Access Denied!

From: Bart (bart_at_spamonly.com)
Date: 02/12/05 

Date: Sat, 12 Feb 2005 12:11:48 +0100

Hi,

I am developing an IIS SMTP event sink. This is basically a COM object
integrating with IIS SMTP. This COM object uses another out-of-process
executable COM server located on the same machine. The problem is that
CoCreateInstance fail when creating the object with Access Denied
(0X80070005).

More Details:
- The problem only seems to happen on Windows 2003/IIS6 (tested on two
machines).

- Application was also tested on Windows 2000//IIS5 (tested on two machines)
and there was no problem.

- Using GetUserName() just before creating the object I confimed that the
user is SYSTEM

- The out-of-proc server is configured using as identity 'The launching
User'. If I change this to 'This User' and specify an admin account the
problem is "solved". Still I would like to avoid this "solution" to avoid
having to get admin credentials for this application.

- I did try to change the Launch Permissions and Access Permissions to set
SYSTEM, Everyone, IWAM_xxx, IUSR_xxx. No effect same problem.

- I also wrote a little application to run the command prompt under Local
System. From here I launched a test application which accesses this
out-of-process server. This worked fine!

So As you can see I tried many things but still cannot understand how to get
this to work.
Can anyone help me? Any tips will be appreciated even if you don't know the
solution.

thanks,

Bart

Relevant Pages

  • Re: smarthost // ndr // wrong statuscode
    ... don't believe Microsoft treats the IIS SMTP server as much more than a gimme ... This is thus an smtp error generated by the iis smtp virtual ... where I wan't to have a 'relaying not allowed' status returned. ... >>> Was hoping someone could help me out with a smarthost configuration. ...
    (microsoft.public.exchange.connectivity)
  • Re: Messages with encrypted Zip files are rejected
    ... Diagnostic-Code: smtp;550 5.5.0 Mail rejected for container policy reasons. ... If IIS is acting as a relay server then you should see the 550 in the ... If you're not seeing that then the Exchange ... server isn't rejecting them message and i doubt that the IIS SMTP ...
    (microsoft.public.exchange.admin)
  • Re: Block messages based on email list.
    ... aware of any MS product although they recently purchased some 3rd party mail ... We used to be a larger company and the amount of SPAM directed at 1) actual working email addresses, 2) removed email addresses and 3) made up email addresses, is unbeleivable. ... We currently do not have IIS SMTP running as we have the Symantec product listening on port 25 and relaying all mail for our 4 domains to the Exchange server. ...
    (microsoft.public.inetserver.iis.smtp_nntp)
  • Re: smarthost // ndr // wrong statuscode
    ... The win2k server is configured to relay our domain names to the internal ... This is thus an smtp error generated by the iis smtp virtual ... >> Was hoping someone could help me out with a smarthost configuration. ...
    (microsoft.public.exchange.connectivity)
  • Re: SMTP relay based on username
    ... I have a users called user1@xxxxxxxx on Unix box. ... Rest of my users are on Exchange. ... this is a question outside Exchange because you want the IIS SMTP ... server in the DMZ to send to the UNIX box rather than the Exchange ...
    (microsoft.public.exchange.admin)