Sessionless Event Creates Session When Running Application (237003)


The information in this article applies to:

  • Microsoft Internet Information Server 4.0
  • Microsoft Windows NT Server 4.0 SP4
  • Microsoft Windows NT Workstation 4.0 SP4
  • Microsoft Windows NT Server, Enterprise Edition 4.0 SP4
This article was previously published under Q237003
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SYMPTOMS

When you use Microsoft Internet Information Server (IIS) to run a default Web site application in a separate memory space, a session may be established even though you specified a sessionless event in the Session_OnStart code of the application file. However, the session is only established the first time an Active Server Pages (ASP) page is loaded; after that, a sessionless event is set as specified.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

To start a sessionless default Web site in Internet Information Server, follow these steps:
  1. Right-click the application under Default Web Site.
  2. Click Properties.
  3. Click the Directory tab.
  4. Click to select Run in separate memory.

    The ASP pages and application files are loaded and administered by the Web Application Manager (WAM), which can be accessed at a command prompt by typing

    IWAM NetBIOS computername


    and then pressing ENTER.

REFERENCES

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
Modification Type:MinorLast Reviewed:6/23/2005
Keywords:kbBug KB237003
©2004 Microsoft Corporation. All rights reserved.