IIS Configuration and Win32::OLE

Hello,

I am not sure that this is a Perl problem, but I've been trying
everything else for two weeks, maybe someone here can help.

We had a Windows 2003 server running IIS, with an AS Perl CGI
website. Then the server crashed. I have reinstalled the website on a
different Win2003 server, and everything works great -- except for one
thing.

One CGI program is a "download spreadsheet" link. It invokes Excel,
via OLE, and creates a chart to be downloaded. It does not work. When
it runs, Win32::OLE->new fails. Win32::OLE->LastError reports:
Win32::OLE(0.1709) error 0x80070005: "Access is denied". The specific
call is:

my $excel = Win32::OLE->new('Excel.Application', 'Quit');

The program runs fine from the command line, whether I run it as a
privileged user or not. IIS itself runs as "Local System"; I haven't
figured out how to run a program at the command line as that user. IIS
does have Excel MIME types configured. Excel is installed on the
server, for all users.

My *guess* is that this is some stupid simple configuration or
permission problem, but I cannot compare things to the old server,
because it's completely unusable. I have no idea what access is being
denied, or what permission to grant to whom. Any help is greatly
appreciated, thanks.


Eric J. Roode
Senior Enterprise Developer
Barrack, Rodos & Bacine
(215) 963-0600



_______________________________________________
ActivePerl mailing list
ActivePerl@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

RE: IIS Configuration and Win32::OLE

Search the list, I think Jan posted something about this a couple of weeks ago.

-----Original Message-----
From: activeperl-bounces@listserv.ActiveState.com [mailto:activeperl-bounces@listserv.ActiveState.com] On Behalf Of Roode, Eric
Sent: Wednesday, February 03, 2010 1:21 PM
To: activeperl@listserv.ActiveState.com
Subject: IIS Configuration and Win32::OLE

Hello,

I am not sure that this is a Perl problem, but I've been trying
everything else for two weeks, maybe someone here can help.

We had a Windows 2003 server running IIS, with an AS Perl CGI
website. Then the server crashed. I have reinstalled the website on a
different Win2003 server, and everything works great -- except for one
thing.

One CGI program is a "download spreadsheet" link. It invokes Excel,
via OLE, and creates a chart to be downloaded. It does not work. When
it runs, Win32::OLE->new fails. Win32::OLE->LastError reports:
Win32::OLE(0.1709) error 0x80070005: "Access is denied". The specific
call is:

my $excel = Win32::OLE->new('Excel.Application', 'Quit');

The program runs fine from the command line, whether I run it as a
privileged user or not. IIS itself runs as "Local System"; I haven't
figured out how to run a program at the command line as that user. IIS
does have Excel MIME types configured. Excel is installed on the
server, for all users.

My *guess* is that this is some stupid simple configuration or
permission problem, but I cannot compare things to the old server,
because it's completely unusable. I have no idea what access is being
denied, or what permission to grant to whom. Any help is greatly
appreciated, thanks.


Eric J. Roode
Senior Enterprise Developer
Barrack, Rodos & Bacine
(215) 963-0600



_______________________________________________
ActivePerl mailing list
ActivePerl@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
_______________________________________________
ActivePerl mailing list
ActivePerl@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

Re: IIS Configuration and Win32::OLE

Hi,

--------------------------------------------------
From: "Roode, Eric"
Sent: Wednesday, February 03, 2010 1:20 PM
To:
Subject: IIS Configuration and Win32::OLE

> One CGI program is a "download spreadsheet" link. It invokes Excel,
> via OLE, and creates a chart to be downloaded. It does not work. When
> it runs, Win32::OLE->new fails. Win32::OLE->LastError reports:
> Win32::OLE(0.1709) error 0x80070005: "Access is denied". The specific
> call is:
>
> my $excel = Win32::OLE->new('Excel.Application', 'Quit');
>


To run your program at command line as another user, you can use "runas" on
command line. Type "runas" alone to see usage.

About your COM/OLE permissions, you can configure them using DCOMCNFG (type
it at command prompt or on the "run" menu on start menu). Here's a URL that
can be helpful:

http://j-integra.intrinsyc.com/support/com/doc/remoteaccess. html

HTH

Paco Zarabozo





_______________________________________________
ActivePerl mailing list
ActivePerl@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

RE: IIS Configuration and Win32::OLE

Are you running that script as the default IIS user? By default the IIS default user (IUSR_XXX) gets deny ACLs set on many folders, including, IIRC, Program Files.

-----Original Message-----
From: activeperl-bounces@listserv.ActiveState.com [mailto:activeperl-bounces@listserv.ActiveState.com] On Behalf Of Jeff Saxton
Sent: Wednesday, February 03, 2010 5:07 PM
To: Roode, Eric; activeperl@listserv.ActiveState.com
Subject: RE: IIS Configuration and Win32::OLE

Search the list, I think Jan posted something about this a couple of weeks ago.

-----Original Message-----
From: activeperl-bounces@listserv.ActiveState.com [mailto:activeperl-bounces@listserv.ActiveState.com] On Behalf Of Roode, Eric
Sent: Wednesday, February 03, 2010 1:21 PM
To: activeperl@listserv.ActiveState.com
Subject: IIS Configuration and Win32::OLE

Hello,

I am not sure that this is a Perl problem, but I've been trying
everything else for two weeks, maybe someone here can help.

We had a Windows 2003 server running IIS, with an AS Perl CGI
website. Then the server crashed. I have reinstalled the website on a
different Win2003 server, and everything works great -- except for one
thing.

One CGI program is a "download spreadsheet" link. It invokes Excel,
via OLE, and creates a chart to be downloaded. It does not work. When
it runs, Win32::OLE->new fails. Win32::OLE->LastError reports:
Win32::OLE(0.1709) error 0x80070005: "Access is denied". The specific
call is:

my $excel = Win32::OLE->new('Excel.Application', 'Quit');

The program runs fine from the command line, whether I run it as a
privileged user or not. IIS itself runs as "Local System"; I haven't
figured out how to run a program at the command line as that user. IIS
does have Excel MIME types configured. Excel is installed on the
server, for all users.

My *guess* is that this is some stupid simple configuration or
permission problem, but I cannot compare things to the old server,
because it's completely unusable. I have no idea what access is being
denied, or what permission to grant to whom. Any help is greatly
appreciated, thanks.


Eric J. Roode
Senior Enterprise Developer
Barrack, Rodos & Bacine
(215) 963-0600



_______________________________________________
ActivePerl mailing list
ActivePerl@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
_______________________________________________
ActivePerl mailing list
ActivePerl@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
_______________________________________________
ActivePerl mailing list
ActivePerl@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

RE: IIS Configuration and Win32::OLE

On Wednesday, February 03, 2010, Paco Zarabozo wrote:
>
> Hi,
>
> --------------------------------------------------
> From: "Roode, Eric"
> Sent: Wednesday, February 03, 2010 1:20 PM
> To:
> Subject: IIS Configuration and Win32::OLE
>
> > One CGI program is a "download spreadsheet" link. It invokes
Excel,
> > via OLE, and creates a chart to be downloaded. It does not work.
When
> > it runs, Win32::OLE->new fails. Win32::OLE->LastError reports:
> > Win32::OLE(0.1709) error 0x80070005: "Access is denied". The
specific
> > call is:
> >
> > my $excel = Win32::OLE->new('Excel.Application', 'Quit');
>
> To run your program at command line as another user, you can use
"runas" on
> command line. Type "runas" alone to see usage.

I could not figure out how to use "runas" to run the program as
"Local System" (which is what Services says IIS runs as). I tried:

System
Machine\System
"Local System"
Machine\"Local System"
Administrator
Machine\Administrator
IUSR_Machine

>
> About your COM/OLE permissions, you can configure them using DCOMCNFG
(type
> it at command prompt or on the "run" menu on start menu). Here's a URL
that
> can be helpful:
>
> http://j-integra.intrinsyc.com/support/com/doc/remoteaccess. html

I went through all the instructions on that page, and I still get the
"Access denied" error.

*sigh*

--
Eric

_______________________________________________
ActivePerl mailing list
ActivePerl@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

RE: IIS Configuration and Win32::OLE

I don't see how to run a program as that user. I can find no such user
in the system. So when "runas" asks me for a password, I have no idea
what to enter. If I just hit enter, I get "1326: Logon failure: unknown
user name or bad password."

-----Original Message-----
From: Ken Cornetet [mailto:Ken.Cornetet@kimball.com]
Sent: Wednesday, February 03, 2010 5:49 PM
To: Jeff Saxton; Roode, Eric; activeperl@listserv.ActiveState.com
Subject: RE: IIS Configuration and Win32::OLE

Are you running that script as the default IIS user? By default the IIS
default user (IUSR_XXX) gets deny ACLs set on many folders, including,
IIRC, Program Files.

-----Original Message-----
From: activeperl-bounces@listserv.ActiveState.com
[mailto:activeperl-bounces@listserv.ActiveState.com] On Behalf Of Jeff
Saxton
Sent: Wednesday, February 03, 2010 5:07 PM
To: Roode, Eric; activeperl@listserv.ActiveState.com
Subject: RE: IIS Configuration and Win32::OLE

Search the list, I think Jan posted something about this a couple of
weeks ago.

-----Original Message-----
From: activeperl-bounces@listserv.ActiveState.com
[mailto:activeperl-bounces@listserv.ActiveState.com] On Behalf Of Roode,
Eric
Sent: Wednesday, February 03, 2010 1:21 PM
To: activeperl@listserv.ActiveState.com
Subject: IIS Configuration and Win32::OLE

Hello,

I am not sure that this is a Perl problem, but I've been trying
everything else for two weeks, maybe someone here can help.

We had a Windows 2003 server running IIS, with an AS Perl CGI
website. Then the server crashed. I have reinstalled the website on a
different Win2003 server, and everything works great -- except for one
thing.

One CGI program is a "download spreadsheet" link. It invokes Excel,
via OLE, and creates a chart to be downloaded. It does not work. When
it runs, Win32::OLE->new fails. Win32::OLE->LastError reports:
Win32::OLE(0.1709) error 0x80070005: "Access is denied". The specific
call is:

my $excel = Win32::OLE->new('Excel.Application', 'Quit');

The program runs fine from the command line, whether I run it as a
privileged user or not. IIS itself runs as "Local System"; I haven't
figured out how to run a program at the command line as that user. IIS
does have Excel MIME types configured. Excel is installed on the
server, for all users.

My *guess* is that this is some stupid simple configuration or
permission problem, but I cannot compare things to the old server,
because it's completely unusable. I have no idea what access is being
denied, or what permission to grant to whom. Any help is greatly
appreciated, thanks.


Eric J. Roode
Senior Enterprise Developer
Barrack, Rodos & Bacine
(215) 963-0600



_______________________________________________
ActivePerl mailing list
ActivePerl@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
_______________________________________________
ActivePerl mailing list
ActivePerl@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs


_______________________________________________
ActivePerl mailing list
ActivePerl@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

RE: IIS Configuration and Win32::OLE

--===============1487305530==
Content-Type: multipart/alternative;
boundary="_c5e99b97-8c92-4f27-9678-6b9fff8049dc_"

--_c5e99b97-8c92-4f27-9678-6b9fff8049dc_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable


Eric

Have you turned on auditing for failed object access? It should capture wha=
t the failure is in the security log.

Rgds=2C
Steve

> Subject: RE: IIS Configuration and Win32::OLE
> Date: Thu=2C 4 Feb 2010 11:17:13 -0500
> From: eroode@barrack.com
> To: activeperl@listserv.ActiveState.com
>=20
> I don't see how to run a program as that user. I can find no such user
> in the system. So when "runas" asks me for a password=2C I have no idea
> what to enter. If I just hit enter=2C I get "1326: Logon failure: unknow=
n
> user name or bad password."
>=20
> -----Original Message-----
> From: Ken Cornetet [mailto:Ken.Cornetet@kimball.com]=20
> Sent: Wednesday=2C February 03=2C 2010 5:49 PM
> To: Jeff Saxton=3B Roode=2C Eric=3B activeperl@listserv.ActiveState.com
> Subject: RE: IIS Configuration and Win32::OLE
>=20
> Are you running that script as the default IIS user? By default the IIS
> default user (IUSR_XXX) gets deny ACLs set on many folders=2C including=
=2C
> IIRC=2C Program Files.
>=20
> -----Original Message-----
> From: activeperl-bounces@listserv.ActiveState.com
> [mailto:activeperl-bounces@listserv.ActiveState.com] On Behalf Of Jeff
> Saxton
> Sent: Wednesday=2C February 03=2C 2010 5:07 PM
> To: Roode=2C Eric=3B activeperl@listserv.ActiveState.com
> Subject: RE: IIS Configuration and Win32::OLE
>=20
> Search the list=2C I think Jan posted something about this a couple of
> weeks ago.
>=20
> -----Original Message-----
> From: activeperl-bounces@listserv.ActiveState.com
> [mailto:activeperl-bounces@listserv.ActiveState.com] On Behalf Of Roode=
=2C
> Eric
> Sent: Wednesday=2C February 03=2C 2010 1:21 PM
> To: activeperl@listserv.ActiveState.com
> Subject: IIS Configuration and Win32::OLE
>=20
> Hello=2C
> =20
> I am not sure that this is a Perl problem=2C but I've been trying
> everything else for two weeks=2C maybe someone here can help.
> =20
> We had a Windows 2003 server running IIS=2C with an AS Perl CGI
> website. Then the server crashed. I have reinstalled the website on a
> different Win2003 server=2C and everything works great -- except for one
> thing.
> =20
> One CGI program is a "download spreadsheet" link. It invokes Excel=
=2C
> via OLE=2C and creates a chart to be downloaded. It does not work. When
> it runs=2C Win32::OLE->new fails. Win32::OLE->LastError reports:
> Win32::OLE(0.1709) error 0x80070005: "Access is denied". The specific
> call is:
> =20
> my $excel =3D Win32::OLE->new('Excel.Application'=2C 'Quit')=3B
>=20
> The program runs fine from the command line=2C whether I run it as a
> privileged user or not. IIS itself runs as "Local System"=3B I haven't
> figured out how to run a program at the command line as that user. IIS
> does have Excel MIME types configured. Excel is installed on the
> server=2C for all users.
>=20
> My *guess* is that this is some stupid simple configuration or
> permission problem=2C but I cannot compare things to the old server=2C
> because it's completely unusable. I have no idea what access is being
> denied=2C or what permission to grant to whom. Any help is greatly
> appreciated=2C thanks.
> =20
>=20
> Eric J. Roode
> Senior Enterprise Developer
> Barrack=2C Rodos & Bacine
> (215) 963-0600
>=20
>=20
>=20
> _______________________________________________
> ActivePerl mailing list
> ActivePerl@listserv.ActiveState.com
> To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
> _______________________________________________
> ActivePerl mailing list
> ActivePerl@listserv.ActiveState.com
> To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
>=20
>=20
> _______________________________________________
> ActivePerl mailing list
> ActivePerl@listserv.ActiveState.com
> To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
=20
____________________________________________________________ _____
Hotmail: Trusted email with Microsoft=92s powerful SPAM protection.
http://clk.atdmt.com/GBL/go/201469226/direct/01/=

--_c5e99b97-8c92-4f27-9678-6b9fff8049dc_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable






Eric

Have you turned on auditing for failed object access? It should=
capture what the failure is in the security log.

Rgds=2C
Steve r>
>=3B Subject: RE: IIS Configuration and Win32::OLE
>=3B Date: =
Thu=2C 4 Feb 2010 11:17:13 -0500
>=3B From: eroode@barrack.com
>=
=3B To: activeperl@listserv.ActiveState.com
>=3B
>=3B I don't se=
e how to run a program as that user. I can find no such user
>=3B in =
the system. So when "runas" asks me for a password=2C I have no idea
&g=
t=3B what to enter. If I just hit enter=2C I get "1326: Logon failure: unk=
nown
>=3B user name or bad password."
>=3B
>=3B -----Origin=
al Message-----
>=3B From: Ken Cornetet [mailto:Ken.Cornetet@kimball.c=
om]
>=3B Sent: Wednesday=2C February 03=2C 2010 5:49 PM
>=3B To:=
Jeff Saxton=3B Roode=2C Eric=3B activeperl@listserv.ActiveState.com
>=
=3B Subject: RE: IIS Configuration and Win32::OLE
>=3B
>=3B Are =
you running that script as the default IIS user? By default the IIS
>=
=3B default user (IUSR_XXX) gets deny ACLs set on many folders=2C including=
=2C
>=3B IIRC=2C Program Files.
>=3B
>=3B -----Original Mes=
sage-----
>=3B From: activeperl-bounces@listserv.ActiveState.com
&g=
t=3B [mailto:activeperl-bounces@listserv.ActiveState.com] On Behalf Of Jeff=

>=3B Saxton
>=3B Sent: Wednesday=2C February 03=2C 2010 5:07 PM<=
br>>=3B To: Roode=2C Eric=3B activeperl@listserv.ActiveState.com
>=
=3B Subject: RE: IIS Configuration and Win32::OLE
>=3B
>=3B Sear=
ch the list=2C I think Jan posted something about this a couple of
>=
=3B weeks ago.
>=3B
>=3B -----Original Message-----
>=3B Fr=
om: activeperl-bounces@listserv.ActiveState.com
>=3B [mailto:activeper=
l-bounces@listserv.ActiveState.com] On Behalf Of Roode=2C
>=3B Eric >>=3B Sent: Wednesday=2C February 03=2C 2010 1:21 PM
>=3B To: active=
perl@listserv.ActiveState.com
>=3B Subject: IIS Configuration and Win3=
2::OLE
>=3B
>=3B Hello=2C
>=3B
>=3B I am not sur=
e that this is a Perl problem=2C but I've been trying
>=3B everything =
else for two weeks=2C maybe someone here can help.
>=3B
>=3B =
We had a Windows 2003 server running IIS=2C with an AS Perl CGI
>=3B=
website. Then the server crashed. I have reinstalled the website on a >>=3B different Win2003 server=2C and everything works great -- except fo=
r one
>=3B thing.
>=3B
>=3B One CGI program is a "down=
load spreadsheet" link. It invokes Excel=2C
>=3B via OLE=2C and creat=
es a chart to be downloaded. It does not work. When
>=3B it runs=2C =
Win32::OLE->=3Bnew fails. Win32::OLE->=3BLastError reports:
>=3B =
Win32::OLE(0.1709) error 0x80070005: "Access is denied". The specific
&=
gt=3B call is:
>=3B
>=3B my $excel =3D Win32::OLE->=
=3Bnew('Excel.Application'=2C 'Quit')=3B
>=3B
>=3B The progr=
am runs fine from the command line=2C whether I run it as a
>=3B privi=
leged user or not. IIS itself runs as "Local System"=3B I haven't
>=
=3B figured out how to run a program at the command line as that user. IIS=

>=3B does have Excel MIME types configured. Excel is installed on th=
e
>=3B server=2C for all users.
>=3B
>=3B My *guess* is=
that this is some stupid simple configuration or
>=3B permission prob=
lem=2C but I cannot compare things to the old server=2C
>=3B because i=
t's completely unusable. I have no idea what access is being
>=3B den=
ied=2C or what permission to grant to whom. Any help is greatly
>=3B =
appreciated=2C thanks.
>=3B
>=3B
>=3B Eric J. Roode
&g=
t=3B Senior Enterprise Developer
>=3B Barrack=2C Rodos &=3B Bacine<=
br>>=3B (215) 963-0600
>=3B
>=3B
>=3B
>=3B _______=
________________________________________
>=3B ActivePerl mailing list<=
br>>=3B ActivePerl@listserv.ActiveState.com
>=3B To unsubscribe: htt=
p://listserv.ActiveState.com/mailman/mysubs
>=3B _____________________=
__________________________
>=3B ActivePerl mailing list
>=3B Acti=
vePerl@listserv.ActiveState.com
>=3B To unsubscribe: http://listserv.A=
ctiveState.com/mailman/mysubs
>=3B
>=3B
>=3B _____________=
__________________________________
>=3B ActivePerl mailing list
>=
=3B ActivePerl@listserv.ActiveState.com
>=3B To unsubscribe: http://li=
stserv.ActiveState.com/mailman/mysubs