RE: ASP and WMI

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: StephenMcC (StephenMcC_at_discussions.microsoft.com)
Date: 10/15/04 

Date: Fri, 15 Oct 2004 07:03:27 -0700

Hi,

I'm wondering if ur using COM to call the script or if your trying to call
them from the AP page. If ur using a COM dll in COM+, the failure of the app
when the user logs of the server sounds as thought you might be using the
wrong ientity for the application, as if its set to 'interactive user' (ie:
currently logged on user) then once the user loggs of the server the COM+ app
spins down and no longer accessible.

If ur not using COM but pure ASP then it might be an idea to spawn the
script via a COM call, ie VB can be used to spawn these process via a COM+
component, but more importantly you can apply required security/identity to
the COM app, adding the required user/group with desired permissions, which
means any process spawned by the dll would be under the identity of this
user(s).

I don't think it's possible to spawn process like this from ASP, at least in
the default user (iusr_) as they wont have access outside of the webroot, the
script will try to spawn but you may get access denied errors etc, unless u
chage the IIS/ASP identity to another user, other then iusr_, with the
desired permissions, which is a bad idea!

One other hint is to use filemon and maybe regmon
(http://www.systeminternals.com/) to try and get to the bottom of any errors
as certain users might be denied access to certain resources, these utilites
may be handy to spot these type of errors

Stephen.

.

"Plamen" wrote:

> Hi everybody,
> I am stuck with the following problem:
> I need to manage users on two w2000 servers simultaneously via a secured ASP
> web application on one of them. The asp page requires you to enter your
> credentials that can be used to impersonate any future work. I have this
> working but with a weird effect.
> Since it turned out that you cannot use WScript to run a remote script
> inside an ASP app, I had to put all of it into a script file, and spawn a
> process thru WMI that calls wscritp some_script.vbs. But here is the catch -
> I need to be logged in locally on the server that runs IIS with the same user
> id and password in order WMI to actually spawn the process. If I log off, WMI
> returns 8 - unknow error. I tried tons of things including:
> wscript //B
> cscrip
> Wscript.Shell
> The goal is to start a process from a ASP page, using the credentials of the
> AUTH_USER regardless of whether a user is logged in locally and without
> installing any third party components.
> I appreciate any help.

Relevant Pages

  • IIS 6 shell
    ... The server is Running Windows Server 2003 and IIS 6 fully patched, ... in the application we have an upload form to upload pictures to the ... javascript support is also poor and the script did not run properly ... (except asp!) ...
    (Pen-Test)
  • RE: executing scripts within a web browser control under the syste
    ... server hosting the ASP pages as a trusted site for all users on the machine ... There are no ActiveX controls on the ASP page ... Write a test.js script file in local driver D:\. ... launches a console process under System Account. ...
    (microsoft.public.dotnet.general)
  • Re: Example script to view media server info
    ... What exactly is happening is that the account under which ... the .ASP page runs does not have access to do ... is dependent on DCOM permission set on the server object ... >> Here is a sample script that will print the Peak ...
    (microsoft.public.windowsmedia.server)
  • RE: ASP Pages
    ... There is another way to encode your ASP scripts.. ... Microsoft Gives a Script Encoder: ... Then register the dll into your server registry. ... >> The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
    (Security-Basics)
  • Re: ASP Pages
    ... It certainly doesn't hurt to put any files you can outside of the web root. ... Unfortunately anything that allows other users, or a poorly written script ... Server administration, security, programming, consulting. ... Subject: ASP Pages ...
    (Security-Basics)