BUG: Internet Publishing Provider May Return a False Error Code When Run from ASP (250537)

The information in this article applies to:

Microsoft OLE DB Provider for Internet Publishing 1.0

This article was previously published under Q250537

SYMPTOMS

When the Microsoft OLE DB Provider for Internet Publishing is called from an ASP page, certain operations (such as uploading, downloading, moving, copying, creating, or updating row data) incorrectly report a failure even though the operation was successful.

CAUSE

The failure is due to file permissions set on the server. When returning data from a remote site, the Internet Publishing Provider attempts to cache the retrieved data for offline use in a folder for which the IIS anonymous account does not have write access. However, access to the location is not required for the operation to succeed, so an error value is returned even though the operation completed successfully.

RESOLUTION

To avoid the problem when running from ASP, system administrators can specify that the provider run under a specific user account that has the proper permissions, or change the ACLs for the following locations to give read/write access to the IIS anonymous account:

Windows NT 4:

 C:\Winnt\Profiles\Default User\Application Data

Windows 2000:

 C:\Documents and Settings\Default User\Application Data\Microsoft

STATUS

Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.

REFERENCES

For additional information about security and IIS, please click the article numbers below to view the articles in the Microsoft Knowledge Base:

158229 INFO: Security Ramifications for IIS Applications

Modification Type:	Major	Last Reviewed:	3/1/2006
Keywords:	kbbug kbpending KB250537