Does IUSR_<servername> have execute permissions to cmd.exe? Running Process Monitor is probably a good idea. You'd probably need to run this on the IIS box to see what it's being denied to.
If it's a problem accessing a UNC share, you can probably look in the Security event log of the remote machine to see what user account is being denied access. If it's a problem actually invoking a command prompt or instantiating some other object, then you'd need Process Monitor on the IIS box. Cheers Ken -----Original Message----- From: Kurt Buff [mailto:[email protected]] Sent: Thursday, 5 February 2009 9:15 AM To: NT System Admin Issues Subject: Re: Perhaps OT: Frustration level rising with IIS/ASP No GPOs, Win2k3 R2, fully patched. On Wed, Feb 4, 2009 at 1:56 PM, Ken Schaefer <[email protected]> wrote: > What OS is important. IUSR account doesn't have permissions to cmd.exe (and a > bunch of other things) by default in Windows Server 2003 > > Doesn't explain it was working, and now it's not, but one thing to check. > > What about GPOs applying to this server? > > Cheers > Ken > > -----Original Message----- > From: Kurt Buff [mailto:[email protected]] > Sent: Thursday, 5 February 2009 8:46 AM > To: NT System Admin Issues > Subject: Perhaps OT: Frustration level rising with IIS/ASP > > We have a page on our intranet server that is doing some very funky things. > > Namely, it mostly, but not always, gives out this error message: > > Microsoft VBScript runtime error '800a0046' > > Permission denied > > /intranet/webquery/SearchResultObsoleteParts.asp, line 119 > > > That line of code is > > objShell.Run strPSExec,0,true > > Which is just a reference to this line: > > strPSExec = "\\inetserver\Queries\psexec.exe -w > e:\directory1\directory2 \\avante -u mycompany\_udtpuller -p > ThePassword cscript GetUDTData.vbs COMP_ALERT " & strPartNum & " -r " > & strDataSetNum > > > We're using an older version of psexec, just to avoid issues with > dismissing the EULA. The page used to work at one point, but now it's > not working well at all - something changed in December, AFAICT, but > nobody's fessing up, nor can I find anything different. > > > After googling and a bit of thinking, I followed the directions in > this article - http://support.microsoft.com/kb/197964/ - which seemed > to clear it up for about 20 minutes, but now it's not working again, > and I am not able to figure out why. > > Anyone have thoughts on what I should be looking at/for? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
