Ken,
I gave IWAM_MACHINENAME access to the dllhost.exe and now I get two
different errors:
ERROR #1:
Source: W3SVC
Event Id: 36
User: N/A
The server failed to load application '/LM/W3SVC/1/ROOT'. The error was
'Server execution failed'.
ERROR #2:
Source: DCOM
Event Id: 10010
User: NT AUTHORITY\SYSTEM
The server {3D14228D-FBE1-11D0-995D-00C04FD919C1} did not register with DCOM
within the required timeout.
I looked at the FILEMON dump and noticed other access denied errors for
IWAM_MACHINENAME. So I had to give access for IWAM_MACHINENAME to the
Windows and Windows/System32 folders as well as rpcss.dll. After that I
still get the same errors above in the event log and this dump from FILEMON.
There are no more access denied errors in the FILEMON dump but still nothing
works.
5:17:23 PM IEXPLORE.EXE:2876 QUERY INFORMATION C:\Documents and
Settings\Bill\Local Settings\Temporary Internet Files\Content.IE5\index.dat
SUCCESS Length: 4489216
5:17:23 PM IEXPLORE.EXE:2876 QUERY INFORMATION C:\Documents and
Settings\Bill\Local Settings\Temporary Internet Files\Content.IE5\index.dat
SUCCESS Length: 4489216
5:17:23 PM IEXPLORE.EXE:2876 QUERY INFORMATION C:\Documents and
Settings\Bill\Local Settings\Temporary Internet Files\Content.IE5\index.dat
SUCCESS Length: 4489216
5:17:23 PM IEXPLORE.EXE:2876 QUERY INFORMATION C:\Documents and
Settings\Bill\Local Settings\Temporary Internet Files\Content.IE5\index.dat
SUCCESS Length: 4489216
5:17:23 PM IEXPLORE.EXE:2876 QUERY INFORMATION C:\Documents and
Settings\Bill\Local Settings\Temporary Internet Files\Content.IE5\index.dat
SUCCESS Length: 4489216
5:17:23 PM IEXPLORE.EXE:2876 QUERY INFORMATION C:\Documents and
Settings\Bill\Local Settings\Temporary Internet Files\Content.IE5\index.dat
SUCCESS Length: 4489216
5:17:23 PM IEXPLORE.EXE:2876 QUERY INFORMATION C:\Documents and
Settings\Bill\Local Settings\Temporary Internet Files\Content.IE5\index.dat
SUCCESS Length: 4489216
5:17:23 PM IEXPLORE.EXE:2876 QUERY INFORMATION C:\Documents and Settings\Bil
l\Local Settings\Temporary Internet Files\Content.IE5\index.dat SUCCESS
Length: 4489216
5:17:23 PM inetinfo.exe:592 QUERY INFORMATION C:\INETPUB\WWWROOT\ SUCCESS
Attributes: D
5:17:23 PM inetinfo.exe:592 OPEN C:\INETPUB\WWWROOT\ SUCCESS Options: Open
Access: All
5:17:23 PM inetinfo.exe:592 QUERY SECURITY C:\INETPUB\WWWROOT\ BUFFER
OVERFLOW
5:17:23 PM inetinfo.exe:592 QUERY SECURITY C:\INETPUB\WWWROOT\ SUCCESS
5:17:23 PM inetinfo.exe:592 OPEN C:\INETPUB\WWWROOT\DEFAULT.HTM FILE NOT
FOUND Options: Open Access: All
5:17:23 PM inetinfo.exe:592 OPEN C:\INETPUB\WWWROOT\DEFAULT.ASP FILE NOT
FOUND Options: Open Access: All
5:17:23 PM inetinfo.exe:592 OPEN C:\INETPUB\WWWROOT\INDEX.HTM FILE NOT FOUND
Options: Open Access: All
5:17:23 PM inetinfo.exe:592 OPEN C:\INETPUB\WWWROOT\IISSTART.ASP SUCCESS
Options: Open Access: All
5:17:23 PM inetinfo.exe:592 QUERY SECURITY C:\INETPUB\WWWROOT\IISSTART.ASP
BUFFER OVERFLOW
5:17:23 PM inetinfo.exe:592 QUERY SECURITY C:\INETPUB\WWWROOT\IISSTART.ASP
SUCCESS
5:17:23 PM inetinfo.exe:592 CLOSE C:\INETPUB\WWWROOT\IISSTART.ASP SUCCESS
5:17:23 PM inetinfo.exe:592 CLOSE C:\INETPUB\WWWROOT\ SUCCESS
5:17:23 PM lsass.exe:764 SET INFORMATION C:\WINDOWS\system32\config\SAM.LOG
SUCCESS Length: 8192
5:17:23 PM lsass.exe:764 SET INFORMATION C:\WINDOWS\system32\config\SAM.LOG
SUCCESS Length: 8192
5:17:23 PM svchost.exe:952 QUERY INFORMATION C:\WINDOWS\TEMP SUCCESS
Attributes: D
5:17:23 PM svchost.exe:952 QUERY INFORMATION C:\WINDOWS\TEMP SUCCESS
Attributes: D
5:17:23 PM svchost.exe:952 QUERY INFORMATION C:\WINDOWS\System32\dllhost.exe
SUCCESS Attributes: A
5:17:23 PM svchost.exe:952 QUERY INFORMATION C:\WINDOWS\System32\dllhost.exe
SUCCESS Attributes: A
5:17:23 PM svchost.exe:952 OPEN C:\WINDOWS\System32\dllhost.exe SUCCESS
Options: Open Access: All
5:17:23 PM svchost.exe:952 QUERY INFORMATION C:\WINDOWS\System32\dllhost.exe
SUCCESS Attributes: A
5:17:23 PM svchost.exe:952 QUERY INFORMATION C:\WINDOWS\System32\dllhost.exe
SUCCESS Length: 4608
5:17:23 PM svchost.exe:952 QUERY INFORMATION C:\WINDOWS\system32\dllhost.exe
SUCCESS Attributes: A
5:17:23 PM svchost.exe:952 OPEN C:\ SUCCESS Options: Open Directory Access:
All
5:17:23 PM svchost.exe:952 DIRECTORY C:\ SUCCESS
FileBothDirectoryInformation: WINDOWS
5:17:23 PM svchost.exe:952 CLOSE C:\ SUCCESS
5:17:23 PM svchost.exe:952 OPEN C:\WINDOWS\ SUCCESS Options: Open Directory
Access: All
5:17:23 PM svchost.exe:952 DIRECTORY C:\WINDOWS\ SUCCESS
FileBothDirectoryInformation: system32
5:17:23 PM svchost.exe:952 CLOSE C:\WINDOWS\ SUCCESS
5:17:23 PM svchost.exe:952 OPEN C:\WINDOWS\system32\ SUCCESS Options: Open
Directory Access: All
5:17:23 PM svchost.exe:952 DIRECTORY C:\WINDOWS\system32\ SUCCESS
FileBothDirectoryInformation: dllhost.exe
5:17:23 PM svchost.exe:952 CLOSE C:\WINDOWS\system32\ SUCCESS
5:17:23 PM svchost.exe:952 OPEN C:\WINDOWS\System32\dllhost.exe.Manifest
FILE NOT FOUND Options: Open Access: All
5:17:23 PM svchost.exe:952 CLOSE C:\WINDOWS\System32\dllhost.exe SUCCESS
5:17:23 PM dllhost.exe:3808 QUERY INFORMATION
C:\WINDOWS\system32\dllhost.exe SUCCESS FileNameInformation
5:17:23 PM dllhost.exe:3808 QUERY INFORMATION
C:\WINDOWS\system32\dllhost.exe SUCCESS FileNameInformation
5:17:23 PM dllhost.exe:3808 OPEN C:\WINDOWS\Prefetch\DLLHOST.EXE-0FCE1506.pf
FILE NOT FOUND Options: Open Access: All
5:17:23 PM dllhost.exe:3808 OPEN C:\WINDOWS\system32\ SUCCESS Options: Open
Directory Access: Traverse
5:17:23 PM dllhost.exe:3808 QUERY INFORMATION
C:\WINDOWS\System32\dllhost.exe.Local FILE NOT FOUND Attributes: Error
5:17:23 PM dllhost.exe:3808 QUERY INFORMATION C:\WINDOWS\system32\rpcss.dll
SUCCESS Attributes: A
5:17:23 PM dllhost.exe:3808 OPEN C:\WINDOWS\system32\rpcss.dll SUCCESS
Options: Open Access: Execute
5:17:23 PM dllhost.exe:3808 QUERY INFORMATION C:\WINDOWS\system32\rpcss.dll
SUCCESS Length: 202752
5:17:23 PM dllhost.exe:3808 CLOSE C:\WINDOWS\system32\rpcss.dll SUCCESS
5:17:23 PM dllhost.exe:3808 QUERY INFORMATION
C:\WINDOWS\system32\dllhost.exe BUFFER OVERFLOW FileNameInformation
5:17:23 PM dllhost.exe:3808 QUERY INFORMATION
C:\WINDOWS\system32\dllhost.exe SUCCESS FileNameInformation
5:17:23 PM dllhost.exe:3808 SET INFORMATION
C:\WINDOWS\system32\config\SOFTWARE.LOG SUCCESS Length: 12288
5:17:23 PM dllhost.exe:3808 SET INFORMATION
C:\WINDOWS\system32\config\SOFTWARE.LOG SUCCESS Length: 12288
5:17:23 PM dllhost.exe:3808 SET INFORMATION
C:\WINDOWS\system32\config\SOFTWARE.LOG SUCCESS Length: 20480
5:17:23 PM dllhost.exe:3808 CLOSE C:\WINDOWS\system32\ SUCCESS
5:17:23 PM services.exe:752 WRITE C:\WINDOWS\system32\config\SysEvent.Evt
SUCCESS Offset: 267608 Length: 180
5:17:23 PM services.exe:752 WRITE C:\WINDOWS\system32\config\SysEvent.Evt
SUCCESS Offset: 267788 Length: 40
5:17:23 PM services.exe:752 WRITE C:\WINDOWS\system32\config\SysEvent.Evt
SUCCESS Offset: 267788 Length: 176
5:17:23 PM services.exe:752 WRITE C:\WINDOWS\system32\config\SysEvent.Evt
SUCCESS Offset: 267964 Length: 40
5:17:23 PM IEXPLORE.EXE:2876 QUERY INFORMATION C:\Documents and
Settings\Bill\Local Settings\Temporary Internet Files\Content.IE5\index.dat
SUCCESS Length: 4489216
5:17:23 PM svchost.exe:1052 OPEN C:\WINDOWS\Prefetch\DLLHOST.EXE-0FCE1506.pf
FILE NOT FOUND Options: Open Access: All
5:17:23 PM svchost.exe:1052 SET INFORMATION
C:\WINDOWS\system32\config\SOFTWARE.LOG SUCCESS Length: 24576
Bill
"Ken Schaefer" <kenREMOVE DeleteThis @THISadOpenStatic.com> wrote in message
news:%23mhU4zIbDHA.388@TK2MSFTNGP10.phx.gbl...
> I would suggest that you change the permissions on dllhost.exe so that the
> IWAM_MachineName account has Read/Execute NTFS permissions on that file.
> IWAM_Machinename appears to be the account that your webserver is using to
> process your ASP pages (default account for anonymous access to out of
> process websites), and see if that makes the problem go away.
>
> Cheers
> Ken
>
> "Bill Henning" <please @ nospamforactiprosoftware.com> wrote in message
> news:u0oWLuIbDHA.2136@TK2MSFTNGP10.phx.gbl...
> : Ken,
> :
> : Thanks for the tip... filemon shows these errors which seem related:
> :
> : 7:04:22 AM svchost.exe:984 QUERY INFORMATION
> C:\WINDOWS\System32\dllhost.exe
> : ACCESS DENIED Attributes: Error
> : 7:04:22 AM svchost.exe:984 QUERY INFORMATION
> C:\WINDOWS\System32\dllhost.exe
> : ACCESS DENIED Attributes: Error
> : 7:04:22 AM svchost.exe:984 OPEN C:\WINDOWS\System32\dllhost.exe ACCESS
> : DENIED ACTIPRO\IWAM_MACHINENAME
> : 7:04:22 AM svchost.exe:984 OPEN C:\WINDOWS\System32\dllhost.exe ACCESS
> : DENIED ACTIPRO\IWAM_MACHINENAME
> :
> : All of them are command line (C:\WINDOWS\system32\svchost -k rpcss) and
> user
> : (NT AUTHORITY\SYSTEM).
> :
> : Any ideas?
> :
> : Bill
> :
> :
> : "Ken Schaefer" <kenREMOVE DeleteThis @THISadOpenStatic.com> wrote in message
> : news:Oi7VBVHbDHA.1488@TK2MSFTNGP12.phx.gbl...
> : > I don't know what your specific error is. However, it appears that
> you're
> : > getting some kind of access denied error either due to password synch
> : > issues -or- incorrectly configured permissions.
> : >
> : > Have you tried running filemon from <a style='text-decoration: underline;' href="http://www.sysinternals.com" target="_blank">www.sysinternals.com</a> to see if
> there's
> : > any access denied errors on any files?
> : >
> : > Cheers
> : > Ken
> : >
> : > "Bill Henning" <please @ nospamforactiprosoftware.com> wrote in
message
> : > news:OrqXMuEbDHA.1644@TK2MSFTNGP10.phx.gbl...
> : > : Hello, I am a developer and have been working successfully
developing
> : > : ASP.NET pages for quite some time now on my computer. Suddenly
> : yesterday
> : > I
> : > : started getting errors on any ASP page:
> : > :
> : > : Server Application Error
> : > : The server has encountered an error while loading an application
> during
> : > the
> : > : processing of your request. Please refer to the event log for more
> : detail
> : > : information. Please contact the server administrator for assistance.
> : > :
> : > : When I look at the event log, I see two errors:
> : > :
> : > : ERROR #1:
> : > : Source: W3SVC
> : > : Event Id: 36
> : > : User: N/A
> : > : The server failed to load application '/LM/W3SVC/1/ROOT'. The error
> was
> : > : 'General access denied error'.
> : > :
> : > : ERROR #2:
> : > : Source: DCOM
> : > : Event Id: 10001
> : > : User: NT AUTHORITY\SYSTEM
> : > : Unable to start a DCOM Server:
{99169CB1-A707-11D0-989D-00C04FD919C1}
> as
> : > : ./IWAM_MACHINENAME. The error:
> : > : "Access is denied. "
> : > : Happened while starting this command:
> : > : C:\WINDOWS\System32\dllhost.exe
> : > : /Processid:{3D14228D-FBE1-11D0-995D-00C04FD919C1}
> : > :
> : > : I'm completely at a loss as to why this is happening and have wasted
> the
> : > : entire day trying to fix it. I've even uninstalled the .NET
framework
> : and
> : > : IIS and reinstalled IIS. I still get the error. It seems like my
> IWAM
> : > has
> : > : some permission set up wrong but how am I supposed to know what it
is
> : and
> : > : how to fix it?
> : > :
> : > : Thanks for any help,
> : > :
> : > : Bill
> : > :
> : > :
> : >
> : >
> :
> :
>
><!-- ~MESSAGE_AFTER~ -->
>> Stay informed about: ASP Pages No Longer Work - Please Help! 
FAQ
Profile
Private Messages
Log in
