FIX: Error message when you try to run an ASP.NET 2.0 Web application if you do not associate the My_Computer_Zone code group with the "full trust" permission set: "Server Application Unavailable"

When you try to run a Microsoft ASP.NET 2.0 Web application, you receive the following error message if you do not associate the My_Computer_Zone code group with the "full trust" permission set:Additionally, the following event is logged in the Application log:

Event Type: Error
Event Source: ASP.NET 2.0.50727.0
Event Category: None
Event ID: 1088
Date: 10/11/2007
Time: 3:16:33 PM
User: N/A
Computer: WebServer
Description: Failed to execute request because the App-Domain could not be created.
Error: 0x8013150a

Hotfix information

A supported hotfix is now available from Microsoft. However, it is intended to correct only the problem that is described in this article. Apply it only to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next .NET Framework 2.0 service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Customer Support Services to obtain the hotfix. For a complete list of Microsoft Customer Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

After you apply this hotfix, you must follow these steps to make the ASP.NET 2.0 Web application work correctly:

1. Locate the folder where the .NET Framework 2.0 is installed. By default, the .NET Framework 2.0 is installed in the following folder:
   %windir%\Microsoft.NET\Framework\v2.0.50727
2. Create a new code group that enables the application domain to start. To do this, run the following command at a command prompt:
   caspol -machine -addgroup My_Computer_Zone -url ms-internal-microsoft-asp-net-webhost-20 FullTrust -n ASPNET
3. Associate the Temporary ASP.NET Files folder with the "full trust" permission set. To do this, run the following command:
   caspol -machine -addgroup My_Computer_Zone -url "%windir%\microsoft.net\framework\v2.0.50727\Temporary ASP.NET Files\*" FullTrust -n ASPNETTempFiles
4. Pre-compile the Web application. To do this, use the Publish Web Site feature in Visual Studio. Or, use the aspnet_compiler.exe utility.
   • If you use the Publish Web Site feature in Visual Studio, do the following:
     • Click to clear Allow this precompiled site to be updatable check box.
     • Click to select the Enable strong naming on precompiled assemblies check box.
     • Specify a key file to sign the application assembly.
   • If you use the aspnet_compiler.exe utility, use the -keyfile switch to sign the application assembly.
5. Associate a new code group that provides strong name evidence with the "full trust" permission set. To do this, run one of the following commands:
   • caspol -machine -addgroup My_Computer_Zone -strong -file <path_to_pre-compiled_assembly>\MyAssembly.dll -name MyAssembly.dll -version <version_number> FullTrust -n MyStrongNameCodeGroup
   • caspol -machine -addgroup My_Computer_Zone -strong -file <path_to_pre-compiled_assembly>\MyAssembly.dll -noname -noversion FullTrust -n MyStrongNameCodeGroup
6. Restart IIS.

After you apply these changes, SQL Server Reporting Services 2005 does not work. To resolve this problem, follow these steps:

1. Associate the SQL Server Reporting Services assemblies with the "full trust" permission set. To do this, run the following command:
   caspol -machine -addgroup My_Computer_Zone -url "%Program Files%\Microsoft SQL Server\MSSQL.3\Reporting Services\*" FullTrust -n SSRS_Assemblies
2. Associate a new code group that provides strong name evidence for the expression host assembly with the "execute only" permission set. To do this, run the following command:

   caspol -machine -addgroup My_Computer_Zone -strong -hex
    0024000004800000940000000602000000240000525341310004000001000100512C8E872E28
    569E733BCB123794DAB55111A0570B3B3D4DE3794153DEA5EFB7C3FEA9F2D8236CFF320C4FD0
    EAD5F677880BF6C181F296C751C5F6E65B04D3834C02F792FEE0FE452915D44AFE74A0C27E0D
    8E4B8D04EC52A8E281E01FF47E7D694E6C7275A09AFCBFD8CC82705A06B20FD6EF61EBBA6873
    E29C8C0F2CAEDDA2
    -noname -noversion Execution -n SSRS_Expression_Host

Prerequisites

You must have the .NET Framework 2.0 installed to apply this hotfix.

Restart requirement

You do not have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

For more information about the Code Access Security Policy tool, visit the following Web site: For more information, click the following article number to view the article in the Microsoft Knowledge Base: