IIS: AspAllowOutOfProcComponents Is Now Obsolete

View products that this article applies to.

This article was previously published under Q233968

Expand all | Collapse all

SUMMARY

Microsoft Internet Information Services (IIS) version 5.0 and later now ignores the AspAllowOutOfProcComponents metabase property value and sets the default value to TRUE. This is a change from IIS 4.0, where this property was set to FALSE by default.

MORE INFORMATION

In IIS 4.0, the AspAllowOutOfProcComponents metabase property was set to FALSE for security reasons, where it was possible for a user to start an out-of-process component that could later be used by another user in the original user's context. Changes in the architecture of IIS now prevent this from occurring and the value of this property is now ignored.