[windows2000] Re: OT: ASP VBScript Interact with Desktop
- From: "Ray Costanzo" <rcostanzo@xxxxxxxxxxxxxxx>
- To: <windows2000@xxxxxxxxxxxxx>
- Date: Wed, 18 Jul 2007 08:33:47 -0400
I THINK that changing it in the com services thing will do it, but I can't
say for sure. Most people just say screw it and put the IWAM account in the
local admin group. :) But what OS is on the server? If it's 2003, you can
setup an application pool that runs under a specific account that has rights
required within the domain to execute commands on remote machines and to
launch GSAK. I THINK that the app pool credentials apply to out-of-process
processes, but I'm not sure. I always just use trial and error to get such
things to work and hope that I didn't leave a giant security hole behind.
:-/
Don't feel bad at all when you're trying to jerry-rig things into working
ways they weren't originally intended. That always makes for a good
challenge!
The "Ray at home" probably was me. :]
> -----Original Message-----
> From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-
> bounce@xxxxxxxxxxxxx] On Behalf Of Sullivan, Glenn
> Sent: Wednesday, July 18, 2007 8:19 AM
> To: windows2000@xxxxxxxxxxxxx
> Subject: [windows2000] Re: OT: ASP VBScript Interact with Desktop
>
> No, unfortunately it doesn't have a command line.
>
> OK, so I know how to change the account that anonymous browsing happens
> under, on the directory security tab.
>
> How do I change the account that ASP is using to start GSAK? No matter
> what I try, it shows up in Task Manager as "IWAM_<machinename>"
>
> I feel like a neophyte.
>
> I think I just figured out that, in the "Component Services" snap in,
> under Com+ accounts, is IWAM_<machinename> for an account for "IIS
> Out-Of-Process Pooled Applications. If I change it there, will that
> do?
> That seems awfully global... Is there a better place?
>
> I'm gun-shy, since I don't know the IWAM password. I bet I could just
> change it in User Mangler, and match that, if I need to.
>
> I knew you would know... I was searching for answers on the web, and
> found a similar topic (only backwards... This person was trying to
> start
> a process on the DESKTOP, not the server) and there was an answer from
> "Ray at Home"
>
> I figured it had to be you...
>
> Thanks,
>
> Glenn Sullivan, MCSE+I MCDBA
> David Clark Company Inc.
> -----Original Message-----
> From: windows2000-bounce@xxxxxxxxxxxxx
> [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Ray Costanzo
> Posted At: Wednesday, July 18, 2007 7:45 AM
> Posted To: Windows 2000
> Conversation: [windows2000] Re: OT: ASP VBScript Interact with Desktop
> Subject: [windows2000] Re: OT: ASP VBScript Interact with Desktop
>
>
> I kinda follow what you mean, I think. :] I guess you could try still
> doing the same approach that I suggested, but startup
> \\yourServer\someShare\GSAK.exe The app itself will have to be run on
> that person's computer.
>
> So, this GSAK program doesn't have a command-line interface or an add-
> on
> that would give it one or anything?
>
> As for impersonation in classic ASP, most people either just ran pages
> NOT under the IUSR account in order to "be" someone else. But if you
> wanted to decide who you are on the fly, most people would use a
> component to do this.
> Many upload components, i.e. ASPUpload, have an impersonation feature.
>
> Ray at work
>
> > -----Original Message-----
> > From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-
> > bounce@xxxxxxxxxxxxx] On Behalf Of Sullivan, Glenn
> > Sent: Wednesday, July 18, 2007 7:28 AM
> > To: windows2000@xxxxxxxxxxxxx
> > Subject: [windows2000] Re: OT: ASP VBScript Interact with Desktop
> >
> > No, I want an application to run ON THE WEB SERVER. Not on the
> > desktop browsing the web PAGE.
> >
> > Let me explain:
> >
> > Google Earth has the ability to create KML files to import into the
> > map.
> >
> > It also has the ability for "network" KML files, whereby every time
> > you stop panning the map, GE will post the corner coordinates of the
> > map on the screen to a web server, and that web server returns a KML
> > file for that given area.
> >
> > I use a program called "GSAK" to manage my geocaching activities. It
> > has the ability to filter its data by Polygon (i.e., the square shape
> > defined by the coordinates GE sent) and create the appropriate KML
> > file.
> >
> > So, I wrote an asp page that can receive the coordinates, write them
> > to a file, and fire up GSAK, which then can read that file, filter
> the
>
> > data, export to KML, and then the asp page will pick that KML file
> up,
>
> > send it back to Google earth, and delete it.
> >
> > So, GSAK needs to run on the web server, not on the user's desktop.
> > But
> > unless it is run interactively, GSAK won't function correctly. Hence
> > my question... I find all sorts of resources for ASP.NET and
> > impersonation online, but not straight ASP.
> >
> > Thanks,
> >
> > Glenn Sullivan, MCSE+I MCDBA
> > David Clark Company Inc.
> > -----Original Message-----
> > From: windows2000-bounce@xxxxxxxxxxxxx
> > [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Ray Costanzo
> > Posted At: Wednesday, July 18, 2007 7:01 AM Posted To: Windows 2000
> > Conversation: [windows2000] Re: OT: ASP VBScript Interact with
> Desktop
> > Subject: [windows2000] Re: OT: ASP VBScript Interact with Desktop
> >
> >
> > This isn't really possible to do. Well, that's not really true.
> Will
>
> > the person be logged onto the same machine that's hosting the ASP
> page?
> > Or will it be Joe User logged onto \\JoesDesktop while accessing a
> > site on \\WebServer1?
> >
> > You may have to do something like change that site in question from
> > being run under the IUSR_local_machine account to an account that has
> > admin rights on Joe User's machine. Then, use a remote process
> > starter (rcmd.exe from the Resource Kit?) to remotely start the app
> on
>
> > Joe User's computer.
> >
> > Is something like this an option? I'd try it first in a vbs file on
> > your computer before trying to get it to then work in the IIS
> > environment.
> >
> > Does anyone have a good remote process starter (with a command line
> > interface) to recommend? I could try out some code here and post it.
> >
> > Ray at work
> >
> >
> >
> >
> > > -----Original Message-----
> > > From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-
> > > bounce@xxxxxxxxxxxxx] On Behalf Of Sullivan, Glenn
> >
> >
> > > I am trying to do something that I think should be simple... I want
> > to
> >
> > > invoke a program on my web server via ASP/VBScript.
> > >
> > > But I want the application to be visible and interactable (is that
> a
> > > word) to the currently logged on user at the desktop.
> > >
> >
> > *****************************
> > New Site from The Kenzig Group!
> > Windows Vista Links, list options
> > and info are available at:
> > http://www.VistaPop.com
> > *****************************
> > To Unsubscribe, set digest or vacation mode or view archives use the
> > below link.
> >
> > http://thethin.net/win2000list.cfm
> > *****************************
> > New Site from The Kenzig Group!
> > Windows Vista Links, list options
> > and info are available at:
> > http://www.VistaPop.com
> > *****************************
> > To Unsubscribe, set digest or vacation mode or view archives use the
> > below link.
> >
> > http://thethin.net/win2000list.cfm
>
> *****************************
> New Site from The Kenzig Group!
> Windows Vista Links, list options
> and info are available at:
> http://www.VistaPop.com
> *****************************
> To Unsubscribe, set digest or vacation
> mode or view archives use the below link.
>
> http://thethin.net/win2000list.cfm
> *****************************
> New Site from The Kenzig Group!
> Windows Vista Links, list options
> and info are available at:
> http://www.VistaPop.com
> *****************************
> To Unsubscribe, set digest or vacation
> mode or view archives use the below link.
>
> http://thethin.net/win2000list.cfm
*****************************
New Site from The Kenzig Group!
Windows Vista Links, list options
and info are available at:
http://www.VistaPop.com
*****************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/win2000list.cfm
Other related posts:
