eventid 36 & 10001

eventid 36 & 10001

am 17.07.2007 00:41:50 von Tin

Hello, i'm not able to run .asp on my WindowsXP IIS. I get these events in
System log:

The server failed to load application '/LM/W3SVC/1/Root/webadmin'. The
error was 'General access denied error

Unable to start a DCOM Server: {99169CB1-A707-11D0-989D-00C04FD919C1} as
../IWAM_COMPUTERNAME. The error:
"Access is denied. "
Happened while starting this command:
C:\WINDOWS\system32\dllhost.exe
/Processid:{3D14228D-FBE1-11D0-995D-00C04FD919C1}

The Launch and Activate persmission for IIS WAMREG admin Service seems to to
be fine compare to KB321892 from Microsoft.

What else can I look for?

Thanks,

Re: eventid 36 & 10001

am 17.07.2007 05:15:32 von Steve Schofield

Look at using Filemon from Sysinternals to see what is getting 'access
denied'.

http://www.microsoft.com/technet/sysinternals/FileAndDisk/Fi lemon.mspx

--

Best regards,

Steve Schofield
Windows Server MVP - IIS
http://weblogs.asp.net/steveschofield

http://www.IISLogs.com
Log archival solution.
Install, Configure, Forget

"tin" wrote in message
news:uRVJBq$xHHA.4264@TK2MSFTNGP05.phx.gbl...
> Hello, i'm not able to run .asp on my WindowsXP IIS. I get these events in
> System log:
>
> The server failed to load application '/LM/W3SVC/1/Root/webadmin'. The
> error was 'General access denied error
>
> Unable to start a DCOM Server: {99169CB1-A707-11D0-989D-00C04FD919C1} as
> ./IWAM_COMPUTERNAME. The error:
> "Access is denied. "
> Happened while starting this command:
> C:\WINDOWS\system32\dllhost.exe
> /Processid:{3D14228D-FBE1-11D0-995D-00C04FD919C1}
>
> The Launch and Activate persmission for IIS WAMREG admin Service seems to
> to be fine compare to KB321892 from Microsoft.
>
> What else can I look for?
>
> Thanks,
>

Re: eventid 36 & 10001

am 17.07.2007 13:03:35 von wjzhang

Hi Tin,

Below are the detailed steps to use filemon for I/O trace.

http://www.sysinternals.com/Utilities/Filemon.html

1) Launch filemon,stop capture and click filter on its toolbar. Remove *
and input dllhost.exe as the included string.

2) Change font if necessary(need restart filemon).

3) Start capture.

4) Try to login to the web site to reproduce the access denied error.

5) Stop capture and save as the log.

Generally we should be able to find some access denied errors in the log
which points out the root cause. Please paste the trace in your thread or
send the filemon.log to me: wjzhang@online.microsoft.com (please remove
online.). I will help review it.

Another approach you can try is to check/reset IWAM account's permission
per the following article:

How to set required NTFS permissions and user rights for an IIS 5.0 Web
server
http://support.microsoft.com/?id=271071

I look forward to your update. Have a nice day.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

==================================================

Get notification to my posts through email? Please refer to:
http://msdn.microsoft.com/subscriptions/managednewsgroups/de fault.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at:

http://msdn.microsoft.com/subscriptions/support/default.aspx .

==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

Re: eventid 36 & 10001

am 17.07.2007 18:09:28 von Tin

Here's what I got

Process Request Path
Result Attribute
svchost.exe:xxxx OPEN C:\windows\system32\dllhost.exe Access
Denied computername\IWAM_Computername


""WenJun Zhang[msft]"" wrote in message
news:AJLtoIGyHHA.4200@TK2MSFTNGHUB02.phx.gbl...
> Hi Tin,
>
> Below are the detailed steps to use filemon for I/O trace.
>
> http://www.sysinternals.com/Utilities/Filemon.html
>
> 1) Launch filemon,stop capture and click filter on its toolbar. Remove *
> and input dllhost.exe as the included string.
>
> 2) Change font if necessary(need restart filemon).
>
> 3) Start capture.
>
> 4) Try to login to the web site to reproduce the access denied error.
>
> 5) Stop capture and save as the log.
>
> Generally we should be able to find some access denied errors in the log
> which points out the root cause. Please paste the trace in your thread or
> send the filemon.log to me: wjzhang@online.microsoft.com (please remove
> online.). I will help review it.
>
> Another approach you can try is to check/reset IWAM account's permission
> per the following article:
>
> How to set required NTFS permissions and user rights for an IIS 5.0 Web
> server
> http://support.microsoft.com/?id=271071
>
> I look forward to your update. Have a nice day.
>
> Sincerely,
>
> WenJun Zhang
>
> Microsoft Online Community Support
>
> ==================================================
>
> Get notification to my posts through email? Please refer to:
> http://msdn.microsoft.com/subscriptions/managednewsgroups/de fault.aspx#notif
> ications.
>
> Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
> where an initial response from the community or a Microsoft Support
> Engineer within 1 business day is acceptable. Please note that each follow
> up response may take approximately 2 business days as the support
> professional working with you may need further investigation to reach the
> most efficient resolution. The offering is not appropriate for situations
> that require urgent, real-time or phone-based interactions or complex
> project analysis and dump analysis issues. Issues of this nature are best
> handled working with a dedicated Microsoft Support Engineer by contacting
> Microsoft Customer Support Services (CSS) at:
>
> http://msdn.microsoft.com/subscriptions/support/default.aspx .
>
> ==================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>

Re: eventid 36 & 10001

am 17.07.2007 18:13:27 von Tin

I've figured out.

I just needed to add both IUSR_COMPUTERNAME & IWAM_COMPUTERNAME to the Users
group.

Thanks WenJun & Steve for your help!


"tin" wrote in message
news:OWgJbzIyHHA.4260@TK2MSFTNGP06.phx.gbl...
> Here's what I got
>
> Process Request Path Result Attribute
> svchost.exe:xxxx OPEN C:\windows\system32\dllhost.exe Access
> Denied computername\IWAM_Computername
>
>
> ""WenJun Zhang[msft]"" wrote in message
> news:AJLtoIGyHHA.4200@TK2MSFTNGHUB02.phx.gbl...
>> Hi Tin,
>>
>> Below are the detailed steps to use filemon for I/O trace.
>>
>> http://www.sysinternals.com/Utilities/Filemon.html
>>
>> 1) Launch filemon,stop capture and click filter on its toolbar. Remove *
>> and input dllhost.exe as the included string.
>>
>> 2) Change font if necessary(need restart filemon).
>>
>> 3) Start capture.
>>
>> 4) Try to login to the web site to reproduce the access denied error.
>>
>> 5) Stop capture and save as the log.
>>
>> Generally we should be able to find some access denied errors in the log
>> which points out the root cause. Please paste the trace in your thread or
>> send the filemon.log to me: wjzhang@online.microsoft.com (please remove
>> online.). I will help review it.
>>
>> Another approach you can try is to check/reset IWAM account's permission
>> per the following article:
>>
>> How to set required NTFS permissions and user rights for an IIS 5.0 Web
>> server
>> http://support.microsoft.com/?id=271071
>>
>> I look forward to your update. Have a nice day.
>>
>> Sincerely,
>>
>> WenJun Zhang
>>
>> Microsoft Online Community Support
>>
>> ==================================================
>>
>> Get notification to my posts through email? Please refer to:
>> http://msdn.microsoft.com/subscriptions/managednewsgroups/de fault.aspx#notif
>> ications.
>>
>> Note: The MSDN Managed Newsgroup support offering is for non-urgent
>> issues
>> where an initial response from the community or a Microsoft Support
>> Engineer within 1 business day is acceptable. Please note that each
>> follow
>> up response may take approximately 2 business days as the support
>> professional working with you may need further investigation to reach the
>> most efficient resolution. The offering is not appropriate for situations
>> that require urgent, real-time or phone-based interactions or complex
>> project analysis and dump analysis issues. Issues of this nature are best
>> handled working with a dedicated Microsoft Support Engineer by contacting
>> Microsoft Customer Support Services (CSS) at:
>>
>> http://msdn.microsoft.com/subscriptions/support/default.aspx .
>>
>> ==================================================
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>
>

Re: eventid 36 & 10001

am 18.07.2007 05:56:29 von wjzhang

You are welcome Tin.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

==================================================

Get notification to my posts through email? Please refer to:
http://msdn.microsoft.com/subscriptions/managednewsgroups/de fault.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at:

http://msdn.microsoft.com/subscriptions/support/default.aspx .

==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.