FIX: Error message when you try to administer a remote IIS 7.0 server and the impersonation level of the calling thread is set to Identify: "Exception Details: System.Runtime.InteropServices.COMException: Access is denied"

Article translations Article translations
Article ID: 956301 - View products that this article applies to.
Expand all | Collapse all

On This Page

SYMPTOMS

When you try to administer a remote IIS 7.0 server, you receive an error message that resembles the following message if the impersonation level of the calling thread is set to Identify:
Exception Details: System.Runtime.InteropServices.COMException: Access is denied.
This problem occurs when you use either of the following methods to administer the remote server:
  • Tools that require the Administrative Base Object (ABO) Mapper objects, such as Microsoft CRM Deployment Manager
  • The ABO Mapper APIs in custom code
Note The IIS Active Directory Services Interface (ADSI) API uses ABO. Therefore, this problem may occur with the ADSI API.

CAUSE

This problem occurs because the ABO Mapper API incorrectly uses the impersonation level of Identify when the ABO Mapper API tries to call a Windows API. The Windows API returns an "Access is denied" message when the Windows API receives a call that has an impersonation level of Identify.

RESOLUTION

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=support
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

You must have Windows Vista Service Pack 1 or Windows Server 2008 installed to apply this hotfix.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
For all supported 32-bit versions of Windows Server 2008 and of Windows Vista
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Abocomp.dll7.0.6001.22234209,40801-Aug-200803:24x86
Coadmin.dll7.0.6001.2223475,77601-Aug-200803:25x86
Iisadmin.dll7.0.6001.2223420,48001-Aug-200803:26x86
Iiscfg.dll7.0.6001.22234991,74401-Aug-200803:26x86
Inetinfo.exe7.0.6001.2223413,82401-Aug-200801:41x86
Infoadmn.dll7.0.6001.2223416,38401-Aug-200803:27x86
Infocomm.dll7.0.6001.22234227,32801-Aug-200803:27x86
Infoctrs.dll7.0.6001.222349,72801-Aug-200803:27x86
Infoctrs.hNot Applicable3,27618-Dec-200721:05Not Applicable
Infoctrs.iniNot Applicable22,87218-Dec-200721:05Not Applicable
Isatq.dll7.0.6001.2223455,29601-Aug-200803:27x86
Iscomlog.dll7.0.6001.2223419,96801-Aug-200803:27x86
Metadata.dll7.0.6001.22234268,28801-Aug-200803:28x86
Rpcref.dll7.0.6001.222347,68001-Aug-200803:30x86
Wamreg.dll7.0.6001.2223432,25601-Aug-200803:30x86
For all supported 64-bit versions of Windows Server 2008 and of Windows Vista
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Abocomp.dll7.0.6001.22234229,88801-Aug-200803:47x64
Coadmin.dll7.0.6001.2223482,94401-Aug-200803:48x64
Iisadmin.dll7.0.6001.2223424,06401-Aug-200803:50x64
Iiscfg.dll7.0.6001.222341,058,30401-Aug-200803:50x64
Inetinfo.exe7.0.6001.2223415,87201-Aug-200802:13x64
Infoadmn.dll7.0.6001.2223422,52801-Aug-200803:50x64
Infocomm.dll7.0.6001.22234270,33601-Aug-200803:50x64
Infoctrs.dll7.0.6001.2223412,28801-Aug-200803:50x64
Infoctrs.hNot Applicable3,27618-Dec-200721:06Not Applicable
Infoctrs.iniNot Applicable22,87218-Dec-200721:06Not Applicable
Isatq.dll7.0.6001.2223464,51201-Aug-200803:50x64
Iscomlog.dll7.0.6001.2223423,04001-Aug-200803:50x64
Metadata.dll7.0.6001.22234284,67201-Aug-200803:51x64
Rpcref.dll7.0.6001.222349,21601-Aug-200803:53x64
Wamreg.dll7.0.6001.2223437,88801-Aug-200803:54x64
Abocomp.dll7.0.6001.22234209,40801-Aug-200803:24x86
Coadmin.dll7.0.6001.2223475,77601-Aug-200803:25x86
Iisadmin.dll7.0.6001.2223420,48001-Aug-200803:26x86
Iiscfg.dll7.0.6001.22234991,74401-Aug-200803:26x86
Infoadmn.dll7.0.6001.2223416,38401-Aug-200803:27x86
Infocomm.dll7.0.6001.22234227,32801-Aug-200803:27x86
Infoctrs.dll7.0.6001.222349,72801-Aug-200803:27x86
Isatq.dll7.0.6001.2223455,29601-Aug-200803:27x86
Iscomlog.dll7.0.6001.2223419,96801-Aug-200803:27x86
Metadata.dll7.0.6001.22234268,28801-Aug-200803:28x86
Rpcref.dll7.0.6001.222347,68001-Aug-200803:30x86
Wamreg.dll7.0.6001.2223432,25601-Aug-200803:30x86
For all supported Itanium-based versions of Windows Server 2008
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Abocomp.dll7.0.6001.22234521,72801-Aug-200803:28IA-64
Coadmin.dll7.0.6001.22234193,02401-Aug-200803:29IA-64
Iisadmin.dll7.0.6001.2223454,78401-Aug-200803:32IA-64
Iiscfg.dll7.0.6001.222341,382,40001-Aug-200803:32IA-64
Inetinfo.exe7.0.6001.2223428,16001-Aug-200802:03IA-64
Infoadmn.dll7.0.6001.2223440,44801-Aug-200803:32IA-64
Infocomm.dll7.0.6001.22234555,00801-Aug-200803:32IA-64
Infoctrs.dll7.0.6001.2223424,06401-Aug-200803:32IA-64
Infoctrs.hNot Applicable3,27618-Dec-200721:06Not Applicable
Infoctrs.iniNot Applicable22,87218-Dec-200721:06Not Applicable
Isatq.dll7.0.6001.22234139,26401-Aug-200803:32IA-64
Iscomlog.dll7.0.6001.2223451,20001-Aug-200803:32IA-64
Metadata.dll7.0.6001.22234569,34401-Aug-200803:33IA-64
Rpcref.dll7.0.6001.2223414,33601-Aug-200803:37IA-64
Wamreg.dll7.0.6001.2223477,31201-Aug-200803:38IA-64
Abocomp.dll7.0.6001.22234209,40801-Aug-200803:24x86
Coadmin.dll7.0.6001.2223475,77601-Aug-200803:25x86
Iisadmin.dll7.0.6001.2223420,48001-Aug-200803:26x86
Iiscfg.dll7.0.6001.22234991,74401-Aug-200803:26x86
Infoadmn.dll7.0.6001.2223416,38401-Aug-200803:27x86
Infocomm.dll7.0.6001.22234227,32801-Aug-200803:27x86
Infoctrs.dll7.0.6001.222349,72801-Aug-200803:27x86
Isatq.dll7.0.6001.2223455,29601-Aug-200803:27x86
Iscomlog.dll7.0.6001.2223419,96801-Aug-200803:27x86
Metadata.dll7.0.6001.22234268,28801-Aug-200803:28x86
Rpcref.dll7.0.6001.222347,68001-Aug-200803:30x86
Wamreg.dll7.0.6001.2223432,25601-Aug-200803:30x86

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

REFERENCES

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

Properties

Article ID: 956301 - Last Review: December 12, 2008 - Revision: 1.0
APPLIES TO
  • Microsoft Internet Information Services 7.0
Keywords: 
kbhotfixserver kbautohotfix kbexpertiseinter kbqfe KB956301

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com