IIS Server Security, Access deny from Server.CreateObject("COM.ComClsGetSysInfo")

1. IIS hosting web service which access a COM server - Access Denied

Hi,

I have an XML web service which exports a method that allows consumers
of
the service to update a backend system using an out of process com
server.
The only way I can get this to work is to set the Anonymous access user
to
administrator or another high access user which is obviously not ideal.
I
have tried giving the standard IUSR_PCNAME account access to the
directory
where the COM server is located and access to any registry keys it
might use
but all that happens is that the consuming user gets an Access Denied
message.

After trawling the net I have also tried adding a COM+ application and
adding the required interfaces to it and this had no positive affect.
I'm
really stuck and I need to know what rights I need to give to the
anonymous
user to enable the web service to access the COM server.

Thanks for any help

Aidan Lawless

2. ASP 0178 server.createobject access denied

3. Access denied when CreateObject in ASP.

When CreateObject in ASP I met the following error: Access denied.

The COM component is an EXE.
IIS 6 application isolation level is: Low (IIS Process)
Authentication is: Integrated Windows Authentication
I login as local administrator
DCOM configuration for this component, I granted IUSER_xxxx, IWAM_xxxx, 
ASP.NET, administrators, SYSTEM, INTERACTIVE priviledge to launch, active 
and access;  The user account to run the COM application is: "The launching 
user"

Since IIS isolation level is low, the ASP is running in inetinfo.exe process 
which is using LocalSystem account.  To me LocalSystem has administration 
priviledge, I am wondering why it can't instantiate the COM object at all.

I did two more tests:

test 1: When the IIS isolation level is changed to medium, the COM object 
can be created. At this time, the ASP credential is administrator (as I 
login)

test 2: I created a service run as LocalSystem, and I can create object in 
the service. (The COM executable is loaded automatically.)

Any idea why IIS low isolation level prevents ASP from creating the COM 
object? 

4. server.createobject("cdo.message") from asp is giving error Server.CreateObject Failed - ASP

5. remote com+ server.createobject failed

Hi,

Here's the situation: I have two W2K3 servers. One for running IIS
(websites) the other for running COM+. I created the com+ on the COM server,
expoprted it as proxy. Then, I ran the msi file on the webserver. The result
is: I get
Server object error 'ASP 0178 : 80070005'

Server.CreateObject Access Error

when trying to create object.

Here's the catch. While searching microsoft.com I've come accross a comment
where MS suggested to remove annoumous access and force login into the site.
I did.... Once logged in server.createoject worked.

Question is: How do I fix it so that I can announouse access?

Thanks in advance!

Alex

6. Need help: IIS7 and classic ASP with VB6 COM objects, constantly fails on "server.createobject"

7. Error 70/$46 with ASP/COM (access denied)

8. access denied using a dll that calls a com object - ASP