Access to winnt\system32 outside of my document-root

Hi!

I'm a totally IIS Newbie: I have a Python-CGI Script installed, which
needs to execute a "diff" command. This is done by the Python-Call
popen(...). Unforunatly Python uses internally always the string
"C:\\WINNT\\system32\\cmd.exe /c diff -u <file_1> <file_2>". If I
execute the python-Script from command-line, everything works fine.
Diff is installed.

My Problem now is, that i always get the error: "access denied (5)" as
the return of my python script. Can it be, that the IIS is not allowed
to execute programs outside of the webroot in its default
configuration? If yes, how can I configure the IIS in order to have
access to winnt\system32? IF no, why can't i execute cmd.exe?

IIS-Version: 5.0

Thanks, Leo

If you have URLSCAN installed, then it is denying this. Check to see if the filter is loaded in the master properties of IIS. If not, then
run filemon and regmon from www.sysinternals.com and see what is being denied access, and where, when you repro the issue.

Thank you. I hope this information is helpful.

Tim Coffey [MSFT]

This posting is provided “AS IS” with no warranties, and confers no rights. You assume all risk for your use. © 2001 Microsoft
Corporation. All rights reserved.
--------------------
| From: leoel DeleteThis @gmx.at (Leo)
| Newsgroups: microsoft.public.inetserver.iis
| Subject: Access to winnt\system32 outside of my document-root
| Date: 10 Sep 2003 07:16:15 -0700
| Organization: http://groups.google.com/
| Lines: 18
| Message-ID: <2a8c4fb2.0309100616.4cf28990 DeleteThis @posting.google.com>
| NNTP-Posting-Host: 213.229.30.234
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 8bit
| X-Trace: posting.google.com 1063203376 3302 127.0.0.1 (10 Sep 2003 14:16:16 GMT)
| X-Complaints-To: groups-abuse DeleteThis @google.com
| NNTP-Posting-Date: 10 Sep 2003 14:16:16 GMT
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newspeer1-
gui.server.ntli.net!ntli.net!sn-xit-02!sn-xit-06!sn-xit-09!supernews.com!postnews1.google.com!not-for-mail
| Xref: cpmsftngxa06.phx.gbl microsoft.public.inetserver.iis:274868
| X-Tomcat-NG: microsoft.public.inetserver.iis
|
| Hi!
|
| I'm a totally IIS Newbie: I have a Python-CGI Script installed, which
| needs to execute a "diff" command. This is done by the Python-Call
| popen(...). Unforunatly Python uses internally always the string
| "C:\\WINNT\\system32\\cmd.exe /c diff -u <file_1> <file_2>". If I
| execute the python-Script from command-line, everything works fine.
| Diff is installed.
|
| My Problem now is, that i always get the error: "access denied (5)" as
| the return of my python script. Can it be, that the IIS is not allowed
| to execute programs outside of the webroot in its default
| configuration? If yes, how can I configure the IIS in order to have
| access to winnt\system32? IF no, why can't i execute cmd.exe?
|
| IIS-Version: 5.0
|
| Thanks, Leo
|