Select the product you need help with

"Script Execution Error: Error Executing INVOKE" Error Message After You Install IIS Lockdown Wizard

Article ID: 319633 - View products that this article applies to.

This article was previously published under Q319633

SYMPTOMS

If you try to use the fully qualified domain name (FQDN) to access a Document Library, you may receive the following error message:

Script Execution Error: Error executing INVOKE query.

This issue may occur if the following conditions are true:

You use the Server Template for SharePoint Portal Server to run the IIS Lockdown Wizard.
You accept all default settings and options for the SharePoint Portal Server Template.

Back to the top | Give Feedback

When you install the IIS Lockdown Wizard with the default settings for SharePoint Portal Server Template, the Administration Web Site is removed. This changes the enumeration of sites, which causes the INVOKE error.

By default, IIS Web sites are numbered sequentially as they are created. For example:

W3SVC/1: typically the Default Web Site
W3SVC/2: typically the Administration Web Site
W3SVC/3: typically the first user-created Web site

When the administration Web site is removed, the sites are no longer numbered sequentially. For example:

W3SVC/1: the Default Web Site
W3SVC/3: the first user-created Web site
W3SVC/4: the second user-created Web site

Back to the top | Give Feedback

WORKAROUND

To work around this issue, use either of the following methods.

Method 1: Reapply Adjusted IIS Lockdown Settings

Rerun the IIS Lockdown Wizard, which will re-apply all pre-installation settings such as access permissions and virtual directories (for example, IISAdmin). After this is successfully completed, rerun the IIS Lockdown Wizard one more time. To do this, follow these steps:

Remove the current IIS Lockdown settings:
1. Start the IIS Lockdown Wizard.
2. On the This Server Was Already Configured page, click Next.
3. Click Yes when you are prompted to continue.
4. When the wizard is completed, click Next, and then click Finish.
Apply the adjusted IIS Lockdown settings:
1. Start the IIS Lockdown Wizard.
2. On the Welcome to the Internet Information Services Lockdown Wizard page, click Next.
3. On the End User License Agreement page, click I agree, and then click Next.
4. On the Select Server Template page, select the SharePoint Portal Server template, and click to select the View template settings check box, and then click Next.
5. On the Internet Services page, select the appropriate services to retain, and then click Next.
6. On the Script Maps page, click to select all the check boxes except the Active Server Pages (.asp) check box, and then click Next.
  
  NOTE: Do not click to select the Active Server Pages (.asp) check box.
7. On the Additional Security page, accept all of the defaults except the IISAdmin check box, and then click Next.
  
  NOTE: Do not click to select the IISAdmin check box. The IISAdmin check box should be cleared so that the virtual directory is maintained.
8. On the URLScan page, choose to install the URLScan filter on the server, and then click Next.
9. On the Ready to Apply Settings page, review the configuration information, and then click Next.
10. When the wizard is completed, click Next, and then click Finish.

You can now use the FQDN to browse the document library of SharePoint Portal Server, and the IIS Lockdown Wizard maintains the highest level of security.

Method 2: Create a New Web Site (W3SVC/2)

Create another Web site in Internet Services Manager. This new Web Site will have the Web site number of the previously used Administration Web Site (for example, W3SVC/2).

If you do not want to host another Web site, you can create a placeholder Web site to allow the sequential numbering of Web sites in IIS. To do this, follow these steps:

In the InetPub folder, create a directory named PLACEHOLDER.
Start the Internet Services Manager:
1. Click Start, point to Programs, and then click Administrative Tools.
2. Click Internet Services Manager.
Right-click your computer name, click New, and then click Web Site.
When the Web site creation wizard appears, click Next.
Type Placeholder for the site description, and then click Next.
Type 127.0.0.1 for the IP address and PLACEHOLDER for the host header, and then click Next.
Type or locate the path for the Placeholder folder that you created earlier, and then click Next.
Click to clear all Web access permissions, and then click Next.
Click Finish to close the wizard.
Right-click the newly-created Placeholder Web site in the Internet Services Manager, and then click Stop.

The new Web site is now created, but it cannot be browsed from Web clients.

Back to the top | Give Feedback

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Back to the top | Give Feedback

MORE INFORMATION

The Extranet Configuration tool (spsextranet) is a Resource Kit utility that is available from Microsoft. With the Extranet Configuration tool, SharePoint Portal Server administrators can access a SharePoint Portal workspace by using an FQDN. Administrators can also configure specific authentication and expose SharePoint Portal Serverworkspaces on an extranet Web site. This tool is available in the form of a script named Spsconfig.wsf. For more information about the utility and other SharePoint Portal Server Resource Kit tools, visit the following Microsoft Web sites:

http://www.microsoft.com/technet/prodtechnol/sppt/sharepoint/default.mspx/default.asp

(http://www.microsoft.com/technet/prodtechnol/sppt/sharepoint/default.mspx/default.asp)

To secure your Microsoft Internet Information Services (IIS) programs such as SharePoint Portal Server in an Internet-configured environment, Microsoft highly recommends the use of the IIS Lockdown Wizard. For more information about the Lockdown Wizard, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/tools/locktool.mspx

(http://www.microsoft.com/technet/security/tools/locktool.mspx)

Back to the top | Give Feedback