Hey All,
I have some ASP 3 pages that instantiate a COM component. That
component writes messages to the one of the Windows event logs.
Things work as I expect them to on XP Pro but not on 2003 Server. I
figured it was a security thing, so I surfed around and found that
permissions were tightened in the server's first service pack. The fix
I found[1] said to append an ACE[2] to the event log's CustomSD
registry value found at
HKLM\SYSTEM\Cur rentControlSet\ Services\EventL og\{LOG_NAME}\C ustomSD
I tried three different ones with a reboot after appending each one:
1. (A;;0x3;;;AU)
2. (A;;0x3;;;NS)
3. (A;;0x0002;;;S-1-5-21-237510213-3056582554-1478882900-1003)
The last uses the full SID of the IUSR account on the Windows 2003 I'm
working on. I obtained that ID using this VBScript:
Dim WshNetwork
Dim strComputer, Account
Dim objWMIService, colItems, objItem
Set WshNetwork = WScript.CreateO bject("WScript. Network")
strComputer = "."
Account = "IUSR_" & WshNetwork.Comp uterName
Set objWMIService = GetObject("winm gmts:\\.\root\c imv2")
Set colItems = objWMIService.E xecQuery("Selec t * from Win32_Account
where Name = '" & Account & "'" )
For Each objItem in colItems
Wscript.Echo objItem.SID
Next
If anyone has any advice that can help me figure out how to solve this
problem, I would really appreciate it.
TIA!
--
Regards,
Travis Spencer
[1] http://tinyurl.com/obd49, http://tinyurl.com/f0o8, and
http://tinyurl.com/m4eun.
[2] http://tinyurl.com/r3j48
I have some ASP 3 pages that instantiate a COM component. That
component writes messages to the one of the Windows event logs.
Things work as I expect them to on XP Pro but not on 2003 Server. I
figured it was a security thing, so I surfed around and found that
permissions were tightened in the server's first service pack. The fix
I found[1] said to append an ACE[2] to the event log's CustomSD
registry value found at
HKLM\SYSTEM\Cur rentControlSet\ Services\EventL og\{LOG_NAME}\C ustomSD
I tried three different ones with a reboot after appending each one:
1. (A;;0x3;;;AU)
2. (A;;0x3;;;NS)
3. (A;;0x0002;;;S-1-5-21-237510213-3056582554-1478882900-1003)
The last uses the full SID of the IUSR account on the Windows 2003 I'm
working on. I obtained that ID using this VBScript:
Dim WshNetwork
Dim strComputer, Account
Dim objWMIService, colItems, objItem
Set WshNetwork = WScript.CreateO bject("WScript. Network")
strComputer = "."
Account = "IUSR_" & WshNetwork.Comp uterName
Set objWMIService = GetObject("winm gmts:\\.\root\c imv2")
Set colItems = objWMIService.E xecQuery("Selec t * from Win32_Account
where Name = '" & Account & "'" )
For Each objItem in colItems
Wscript.Echo objItem.SID
Next
If anyone has any advice that can help me figure out how to solve this
problem, I would really appreciate it.
TIA!
--
Regards,
Travis Spencer
[1] http://tinyurl.com/obd49, http://tinyurl.com/f0o8, and
http://tinyurl.com/m4eun.
[2] http://tinyurl.com/r3j48