 0:0:9.531 *** WARNING: Unable to verify checksum for C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\4d93d644f29b60408cfbfb76be4e30e2\System.Web.ni.dll Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 1071dc34 7c822124 ntdll!KiFastSystemCallRet 01 1071dc38 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 1071dca8 77e6ba12 kernel32!WaitForSingleObjectEx+0x88 03 1071dcbc 6500d5e2 kernel32!WaitForSingleObject+0x12 04 1071de10 64ffe21c System_Data!Tcp::ReadSync+0x142 05 1071de30 6518f867 System_Data!SNIReadSync+0x55 06 1071deb0 65307213 System_Data_ni!__dyn_tls_init_callback+0x1367 07 1071dee8 65306f5b System_Data_ni!__dyn_tls_init_callback+0x178d13 08 1071def8 653066b7 System_Data_ni!__dyn_tls_init_callback+0x178a5b 09 1071df00 653a34a2 System_Data_ni!__dyn_tls_init_callback+0x1781b7 0a 1071df18 653a2753 System_Data_ni!__dyn_tls_init_callback+0x214fa2 0b 1071df34 652da93c System_Data_ni!__dyn_tls_init_callback+0x214253 0c 1071dfec 652b0f7b System_Data_ni!__dyn_tls_init_callback+0x14c43c 0d 1071e01c 6523309d System_Data_ni!__dyn_tls_init_callback+0x122a7b 0e 1071e054 65232e82 System_Data_ni!__dyn_tls_init_callback+0xa4b9d 0f 1071e090 65232a7d System_Data_ni!__dyn_tls_init_callback+0xa4982 10 1071e0dc 65240660 System_Data_ni!__dyn_tls_init_callback+0xa457d 11 1071e12c 65240146 System_Data_ni!__dyn_tls_init_callback+0xb2160 12 1071e174 6523ffc8 System_Data_ni!__dyn_tls_init_callback+0xb1c46 13 1071e1cc 6539fefc System_Data_ni!__dyn_tls_init_callback+0xb1ac8 14 1071e7a0 689c306d System_Data_ni!__dyn_tls_init_callback+0x2119fc 15 00000000 00000000 System_Web_ni+0x40306d Thread ID: 33 System Thread ID: dec Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 10f0fad4 7c822124 ntdll!KiFastSystemCallRet 01 10f0fad8 71b23a09 ntdll!NtWaitForSingleObject+0xc 02 10f0fb14 71b23a52 mswsock!SockWaitForSingleObject+0x19d 03 10f0fc04 71c0470c mswsock!WSPSelect+0x380 04 10f0fc54 77215d7a WS2_32!select+0xb9 05 10f0ffb0 7721d925 WININET!ICAsyncThread::SelectThread+0x22a 06 10f0ffb8 77e66063 WININET!ICAsyncThread::SelectThreadWrapper+0xd WARNING: Stack unwind information not available. Following frames may be wrong. 07 10f0ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 34 System Thread ID: 314 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 116bff14 7739c78d ntdll!KiFastSystemCallRet 01 116bff34 77694ff1 USER32!NtUserGetMessage+0xc 02 116bff74 776cf35b ole32!CDllHost::STAWorkerLoop+0x72 03 116bff90 776cf2a3 ole32!CDllHost::WorkerThread+0xc8 04 116bff98 776b2307 ole32!DLLHostThreadEntry+0xd 05 116bffac 776b2374 ole32!CRpcThread::WorkerLoop+0x1e 06 116bffb8 77e66063 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x20 WARNING: Stack unwind information not available. Following frames may be wrong. 07 116bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 35 System Thread ID: b38 Kernel Time: 0:0:0.625 User Time: 0:0:0.406 Thread Type: HTTP Listener # ChildEBP RetAddr 00 1163ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 1163ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 1163ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 1163ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 1163ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 1163ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 1163ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 36 System Thread ID: 284 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 0fd9fe18 7c821c54 ntdll!KiFastSystemCallRet 01 0fd9fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 0fd9ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 0fd9ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 0fd9ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 0fd9ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b WARNING: Stack unwind information not available. Following frames may be wrong. 06 0fd9ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 37 System Thread ID: c4c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr 00 1153f418 7c822124 ntdll!KiFastSystemCallRet 01 1153f41c 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 1153f48c 79e77fd1 kernel32!WaitForSingleObjectEx+0x88 03 1153f4d0 79e77f9a mscorwks!PEImage::LoadImage+0x199 04 1153f520 79e77f50 mscorwks!CLREvent::WaitEx+0x117 05 1153f530 79f5b69c mscorwks!CLREvent::Wait+0x17 06 1153f5b0 7a111ccb mscorwks!ThreadpoolMgr::SafeWait+0x73 07 1153f614 79ecb00b mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x24d 08 1153ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x49 09 1153ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 38 System Thread ID: e74 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 12bfff7c 7c821bf4 ntdll!KiFastSystemCallRet 01 12bfff80 71b23eb4 ntdll!NtRemoveIoCompletion+0xc 02 12bfffb8 77e66063 mswsock!SockAsyncThread+0x69 WARNING: Stack unwind information not available. Following frames may be wrong. 03 12bfffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 39 System Thread ID: 368 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 10f9ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 10f9ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 10f9ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 10f9ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 10f9ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 10f9ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 10f9ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 40 System Thread ID: 5a0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0fdeff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0fdeff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0fdeffb8 77e66063 ntdll!RtlpWorkerThread+0x3d WARNING: Stack unwind information not available. Following frames may be wrong. 03 0fdeffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 41 System Thread ID: b08 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker No valid SOS data table found. Begin System Thread Information # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0198ef9c 79f97065 kernel32!RaiseException+0x3c 01 0198effc 7a05b941 mscorwks!RaiseTheExceptionInternalOnly+0x226 02 0198f010 7a05b9b2 mscorwks!RaiseTheException+0x4c 03 0198f038 7a05b9ea mscorwks!RaiseTheException+0xbe 04 0198f064 7a05b9f5 mscorwks!RealCOMPlusThrow+0x37 05 0198f070 7a0e0701 mscorwks!RealCOMPlusThrow+0xa 06 0198f1a0 7a0e1980 mscorwks!Thread::RaiseCrossContextException+0x63 07 0198f254 7a0e27ef mscorwks!Thread::DoADCallBack+0x26c 08 0198f26c 79ecb442 mscorwks!Thread::UserResumeThread+0xe1 09 0198f300 79ecb364 mscorwks!Thread::DoADCallBack+0x355 0a 0198f33c 7a0e1b7e mscorwks!Thread::DoADCallBack+0x541 0b 0198f364 7a0e1b95 mscorwks!Thread::DoADCallBack+0x575 0c 0198f378 7a07f7b3 mscorwks!ManagedThreadBase::KickOff+0x13 0d 0198f414 79ecb00b mscorwks!ThreadNative::KickOffThread+0x230 0e 0198ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x49 0f 0198ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 42 System Thread ID: 8a4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 01a4fe18 7c821c54 ntdll!KiFastSystemCallRet 01 01a4fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 01a4ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 01a4ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 01a4ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 01a4ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b WARNING: Stack unwind information not available. Following frames may be wrong. 06 01a4ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 43 System Thread ID: cc8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 104dff70 7c821bf4 ntdll!KiFastSystemCallRet 01 104dff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 104dffb8 77e66063 ntdll!RtlpWorkerThread+0x3d WARNING: Stack unwind information not available. Following frames may be wrong. 03 104dffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 44 System Thread ID: 120 Kernel Time: 0:0:0.406 User Time: 0:0:2.640 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0ff6e62c 7c822124 ntdll!KiFastSystemCallRet 01 0ff6e630 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0ff6e6a0 77e6ba12 kernel32!WaitForSingleObjectEx+0x88 03 0ff6e6b4 6500d5e2 kernel32!WaitForSingleObject+0x12 04 0ff6e808 64ffe21c System_Data!Tcp::ReadSync+0x142 05 0ff6e828 6518f867 System_Data!SNIReadSync+0x55 06 0ff6e8a8 65307213 System_Data_ni!__dyn_tls_init_callback+0x1367 07 0ff6e8e0 65306f5b System_Data_ni!__dyn_tls_init_callback+0x178d13 08 00000000 00000000 System_Data_ni!__dyn_tls_init_callback+0x178a5b Thread ID: 45 System Thread ID: 344 Kernel Time: 0:0:0.15 User Time: 0:0:0.93 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 10b0e42c 7c822124 ntdll!KiFastSystemCallRet 01 10b0e430 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 10b0e4a0 77e6ba12 kernel32!WaitForSingleObjectEx+0x88 03 10b0e4b4 6500d5e2 kernel32!WaitForSingleObject+0x12 04 10b0e608 64ffe21c System_Data!Tcp::ReadSync+0x142 05 10b0e628 6518f867 System_Data!SNIReadSync+0x55 06 10b0e6a8 65307213 System_Data_ni!__dyn_tls_init_callback+0x1367 07 10b0e6e0 65306f5b System_Data_ni!__dyn_tls_init_callback+0x178d13 08 00000000 00000000 System_Data_ni!__dyn_tls_init_callback+0x178a5b Thread ID: 46 System Thread ID: 320 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** WARNING: Unable to verify checksum for C:\WINDOWS\system32\dcsws2.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\dcsws2.dll - Thread Type: Other # ChildEBP RetAddr 00 10f5e368 7c8213e4 ntdll!KiFastSystemCallRet 01 10f5e36c 71b2192f ntdll!NtDeviceIoControlFile+0xc 02 10f5e3fc 0f82328e mswsock!WSPRecv+0x1c6 WARNING: Stack unwind information not available. Following frames may be wrong. 03 10f5e454 71c07fb7 dcsws2!Add_ProcessID+0x150d 04 10f5e49c 01aba1c3 WS2_32!recv+0x83 05 10f5e4c4 7a6003fe 0x1aba1c3 06 10f5e528 7a6002ad System_ni+0x1c03fe 07 10f5e54c 7a5d3658 System_ni+0x1c02ad 08 10f5e580 7a62400a System_ni+0x193658 09 10f5e594 7a6278a9 System_ni+0x1e400a 0a 00000000 00000000 System_ni+0x1e78a9 Thread ID: 47 System Thread ID: 4d4 Kernel Time: 0:0:0.562 User Time: 0:0:3.671 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0ffae878 7c822124 ntdll!KiFastSystemCallRet 01 0ffae87c 77e6baa8 ntdll!NtWaitForSingleObject+0xc WARNING: Stack unwind information not available. Following frames may be wrong. 02 0ffae8ec 77e6ba12 kernel32!WaitForSingleObjectEx+0x88 03 0ffae900 6500d5e2 kernel32!WaitForSingleObject+0x12 04 0ffaea54 64ffe21c System_Data!Tcp::ReadSync+0x142 05 0ffaea74 6518f867 System_Data!SNIReadSync+0x55 06 0ffaeaf4 65307213 System_Data_ni!__dyn_tls_init_callback+0x1367 07 0ffaeb2c 65306f5b System_Data_ni!__dyn_tls_init_callback+0x178d13 08 00000000 00000000 System_Data_ni!__dyn_tls_init_callback+0x178a5b ***** Dump name is formatted as: PID-Timestamp.dmp Creating C:\iisstate\output\4000-1153827469.dmp - mini user dump Dump successfully written ***** Closing open log file C:\iisstate\output\IISState-4000.log Tag: Lockdown IIS 5.1 only for localhost Tag: 385665
  - 2
    - ADFS and Windows Sharepoint Services I need to prove to my boss that ADFS will work well with WSS so that we can have one central datastore (Active Directory) which is in a different domain to the web server. I have gone through the ADFS step-by-step guide and proven that I can authenticate to the adfsresource federation server when I try to access the WSS web server on the adfsweb server when both adfsweb and adfsresource are in the same domain. Both adfsweb and adfsresource are in the same domain (treyresearch.net). I need to prove that the sharepoint accounts can be on a different server that is not in the same domain as the web server. Therefore I have removed adfsweb from the treyresearch.net domain (and restarted) and edited the trust policy on the adfsresource server to allow claims from the WSS application at the url https://adfsweb. I also created certificates to reflect the new name of adfsweb (instead of adfsweb.treyresearch.net). Now, when I browse to https://adfsweb, I am able to successfully authentication via ADFS. I know this because if I enter the credentials correctly, I can reach the WSS application and if I don't enter them correctly I get a IIS 403 error. When I *do* enter the credentails correctly however I also get a WSS error telling me that I don't have access to these Sharepoint resources (in other words, WSS does not recognise the user). It seems that when the federation server is not in the same domain as the web server then I can't log in. But isn't ADFS supposed to allow authentication users located in other domains? Or is my architecture wrong? The architecture that I currently have is as follows: * adfsweb : IIS with adfs web agent (not in any domain) configured as per the step-by-step guide. * adfsresource (this is just the name that the step-by-step guide gave for the server storing the WSS user accounts, but for my purposes this particular federation server is acting more like an account provider): adfs is configured to accept token-based claims from adfsweb (as per the step-by-step guide). adfsresource is also in the treyresearch.net domain. Anybody have any ideas? Many thanks Tag: Lockdown IIS 5.1 only for localhost Tag: 385641
  - 3
    - IIS6 new site with server extensions cannot authenticate Hi all. Go with me here if you can I'm a relative newby: I have just created a new website from a frontpage template through the IIS snap in in MS SBS2003. I have succeeded in uploading the site through frontpage. Most things work, I can browse the site fine from an external source. It has a selection of simple forms which ask the client to fill in name, email etc and comments. This requires 2002 server extensions, so I have enabled extensions for the site. The forms fail to work. The submit buttons are dead, and this leads me to beleive something wrong with either the form properties (I have altered to reflect an email address to mail to) or the extension attributes on the server. If I right click on the new site through IIS snap in, select all tasks, then check server extensions, I am prompted for authentication. I cannot use administrator or any other administrator user, therefore I cannot access any tweakable IIS info. Does this mean server extensions is not functioning correctly? Does anyone know how to correct this? Thanks for your time. Tag: Lockdown IIS 5.1 only for localhost Tag: 385640
  - 4
    - Help with IISstate log and inetinfo.exe @ 99 CPU usage Hello, looking for some help or tips on a particular problem. Came into work Monday morning (of course) and the websites we host on our DNS Server did not seem to be working. Went and rebooted the server and the sites still did not seem to be coming up. Checked taskmgr to see if any processes that shouldn't be running were running. Saw that inetinfo.exe was running at around 99 of CPU usage. I was unable to end the process through taskmgr. Started researching this on the web and found that lots of others have had this problem so I first found my way to the Windows NT 4.0 Support Tools where I used kill.exe to stop the process. I was then able to reach the websites at this time, including some of the .asp pages, which appeared to be working fine. I prematurely celebrated as I thought the problem was fixed but much to my chargrin, the sites were quickly down again and inetinfo.exse was back to 99 CPU usage. Did some more research and i've found my way to IISstate and installed it. We run a lot of sites of this one server but none of them get any exceptional amount of traffic. Many of the sites are .asp and several have contact us pages that use CDO. There is not any excessive amount of string Concatenation in the .asp pages (coded them myself) and they've all worked great for months, some of them years, before this morning. Any tips or info pointing me in the right direction would be greatly appreciated, here is the IISstate log I ran (long): -------------------------------------------------------------------------------------------- Opened log file 'C:\iisstate\output\IISState-1296.log' *********************** Starting new log output IISState version 3.3.1 Mon Jul 24 15:57:34 2006 OS = Windows 2000 Executable: inetinfo.exe PID = 1296 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 2a0 Kernel Time: 0:0:0.0 User Time: 0:0:0.10 Thread Type: Other # ChildEBP RetAddr 00 0006f89c 7c586335 ntdll!ZwReadFile+0xb 01 0006f910 7c2dd578 KERNEL32!ReadFile+0x181 02 0006f93c 7c2dd61e ADVAPI32!ObjectCloseAuditAlarmA+0x2f 03 0006f9b8 7c2d1e18 ADVAPI32!ObjectDeleteAuditAlarmW+0x4 04 0006fbf4 01002884 ADVAPI32!`string' 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1 06 0006ff70 01002fbf inetinfo!main+0x654 07 0006ffc0 7c598989 inetinfo!mainCRTStartup+0xff 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d Thread ID: 1 System Thread ID: 6c0 Kernel Time: 0:0:0.20 User Time: 0:0:0.110 Thread Type: Other # ChildEBP RetAddr 00 0059fd1c 7c59a030 ntdll!ZwWaitForSingleObject+0xb 01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156 04 0059ffa4 7c2dcf43 inetinfo!InetinfoStartService+0x2bd 05 0059ffec 00000000 ADVAPI32!AccessCheckByTypeResultListAndAuditAlarmByHandleW+0x2f Thread ID: 2 System Thread ID: 6e8 Kernel Time: 0:0:0.10 User Time: 0:0:0.20 Thread Type: Other # ChildEBP RetAddr 00 006dfe5c 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 006dfeac 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 006dff08 77e41706 USER32!__ClientExtTextOutW+0x3f 03 006dff24 6e5a5a7c USER32!__ClientGetTextExtentPointW+0x48 04 006dff78 78008593 IisRTL!SchedulerWorkerThread+0xa7 05 006dffb4 7c57b388 MSVCRT!_endthreadex+0x98 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 3 System Thread ID: 15c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0071fe5c 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 0071feac 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 0071ff08 77e41706 USER32!__ClientExtTextOutW+0x3f 03 0071ff24 6e5a5a7c USER32!__ClientGetTextExtentPointW+0x48 04 0071ff78 78008593 IisRTL!SchedulerWorkerThread+0xa7 05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0x98 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 4 System Thread ID: 560 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00b6fe24 77d5e6c4 ntdll!ZwReplyWaitReceivePortEx+0xb 01 00b6ff74 77d4e0c0 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 00b6ff78 77d4e003 RPCRT4!RecvLotsaCallsWrapper+0x9 03 00b6ffa8 77d4af16 RPCRT4!BaseCachedThreadRoutine+0x4f 04 00b6ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 05 00b6ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 5 System Thread ID: 588 Kernel Time: 0:0:0.70 User Time: 0:0:0.250 Thread Type: Other # ChildEBP RetAddr 00 00dffc1c 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 00dffc6c 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 00dffcc8 77e41706 USER32!__ClientExtTextOutW+0x3f 03 00dffce4 769c71e0 USER32!__ClientGetTextExtentPointW+0x48 04 00dffd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 00dffd70 01002440 w3svc!ServiceEntry+0x1b5 06 00dfffa4 7c2dcf43 inetinfo!InetinfoStartService+0x2bd 07 00dfffec 00000000 ADVAPI32!AccessCheckByTypeResultListAndAuditAlarmByHandleW+0x2f Thread ID: 6 System Thread ID: 69c Kernel Time: 0:0:0.50 User Time: 0:0:0.40 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 00e3fc1c 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 00e3fc6c 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 00e3fcc8 77e41706 USER32!__ClientExtTextOutW+0x3f 03 00e3fce4 769c71e0 USER32!__ClientGetTextExtentPointW+0x48 04 00e3fd30 6b561a78 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 00e3fd70 01002440 SMTPSVC!ServiceEntry+0x136 06 00e3ffa4 7c2dcf43 inetinfo!InetinfoStartService+0x2bd 07 00e3ffec 00000000 ADVAPI32!AccessCheckByTypeResultListAndAuditAlarmByHandleW+0x2f Thread ID: 7 System Thread ID: 538 Kernel Time: 0:0:0.0 User Time: 0:0:0.10 Thread Type: Other # ChildEBP RetAddr 00 00e7fc1c 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 00e7fc6c 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 00e7fcc8 77e41706 USER32!__ClientExtTextOutW+0x3f 03 00e7fce4 769c71e0 USER32!__ClientGetTextExtentPointW+0x48 04 00e7fd30 69df7f6c INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 00e7fd70 01002440 NntpSvc!ServiceEntry+0x13f 06 00e7ffa4 7c2dcf43 inetinfo!InetinfoStartService+0x2bd 07 00e7ffec 00000000 ADVAPI32!AccessCheckByTypeResultListAndAuditAlarmByHandleW+0x2f Thread ID: 8 System Thread ID: 5d8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00ebfc1c 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 00ebfc6c 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 00ebfcc8 77e41706 USER32!__ClientExtTextOutW+0x3f 03 00ebfce4 769c71e0 USER32!__ClientGetTextExtentPointW+0x48 04 00ebfd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 00ebfd70 01002440 ftpsvc2!ServiceEntry+0xc7 06 00ebffa4 7c2dcf43 inetinfo!InetinfoStartService+0x2bd 07 00ebffec 00000000 ADVAPI32!AccessCheckByTypeResultListAndAuditAlarmByHandleW+0x2f Thread ID: 9 System Thread ID: 30c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00f7ff5c 7c585423 ntdll!NtRemoveIoCompletion+0xb 01 00f7ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27 02 00f7ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32 03 00f7ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 10 System Thread ID: 1ac Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00fbff50 7c585423 ntdll!NtRemoveIoCompletion+0xb 01 00fbff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 00fbffb4 7c57b388 ISATQ!AtqPoolThread+0x40 03 00fbffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 11 System Thread ID: 634 Kernel Time: 0:6:36.29 User Time: 0:2:16.686 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00ffec70 7c586335 ntdll!ZwReadFile+0xb 01 00ffece4 6e60e3cd KERNEL32!ReadFile+0x181 02 00ffee44 6e60e249 iislog!ILOG_FILE::PositionToEOF+0x110 03 00ffef6c 6e60e16b iislog!ILOG_FILE::OpenFile+0xc5 04 00ffef88 6e605719 iislog!ILOG_FILE::Open+0x6a 05 00fff1dc 6e605bec iislog!CLogFileCtrl::OpenLogFile+0x243 06 00fff1f4 6e6012c8 iislog!CLogFileCtrl::WriteLogInformation+0x122 07 00fff530 6d6f115a iislog!CLogFileCtrl::LogInformation+0xe0 08 00fff630 6d6f1101 iscomlog!COMLOG_CONTEXT::LogInformation+0x54 09 00fff638 769b1627 iscomlog!ComLogLogInformation+0x11 0a 00fff64c 65f1c7af INFOCOMM!LOGGING::LogInformation+0x24 0b 00ffff1c 65f216c6 w3svc!HTTP_REQ_BASE::WriteLogRecord+0x433 0c 00ffff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x26d 0d 00ffff4c 6d701a22 w3svc!W3Completion+0x43 0e 00ffff80 6d7029a6 ISATQ!AtqpProcessContext+0x266 0f 00ffffb4 7c57b388 ISATQ!AtqPoolThread+0x1a8 10 00ffffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 12 System Thread ID: 708 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0124fe24 77d5e6c4 ntdll!ZwReplyWaitReceivePortEx+0xb 01 0124ff74 77d4e0c0 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0124ff78 77d4e003 RPCRT4!RecvLotsaCallsWrapper+0x9 03 0124ffa8 77d4af16 RPCRT4!BaseCachedThreadRoutine+0x4f 04 0124ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 05 0124ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 13 System Thread ID: 5f4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 014dfeb8 7c585423 ntdll!NtRemoveIoCompletion+0xb 01 014dfee4 77d4fa03 KERNEL32!GetQueuedCompletionStatus+0x27 02 014dff20 77d4f964 RPCRT4!COMMON_ProcessCalls+0x9e 03 014dff74 77d43dd7 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99 04 014dff78 77d4e003 RPCRT4!ProcessIOEventsWrapper+0x9 05 014dffa8 77d4af16 RPCRT4!BaseCachedThreadRoutine+0x4f 06 014dffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 07 014dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 14 System Thread ID: 480 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0151fd20 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 0151fd70 7c59a10e KERNEL32!WaitForMultipleObjectsEx+0xea 02 0151fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17 03 0151ffb4 7c57b388 RTUTILS!TraceServerThread+0xde 04 0151ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 15 System Thread ID: 6a4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0155ff20 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 0155ff70 7c59a10e KERNEL32!WaitForMultipleObjectsEx+0xea 02 0155ff88 701224fa KERNEL32!WaitForMultipleObjects+0x17 03 0155ffb4 7c57b388 exstrace!RegNotifyThread+0x6f 04 0155ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 16 System Thread ID: 544 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0159ff24 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 0159ff74 7c59a10e KERNEL32!WaitForMultipleObjectsEx+0xea 02 0159ff8c 70121e6a KERNEL32!WaitForMultipleObjects+0x17 03 0159ffb4 7c57b388 exstrace!WriteTraceThread+0x2f 04 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 17 System Thread ID: 508 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 015dff64 7c59a030 ntdll!ZwWaitForSingleObject+0xb 01 015dff8c 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 015dff9c 6ff2841e KERNEL32!WaitForSingleObject+0xf 03 015dffb4 7c57b388 FCACHDLL!CScheduleThread::ScheduleThread+0x22 04 015dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 18 System Thread ID: 6c4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 0171ff18 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 0171ff68 7c59a10e KERNEL32!WaitForMultipleObjectsEx+0xea 02 0171ff80 6b57b026 KERNEL32!WaitForMultipleObjects+0x17 03 0171ffb4 7c57b388 SMTPSVC!TcpRegNotifyThread+0x136 04 0171ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 19 System Thread ID: 6cc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 0175ff68 7c59a030 ntdll!ZwWaitForSingleObject+0xb 01 0175ff90 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 0175ffa0 6b57ae5a KERNEL32!WaitForSingleObject+0xf 03 0175ffb4 7c57b388 SMTPSVC!FreeLibThread+0x1d 04 0175ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 20 System Thread ID: 4d4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0181ff64 7c59a030 ntdll!ZwWaitForSingleObject+0xb 01 0181ff8c 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 0181ff9c 69e1771a KERNEL32!WaitForSingleObject+0xf 03 0181ffb4 7c57b388 NntpSvc!CScheduleThread::ScheduleThread+0x22 04 0181ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 21 System Thread ID: 50c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0185ff5c 7c59a030 ntdll!ZwWaitForSingleObject+0xb 01 0185ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 0185ff94 69e13d8f KERNEL32!WaitForSingleObject+0xf 03 0185ffb4 7c57b388 NntpSvc!CRetryQ::RetryQueueThread+0x36 04 0185ffc0 77f8d562 KERNEL32!BaseThreadStart+0x52 05 00e7fba4 77fb7e64 ntdll!LdrpLoadDll+0x3c5 06 00e7fba4 77fb7e64 ntdll!_except_handler3 07 00e7fc54 77d3a31e ntdll!_except_handler3 08 00e7ffdc 7c5c1f54 RPCRT4!_except_handler3 09 ffffffff 00000000 KERNEL32!_except_handler3 Thread ID: 22 System Thread ID: 59c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0189ff00 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 0189ff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0189ff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18 03 0189ffb4 7c57b388 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39 04 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 23 System Thread ID: 6b4 Kernel Time: 0:0:0.10 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for \\?\C:\IISDebugTools\IISCHAgent.dll - Thread Type: Other # ChildEBP RetAddr 00 01cdfed8 7c585423 ntdll!NtRemoveIoCompletion+0xb 01 01cdff04 67306fab KERNEL32!GetQueuedCompletionStatus+0x27 WARNING: Stack unwind information not available. Following frames may be wrong. 02 01cdffb4 7c57b388 IISCHAgent!ConfigFileMonitor+0x15b 03 01cdffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 24 System Thread ID: 5e4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01e1ff18 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 01e1ff68 7c59a10e KERNEL32!WaitForMultipleObjectsEx+0xea 02 01e1ff80 6730649c KERNEL32!WaitForMultipleObjects+0x17 WARNING: Stack unwind information not available. Following frames may be wrong. 03 01e1ffb4 7c57b388 IISCHAgent!MonitorWorkerProcess+0xa3 04 01e1ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 25 System Thread ID: 3bc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 01e6ff5c 7c59a030 ntdll!ZwWaitForSingleObject+0xb 01 01e6ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 01e6ff94 732c3366 KERNEL32!WaitForSingleObject+0xf 03 01e6ffb4 7c57b388 compfilt!CompressionThread+0x29 04 01e6ffc0 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 26 System Thread ID: 24c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01eefe70 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 01eefec0 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 01eeff1c 77e41706 USER32!__ClientExtTextOutW+0x3f 03 01eeff38 65f09ccb USER32!__ClientGetTextExtentPointW+0x48 04 01eeff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42 05 01eeffb4 7c57b388 MSVCRT!_endthread+0xc6 06 01eeffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 27 System Thread ID: 640 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01f2fea8 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 01f2fef8 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 01f2ff54 77e41706 USER32!__ClientExtTextOutW+0x3f 03 01f2ff70 65f09d47 USER32!__ClientGetTextExtentPointW+0x48 04 01f2ffb4 7c57b388 w3svc!OleHackThread+0x88 05 01f2ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 28 System Thread ID: 320 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01fafce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb 01 01fafd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8 02 01fafe08 750312f5 msafd!WSPSelect+0x24e 03 01fafe6c 6e2b3b6e WS2_32!select+0xe7 04 01faffb4 7c57b388 inetsloc!SocketListenThread+0x51 05 01faffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 29 System Thread ID: 6e4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 01fefe24 77d5e6c4 ntdll!ZwReplyWaitReceivePortEx+0xb 01 01feff74 77d4e0c0 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 01feff78 77d4e003 RPCRT4!RecvLotsaCallsWrapper+0x9 03 01feffa8 77d4af16 RPCRT4!BaseCachedThreadRoutine+0x4f 04 01feffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 05 01feffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 30 System Thread ID: 3f4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0202fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb 01 0202fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8 02 0202ff24 750312f5 msafd!WSPSelect+0x24e 03 0202ff88 6d7075bd WS2_32!select+0xe7 04 0202ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22 05 0202ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9 06 0202ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 31 System Thread ID: 454 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0206ff4c 7c59a030 ntdll!ZwWaitForSingleObject+0xb 01 0206ff74 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 0206ff84 69de4384 KERNEL32!WaitForSingleObject+0xf 03 0206ffb4 7c57b388 NntpSvc!CNewsTree::NewsTreeCrawler+0x1d0 04 0206ffc0 77fb0072 KERNEL32!BaseThreadStart+0x52 05 65767265 00000000 ntdll!RtlpValidateHeapHeaders+0x119 Thread ID: 32 System Thread ID: 178 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 020aff58 7c585423 ntdll!NtRemoveIoCompletion+0xb 01 020aff84 69e0e150 KERNEL32!GetQueuedCompletionStatus+0x27 02 020affb4 7c57b388 NntpSvc!CThreadPool::ThreadDispatcher+0x34 03 020affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 33 System Thread ID: 4d8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 020eff58 7c585423 ntdll!NtRemoveIoCompletion+0xb 01 020eff84 69e0e150 KERNEL32!GetQueuedCompletionStatus+0x27 02 020effb4 7c57b388 NntpSvc!CThreadPool::ThreadDispatcher+0x34 03 020effec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 34 System Thread ID: 6d8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0212ff58 7c585423 ntdll!NtRemoveIoCompletion+0xb 01 0212ff84 69e0e150 KERNEL32!GetQueuedCompletionStatus+0x27 02 0212ffb4 7c57b388 NntpSvc!CThreadPool::ThreadDispatcher+0x34 03 0212ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 35 System Thread ID: 3c8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0216ff58 7c585423 ntdll!NtRemoveIoCompletion+0xb 01 0216ff84 69e0e150 KERNEL32!GetQueuedCompletionStatus+0x27 02 0216ffb4 7c57b388 NntpSvc!CThreadPool::ThreadDispatcher+0x34 03 0216ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 36 System Thread ID: 94 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 021aff48 7c59a030 ntdll!ZwWaitForSingleObject+0xb 01 021aff70 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 021aff80 69ddacdf KERNEL32!WaitForSingleObject+0xf 03 021affb4 7c57b388 NntpSvc!FeedScheduler+0x5c 04 021affc0 77fb0072 KERNEL32!BaseThreadStart+0x52 05 65767265 00000000 ntdll!RtlpValidateHeapHeaders+0x119 Thread ID: 37 System Thread ID: 70c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 021efe24 77d5e6c4 ntdll!ZwReplyWaitReceivePortEx+0xb 01 021eff74 77d4e0c0 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 021eff78 77d4e003 RPCRT4!RecvLotsaCallsWrapper+0x9 03 021effa8 77d4af16 RPCRT4!BaseCachedThreadRoutine+0x4f 04 021effb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 05 021effec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 38 System Thread ID: 6c8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0223ff54 7c59a030 ntdll!ZwWaitForSingleObject+0xb 01 0223ff7c 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 0223ff8c 741a99cd KERNEL32!WaitForSingleObject+0xf 03 0223ffb4 7c57b388 aqueue!CSMTP_RETRY_HANDLER::RetryThreadRoutine+0xce 04 0223ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 39 System Thread ID: 730 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 022bfed0 7c59a1fb ntdll!ZwWaitForMultipleObjects+0xb 01 022bff20 7c59a10e KERNEL32!WaitForMultipleObjectsEx+0xea 02 022bff38 741900e1 KERNEL32!WaitForMultipleObjects+0x17 03 022bff9c 6b56dccd aqueue!CConnMgr::GetNextConnection+0x1da 04 022bffb4 7c57b388 SMTPSVC!PERSIST_QUEUE::QueueThreadRoutine+0x23 05 022bffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 40 System Thread ID: 57c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0263fe24 77d5e6c4 ntdll!ZwReplyWaitReceivePortEx+0xb 01 0263ff74 77d4e0c0 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0263ff78 77d4e003 RPCRT4!RecvLotsaCallsWrapper+0x9 03 0263ffa8 77d4af16 RPCRT4!BaseCachedThreadRoutine+0x4f 04 0263ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 05 0263ffec 00000000 KERNEL32!BaseThreadStart+0x52 ***** Dump name is formatted as: PID-Timestamp.dmp Creating C:\iisstate\output\1296-1153781876.dmp - mini user dump ***** Closing open log file C:\iisstate\output\IISState-1296.log Tag: Lockdown IIS 5.1 only for localhost Tag: 385636
  - 5
    - IIS5 W2k Upgrade - help I have IIS5 running on W2Ks. I need to upgrade to IIS6 on W2k3s. Does anyone know of a migration tool that I could use? The iismt tool only works on w2k3s source (and I'm on w2k). TIA Al Tag: Lockdown IIS 5.1 only for localhost Tag: 385635
  - 6
    - Permissions I'm using IIS 5.1, with an ASP.Net web page. I'm trying to write an XML file to my C drive, but I keep getting the following error. System.UnauthorizedAccessException: Access to the path is denied. The program is as follows: Const strFileName As String = "c:\inetpub\wwwroot\WritingXMLExample\WriteXMLExample.xml" Dim objXmlTw As XmlTextWriter = New XmlTextWriter(strFileName, encoding.utf8) 'write root element objXmlTw.WriteStartElement("ct", "ContactDetails", "http://www.deltabis.com/contact") objXmlTw.WriteEndElement() 'end the xml document objXmlTw.WriteEndDocument() 'write to the file and close objXmlTw.Flush() objXmlTw.Close() How do I go about writing to my hard drive? I've already given 'write' permissions to all the folders and sub-directories in my Inetpub using IIS, so what else do I need to do? I'm using Windows XP Pro. Thanks Tag: Lockdown IIS 5.1 only for localhost Tag: 385632
  - 7
    - Multiple SSL Website, One Server Good Day All, I need assistance again today. I have one server that I would like to use to house all of my website services. I currently have my OWA website hosted on SSL port 443 working nicely and I have even changed the error message when they forget to type in the https:// and have it redirected to the proper website. Now I would like to tack on my intranet to this server and have it accessed outside via SSL. I created another certificate (I got one internal, don't need to spend big bucks just for these projects). I then add it to the new VD that I created for the intranet. I placed this new site on the SSL port 444, and its setup. Now when I try to browse to http://www.intranetaddress.com, I would get the 403.4 error, so I changed that as well to redirect to the proper address (https://www.intranetaddress.com:444/). Now when I do that I get an error. It says it cannot find the site. Should I have used the one certificate, or creating a new certificate is just as good? Can anyone point me in the direction of getting this working. I would like to still have my OWA working nicely on 443 and have my intranet now working 444. Thanks. Tag: Lockdown IIS 5.1 only for localhost Tag: 385631
  - 8
    - IIS 6 [WMI] - Programmatically Replace/Set Custom Error Files I found an example of how to do this in IIS 5 & ADSI but I need to accomplish it with WMI and I can not find any documentation for the ADSI GetEX method. The WMI vitual directory class does not have a GetEX method. Thanks! Dim HttpError, NewErrors, i NewErrors = objWebVirtualDir.GetEx("HttpErrors") MsgBox CStr(UBound(NewErrors)) For i = 0 To UBound(NewErrors) HttpError = Split(NewErrors(i), ",") If (HttpError(0) = "401" And HttpError(1) = "1") Then NewErrors(i) = "401,1,FILE," & BaseSitePath & "\401-1.htm" Exit For End If Next Const ADS_PROPERTY_UPDATE = 2 objWebVirtualDir.PutEx ADS_PROPERTY_UPDATE, "HttpErrors", NewErrors objWebVirtualDir.SetInfo ' Write info back to Metabase Tag: Lockdown IIS 5.1 only for localhost Tag: 385628
  - 9
    - Problems with IIS Migration and Scripts Hey everyone, here is my situation: I have a old server that I am gtting rid of and I am migrating the information over to a new server. I used Microsofts IIS 6.0 Migration tool to migrate over the Default web site that we run off of the old server. Everything copied over fine, I set the Web extenstion permissions the same as the old sever but the script that is supposed to run when site is accessed won't run. I get the IE Page cannot be displayed error. I have checked every setting I can think of and they are the same on the new server. My scripts are in the Scripts folder in the Inetpub folder, standard directories. Is there something I am missing? The script is a .dll file THanks for any help that you can give Tag: Lockdown IIS 5.1 only for localhost Tag: 385626
  - 10
    - PFX Exporting Help Please 'm writing a VBScript that intalls certificates programmatically. I also need to export the .pfx file. I have found two different methods to do this, but can't seem to find examples of either one in vbscript. I have found the capicom.certificate.save method, and the pfxexportcertstore method. If anyone could provide a small sample of code that'd be wonderful. Thanks in advance. Tag: Lockdown IIS 5.1 only for localhost Tag: 385624
  - 11
    - Setting up SMTP to use with SQL 2005 Database Mail (reposted from the smtp_nntp group which doesn't get much traffic) My goal is to send notification emails to myself/coworkers from SQL Server 2005 Database Mail. At this point there will not be any incoming mail activity on this server. It's ok with me if I send email as myself rather than a local account specifically for the SQL Server. I'm using W2003 Server Standard and SQL2005 Standard. IIS and Pop3 are installed but not configured. I'm at a university and part of an Active Directory domain. Computer name is like MyServer.MyDomain.University.edu. The University has an SMTP server: smtp.university.edu. I'm clueless about all of this. I don't know whether I need SMTP running on my server or just the default SMTP Virtual Server in order to send mail via the university's SMTP, or whether I should just be my own mail server. I've read Kristofer Gafvert's article at www.ilopia.com . Most likely my network admin and the guys who own the university's SMTP server have no experience with SQL2005. Before/if I need to get them involved I'd like to understand as much as possible about the whole situation. Using only the default SMTP server I was able to use SQL 2005 Database Mail to a private email server I have access to, but it would only accept mail to an address on that server. I assume that means I had set up the SQL Database Mail correctly. Do I need to run a POP3/SMTP server on my machine? If so, in the POP3 snap-in I see "Connect to another Server" at the POP3 Service level and "New Domain" at the MyServer level of the tree. Do I do anything with these? In the Default SMTP Virtual Service Properties, General tab: Do I use "All Unassigned" or my IP? Access tab: The article covers these settings. Delivery: Outbound Security - what goes there? Advanced delivery: Do I need to masquerade as University.edu to use the University's SMTP server? Where do I start? Thanks in advance for helping me. -- Cindy Winegarden MCSD, Microsoft Most Valuable Professional cindy@cindywinegarden.com Tag: Lockdown IIS 5.1 only for localhost Tag: 385619
  - 12
    - ASP Sessions time out too early I have some ASP scripts which use sessions. In the scripts, I've set the Session.Timeout = 360 and in IIS, I've gone into the application pool and set every possible timeout to 360 minutes (or as high as I can set it in seconds). My problem is that people are still being kicked off the application. Many people's sessions seem to timeout in only a few minutes. Others however seem to last an hour or two (but not the full 360 minutes). Is there some way I can set this on IIS? Am I doing something wrong? Thanks in advance, -Tom Tag: Lockdown IIS 5.1 only for localhost Tag: 385618
  - 13
    - No connection could be made because the target machine actively refused it I have a website that consumes a webservice. Both of them are in the Default Website folder. I can execute the service without any problem when I go to the test page http://localhost/Service.asmx. When I try to consume that webservice from the website I get the error shown bellow. In my web.config I have: <authentication mode="Windows"/> <identity impersonate="true" userName="auser" password="apwd"/> IIS is configured as "Integrated Windows authentication" and "Enable anonymous access" is disabled. System.Security.Principal.WindowsIdentity.GetCurrent().Name returns "auser". I am struggling with that for a LONG time so any help is greatly appreciated. Thanks Error: "No connection could be made because the target machine actively refused it Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. Exception Details: System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it Line 110: object[] results = this.Invoke("MyWebservice", new object[] { Source File: c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\26676eb7\92c7e946\App_WebReferences.rglqbs34.0.cs Line: 110 " Tag: Lockdown IIS 5.1 only for localhost Tag: 385615
  - 14
    - similar data, code, tables, stored procedures - but production app slower than development Hello all I'm new to my role as DB admin / support person for an ASP application with SQL Server 2000 backend. The code is the same on production and development, the data is similar too (at least in orders of magnitude). Yet a coupla pages load about twice as fast on development than in production. I've noticed that the development SQL Server has 4 processors compared to 2 for the developemt server and about 3775MB OS Memory as compared to 2048 MB on production. Another potential problem - on both servers, my page load uses a stored procedure that does returns the results of a JOIN with 5 tables - On Production, 2 tables have about 20,000 records, and one has 400,000. On Development, these same 2 tables have about 15,000 records, and the big table has 285,000. What does it sound like - is it a data problem, because of the difference in number of records? Or would increasing the memory size or # of processors help my code run faster? Need to verify this before I go to my VP and suggest any course of action. Thanks in advance! Tag: Lockdown IIS 5.1 only for localhost Tag: 385612
  - 15
    - Active Components Not Loading Hi, I've been setting up a new windows 2003 server with IIS 6.0 and CFMX 7.0. We use Activedit (WYSIWYG editor) on some of our sites but it will not load with this new server. I have tried FCKEditor as well and that won't load eit her. The client machines, accessing via internet, can see these same active component which are hosted by the old server but not the new. I downloaded the latest demo of activedit to make sure our version it wasn't obsolete, but I get the same problem http://63.134.216.39/activedit/example.cfm I SHOULD get a window similar to as shown on the following page http://www.activsoftware.com/activedit/demo/edit.cfm I can only imagine I need to somehow allow active components to run via the server, webservice extensions, security? I don't know. If anyone can help, it will be much appreciated. thanks, Dan Tag: Lockdown IIS 5.1 only for localhost Tag: 385610
  - 16
    - replicating IIS All, We have IIS running on a couple of webservers. I would like to replicate the IIS settings (websites and FTP sites) to other servers for fault tolerance and load ballancing (we have an LB in front of the webservers)is there an application or utility to facilitate this?? We have a lot of FTP sites and websites, it would be a lot of work to do this manually. TIA, Bryan Tag: Lockdown IIS 5.1 only for localhost Tag: 385609
  - 17
    - Why am I getting login prompts? Hi all, I have IIS 6 running on Wink2k3. i have anoymous access enabled, however some users are getting prompts to enter a username, password and domain before being allowed access. The webserver is for the local intranet. Im stumped as to why this is happening. Any general pointers or guidance would be appreciated. Kind regards Taz Tag: Lockdown IIS 5.1 only for localhost Tag: 385607
  - 18
    - Can't open visio file in Internet Explorer - IIS Security problem? In Microsoft Internet Explorer, when I click a hyperlink to a Visio drawing, I receive a 'File download box'. In case I click open I starts downloading but stopps suddenly. Then I receive the following error message: The page cannot be displayed. The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings. In case I click on 'save' on the 'file download box' and on Open after saving it to my hard drive it works fine. Problem is just for Visio .vsd. - ,doc .pdf, .ppt are working fine. I have an other server with the same file and it works fine (older installation). Looks like a server security settings problem? Any idea? Thanks! Tag: Lockdown IIS 5.1 only for localhost Tag: 385604
  - 19
    - IIS Server On Intranet - Can't access from other computers Hello Everyone, I set up an IIS server on my desktop, and am on an intranet. I'm running Windows XP SP2, and IIS5.1. When I go to http://localhost/ or http://da626630/ (my computer name) I am able to load my site. But from other computers on the intranet I can't access it. (it brings up the 'The page cannot be displayed' message). It's running on port 80. Also, before I installed my IIS server I had an apache server running (which was port 80) which could be accessed from any computer on the lan. I changed that to port 8080, and other computers are still able to access it by http://da626630:8080/. So I know it's not a firewall problem (I also have my firewall set to off) I've tried playing with the IIS security settings but haven't had any luck, right now under Authentication I only have the Anonymous Authentication box checked. If anyone has any suggestions I would appreciate it. Tag: Lockdown IIS 5.1 only for localhost Tag: 385603
  - 20
    - adsutil.vbs and APPCREATE*PROC with IIS 6.0 Hi, while testing sample projects of Indigo, I found setup batches using adsutil.vbs. I find it very handy but I'm missing what APPCREATEPOOLPROC, APPCREATEINPROC and APPCREATEOUTPROC commands exactly do. I understand the IN, OUT, POOL process hosting, of course. But how APPCREATE*PROC corresponds with settings in IIS 6.0 manager ? An application is assigned to a pool there and the pool has some proces recycling settings. I tried to apply different APPCREATE*PROC without obvious difference in result. There is not much documentation for the adsutil tool. Can it be used with IIS 6.0 ? Is there a better way of automating web services setup ? Thanks fro explanation, Jan Tag: Lockdown IIS 5.1 only for localhost Tag: 385602
  - 21
    - localhost stopped working! (IIS 5.1) Last week I had a .net 2.0 webiste running locally on my machine perfectly. I could access it locally by hitting http://localhost/ and others could hit it just as well, using http://computername/. Then came day when I thought it would be a good idea to download some software for a Sprint wireless card (bad move), and everything went crazy. Now, I can't hit localhost without getting an error (below), although I can hit http://computername/ (from the actual machine) and it works fine. When other's try to hit http://computername/ they have the same issue I have when I try to hit localhost (again, below). I've unistalled the software that caused this issue, reinstalled/rebuilt the Enterprise Library .dll's that it's erroring on, and adjusted my computername/ASPNET account to be an Administrator on my machine all with no luck! Does anyone have any suggestions?!?!?!? Error --> Key not valid for use in specified state. Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. Exception Details: System.Security.Cryptography.CryptographicException: Key not valid for use in specified state. Tag: Lockdown IIS 5.1 only for localhost Tag: 385597
  - 22
    - tutorial for iis Hai, I need to study about, how the iis is working. Bec., I have assigned a task using iis. So, anybody having tutorial or links for that. pl. let me know. thanks in advance. Regards, Raju. Tag: Lockdown IIS 5.1 only for localhost Tag: 385596
  - 23
    - Windows 2000 Server, ASP 1.1 and ASP 2.0 Hi, I currently run a Windows 2000 Server machine with a number of ASP 1.1 websites running in the IIS. I've just started to develop ASP 2.0 websites but I'm getting problems when trying to view both ASP 1.1 and ASP 2.0 web pages at the same time. Is there any features within 2000 Server to view both sites at the same time, like the application pool within Server 2003? Or is there another way round this? Thanks in advance Simon Tag: Lockdown IIS 5.1 only for localhost Tag: 385595
  - 24
    - java.security.AccessControlException hello all, we are facing a quite mysterious problem: web applications with self programmed applet framework are no more running on 2 of 4 webservers. client uses sun java v1.5.0_0x, 3 servers are running W2k3 with IIS6 and one is running W2K with IIS5. The latter one and one of the W2k3 are fine the two others (one of them newly setup) don't. this is the error message: java.lang.Exception: java.security.AccessControlException: access denied (java.util.PropertyPermission http.strictPostRedirect read) and occurs when calling a class from a jar archive. IIS logged a 302, so we checked 'Enable Parent Paths' in the web's configuration on the IIS. That changed the error to: java.lang.Exception: java.security.AccessControlException: access denied (java.net.SocketPermission localhost:8888 connect,resolve) Changing java.policy made no difference. Further research took as to the suggestion that their might be a session problem. Tests without cache and proxy made no difference at all. Checking DNS names when running the code showed no anomalies. So we transferred the settings from a server that worked to another server that doesn't and also setup a new server but nothing worked at all. I am very astonished that the server might interfere with client script but that's what I can see. So I will be very thankful to any hint in this case. If you have hints how to configure the server or which software or setting might interfere I can check all these. What we cannot do is reprogramming the java applets because they are working fine in our production environment. thanks in advance Michael Richter Tag: Lockdown IIS 5.1 only for localhost Tag: 385591
  - 25
    - Cannot view web on local network I installed the Windows component IIS admin with Server Extensions on a Windows XP SP2 box. I created a web site and I can view this web site from the local box. Actually I just threw in a default.asp page ito the root directory and then viewed it in the local browser as http://box1 However, when I type in the http://box1 URL into the browser on another machine (box2) on my local network, I get "Cannot find server or DNS Error" However, from box2 I can ping box1 by IP address and machine name; I just cannnot access the default web page on box1 from a browser in box2. In my web security settings on box1 I have the default anonymous (IUSR_myMachineName) and Windows Intergrated Authentication selected. Does anyone know why remote machines cannot access the website on this XP box? Tag: Lockdown IIS 5.1 only for localhost Tag: 385583

Is there any way to setup Windows XP IIS 5.1 so that only localhost requests
are allowed?

Re: Lockdown IIS 5.1 only for localhost by Kristofer

Kristofer
Wed Jul 26 13:12:59 CDT 2006

Install a firewall...

You could also set IIS to listen on 127.0.0.1 instead of "All unassigned",
but i would recommend to use a firewall instead as it gives you better
security and should be on every machine.

--
Regards,
Kristofer Gafvert
http://www.gafvert.info/iis/ - IIS Related Info

Jason Camp wrote:

>Is there any way to setup Windows XP IIS 5.1 so that only localhost
>requests
>are allowed?

Top

Re: Lockdown IIS 5.1 only for localhost by JasonCamp

JasonCamp
Wed Jul 26 13:19:01 CDT 2006

How can you set IIS to listen only on 127.0.0.1 as it seems this option is
disabled for XP.

"Kristofer Gafvert" wrote:

> Install a firewall...
>
> You could also set IIS to listen on 127.0.0.1 instead of &