Hi,

I am running Windows XP prof + SP2, with IIS 5.1.
Our application needs to reload an asp page which creates DCOM objects
periodically. When the page hit rate is high enough (e.g., once per second),
RPC server(hosted by svchost) will have security token handle leak.
Technically it may not be a leak because after stopping the page access for
a long time, the handles are slowly released, but it would take a long time,
before that the handles can grow to over 70K and web access starts to fail.
The system may also become unstable when handle number is very high.

A simple sample page would be like:

<%@ Language=JavaScript %>
<%
var myServer = new ActiveXObject("MyServer.MyObject");
// not even calling any method, STA, FreeThreaded, all the same.
myServer = null;
%>
<HTML>
<BODY>
Test page
</BODY>
</HTML>

MyServer.MyObject is a DCOM object that is configured to allow
IUSR_<MachineName> to launch and execute it.

The handles will be released immediately if web server is stopped. So far
the only workaround I found is in the web site (or web application, if
applicable) Home Directory property page, sets the Application Protection
mode to low.

Does any one know how to elegantly solve the handle growth problem?
w3svc.dll version: 5.1.2600.2180
asp.dll version: 5.1.2600.2180
rpcss.dll version: 5.1.2600.2665

Thanks,
minghwa