Cannot play an .asx file that is embedded in tags with URLScan installed (327722)


The information in this article applies to:

  • Microsoft Internet Information Services version 5.1
  • Microsoft Internet Information Services 5.0
  • Microsoft Internet Information Server 4.0
This article was previously published under Q327722
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SYMPTOMS

When you have URLScan installed, you may not be able to play files that have an active stream redirector (.asx) extension and that are embedded in tags. However, you can play files that have an .asx extension and that are not embedded in tags.

RESOLUTION

To resolve this problem, follow these steps:
  1. Open the Urlscan.ini file with a text editor such as Notepad. By default, the Urlscan.ini file is located in \%windir%\System32\Inetsrv\UrlScan\URLScan.ini.
  2. Change the RemoveServerHeader setting in the Urlscan.ini file to 0. By default, RemoveServerHeader is set to 1. After you make the change, the line is as follows:
    RemoveServerHeader=0        ; RemoveServerHeader set to 0 does not remove the header from response
    NOTE: If the RemoveServerHeader setting is set to 0, you can use the AlternateServerName setting to specify a replacement for the default Server header. For example, you can specify the server header by making the following change: 
    AlternateServerName=NameOfServer
  3. Restart IIS services. To do this, run IISRESET at a command prompt.

MORE INFORMATION

Steps to reproduce the behavior

  1. Install Urlscan.

    307608 Availability of URLScan version 2.5 security tool

  2. Create an HTML file with the following code:Note Make sure that you substitute valid names for "servername" and "filename" in the code. 
    <HTML>
<HEAD>
<TITLE>Embedded Windows Media Player Control</TITLE>
</HEAD>
<BODY>
<OBJECT ID="MediaPlayer" WIDTH=320 HEIGHT=240
  CLASSID="CLSID:22D6f312-B0F6-11D0-94AB-0080C74C7E95"
  STANDBY="Loading Windows Media Player components..." 
  TYPE="application/x-oleobject"
  <PARAM name="autoStart" value="True">
  <PARAM name="filename" value="http://servername/filename.asx">
</OBJECT>
</BODY>
</HTML>
    Note The .asx file is a pointer to the .asf file that contains the actual clip to be played in Microsoft Windows Media Player.

    The following is sample code for the .asx file: 
    <ASX version = "3.0">
	<Entry>
	<REF HREF="http://servername/filename.asf" />
	</Entry>
</ASX>
  3. Access the HTML file by using a Web browser. The Web page appears with an embedded Windows Media Player window, but the .asx file may not play.

REFERENCES

For additional information, click the following article numbers to view the articles in the Microsoft Knowledge Base:

326444 How to configure the URLScan tool

325864 How to install and use the IIS Lockdown Wizard

Modification Type:MinorLast Reviewed:6/23/2005
Keywords:kbprb KB327722 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.