RE: Queryinterface Error

From: Steven Cheng[MSFT] (v-schang_at_online.microsoft.com)
Date: 10/13/04 

Date: Wed, 13 Oct 2004 04:34:22 GMT

Hi Malcolm,

AS for the problem you described, it is likely due to security issue. Since
you mentioned that you can call the component from VB6 app correctly ,yes?
Have you tried create a simple winform .net application to call that
component to see whether it works? The winform application is runner udner
the current logon user account.
Also, what's your asp.net 's security setting in IIS and web.config?
IIS: Integrited windows ? Allow anonymous?

ASP.NET CONFIG: Windows authentication? impersonate= false?

By default , if we didn't use impersonate, asp.net will run under the
default process account( machine\aspnet on 2k or xp , networkservice on 2k3
IIS6). If using impersonate, it use the account passed from the IIS. So we
need to make sure those account has the sufficient permissions.

Thanks.

Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

Relevant Pages

  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... On the IIS directory security tab, anonymous access is disabled, digest ... authentication is disabled, integrated authentication is disabled and basic ... account created has full permissions for the folder and the file that's in it. ...
    (microsoft.public.inetserver.iis.security)
  • Re: DCOM calls fails - access denied
    ... That's exactly how I understood the ASP.NET security. ... But why does one configuration work but not the other? ... should get the token from IIS. ... If you set there a domain account, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Out of Process execution and .NET
    ... "charlie" expressed in the message known ... I will impersonate a Domain ... security weakness of the highest sort. ... than a blanket Domain Admin account), ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to use WindowsPrincipal properly??
    ... > If you want to check if the user is in the local computers security group ... > used by the general public you have to use Basic Authentication of course. ... You can logon a set account ... > WindowsIndentity which is then used to Impersonate. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Cannot use usernameForCertificateSecurity with IIS application pool custom account
    ... other account does not. ... It seems to be a bug or problem in one of the CryptoAPI functions. ... In IIS 5.0/6.0 to process the PFX file I use the CryptoAPI function ... The security context token cannot be retrieved ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
Loading