2003 domain ADSI IIS Member server permission denied

Hi,
I can't seem to talk to the DC through ADSI anymore. See code below.

<%
dim User
Set User = GetObject("WinNT://domain/NathanH,user")
%>

Anonyms is turned off, using Intergrated. Am logged on as a Domain Admin.
This code works in a 2k domain but not in 2k3. The Error is:

Permission denied: 'GetObject'

Throws the same error whether the IIS member server is 2k or 2k3.
The code works fine if the IIS server is a domain controller. However does
not work on a member server in a 2k3 domain.
I have allowed all web service extensions for testing purposes in IIS6.
It must be a 2003 AD permission thing but the logged on user is a member of
the Domain Admins.
I got nothing with this one.

Any help appreciated.

Nathan

Ken
Sun Aug 07 22:34:37 CDT 2005

Sounds like a double-hop authentication issue if you ask me.

If you uncheck IWA, and check Basic, does everything start working? If so,
then we need to configure delegation properly in order for IWA to work.

Cheers
Ken

--
IIS Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com


"Nathan Henderson" <nathanh@mtannancc.nsw.edu.au> wrote in message
news:OGEf8y6mFHA.3900@TK2MSFTNGP09.phx.gbl...
: Hi,
: I can't seem to talk to the DC through ADSI anymore. See code below.
:
: <%
: dim User
: Set User = GetObject("WinNT://domain/NathanH,user")
: %>
:
: Anonyms is turned off, using Intergrated. Am logged on as a Domain Admin.
: This code works in a 2k domain but not in 2k3. The Error is:
:
: Permission denied: 'GetObject'
:
: Throws the same error whether the IIS member server is 2k or 2k3.
: The code works fine if the IIS server is a domain controller. However does
: not work on a member server in a 2k3 domain.
: I have allowed all web service extensions for testing purposes in IIS6.
: It must be a 2003 AD permission thing but the logged on user is a member
of
: the Domain Admins.
: I got nothing with this one.
:
: Any help appreciated.
:
: Nathan
:
:
:
:
: