Sudden appearance of "Access is denied" error with ASPUser

Hi

I am doing some work with an intranet web site that uses ASPUser as
part of its user authentication procedure. The web site is ASP,
running on IIS 4 on Windows NT 4 Server. This site has been running
without a hitch for around 3 years.

In the last two weeks, whenever multiple people browse the site, the
web page that calls ASPUser crashes with the error:
"Persits.AspUser.1 error '800a0009'
Access is denied
/admin/fn/menu.asp, line 80"

The code leading up to this error is (Line 80 is the last line: "set
Obj_User_Menu = ..."):


'-------------------------------------------------

' get the user's username - remove the domain
set Obj_AU_Menu = Server.CreateObject ("Persits.AspUser")
Int_IndexOfFirstSlash = InStr (1, Request.ServerVariables
("AUTH_USER"), "\", vbTextCompare)
Str_username = right (Request.ServerVariables ("AUTH_USER"), len
(Request.ServerVariables ("AUTH_USER")) - Int_IndexOfFirstSlash)

' get the NT groups to which this user belongs
set Obj_User_Menu = Obj_AU_Menu.Users(Str_Username)

'-------------------------------------------------


At installation of this site, permissions were correctly set for IUSR
and this component.

Looking in user manager at the IUSR account for this server, it
appears different to how I have seen it on other web servers. The
account name is all lower case (i.e. iusr_inet) and has a description
of "Internet Anonymous Access". When I have looked at IUSR accounts
on other servers, the account name is all in capitals (e.g.
IUSR_SERVER) and has a description of "Built-in account for anonymous
access to Internet Information".

I have examined the event logs on this server and seen a few DCOM
error messages, but none of them seem to relate to the times that
these "Access is denied" error messages appear. The Domain controller
on this network is separate from the web server and I have however
noted some DCOM error messages in its event log. Further, these
messages do coincide with the times that the "Access is denied
message" appears. Hence, I suspect that these are related to the
problem.

Has anyone had any experience with similar events occurring recently
on their network? Any ideas of where I should start?

Any assistance much appreciated.

Cheers Allen

Is there any chance one of your friendly server administrators may have run
the "IIS Lockdown Tool" over your server?

This can reset privs.

T
"Allen Hahn" <allnhahn@netscape.net> wrote in message
news:79eeac0c.0309090613.5a31ecaf@posting.google.c om...
> Hi
>
> I am doing some work with an intranet web site that uses ASPUser as
> part of its user authentication procedure. The web site is ASP,
> running on IIS 4 on Windows NT 4 Server. This site has been running
> without a hitch for around 3 years.
>
> In the last two weeks, whenever multiple people browse the site, the
> web page that calls ASPUser crashes with the error:
> "Persits.AspUser.1 error '800a0009'
> Access is denied
> /admin/fn/menu.asp, line 80"
>
> The code leading up to this error is (Line 80 is the last line: "set
> Obj_User_Menu = ..."):
>
>
> '-------------------------------------------------
>
> ' get the user's username - remove the domain
> set Obj_AU_Menu = Server.CreateObject ("Persits.AspUser")
> Int_IndexOfFirstSlash = InStr (1, Request.ServerVariables
> ("AUTH_USER"), "\", vbTextCompare)
> Str_username = right (Request.ServerVariables ("AUTH_USER"), len
> (Request.ServerVariables ("AUTH_USER")) - Int_IndexOfFirstSlash)
>
> ' get the NT groups to which this user belongs
> set Obj_User_Menu = Obj_AU_Menu.Users(Str_Username)
>
> '-------------------------------------------------
>
>
> At installation of this site, permissions were correctly set for IUSR
> and this component.
>
> Looking in user manager at the IUSR account for this server, it
> appears different to how I have seen it on other web servers. The
> account name is all lower case (i.e. iusr_inet) and has a description
> of "Internet Anonymous Access". When I have looked at IUSR accounts
> on other servers, the account name is all in capitals (e.g.
> IUSR_SERVER) and has a description of "Built-in account for anonymous
> access to Internet Information".
>
> I have examined the event logs on this server and seen a few DCOM
> error messages, but none of them seem to relate to the times that
> these "Access is denied" error messages appear. The Domain controller
> on this network is separate from the web server and I have however
> noted some DCOM error messages in its event log. Further, these
> messages do coincide with the times that the "Access is denied
> message" appears. Hence, I suspect that these are related to the
> problem.
>
> Has anyone had any experience with similar events occurring recently
> on their network? Any ideas of where I should start?
>
> Any assistance much appreciated.
>
> Cheers Allen