"Msxml2.ServerXMLHTTP.4.0" Access denied

[Guest]

I am trying to test a classic ASP application from my workstation and have it
communite with a secure website within the company. Right before the call to
the secure website, when trying to use the "Msxml2.ServerXMLHTTP.4.0"
component. The error number that > >shows up is: -2147024891.
I then tried the following from the following download site:

"http://msdn.microsoft.com/library/default.asp?url=/downloads/list/xmlgenera

l.asp"
url to download MSXML 4.0 Service Pack 2 (This is the service pack 2 release
of Microsoft XML Core Services (MSXML) 4.0, formerly called the Microsoft
XML Parser. This version has a number of improvements compared to MSXML
3.0.)

I read the release notes and I completed the steps up until "Resultant Set >of Policy".
" Security tightened when posting data using the ServerXmlHttp object >Security in the implementation of the MSXML 4.0 SP2 ServerXmlHttp object has >been enhanced to check the Internet Explorer security policy setting for >submitting non-encrypted form data. A security policy setting of "Disable" >or "Prompt" for the "Submit nonencrypted form data" option will result in an >"Access Denied" error message when attempting to post form data using the
ServerXmlHttp object. This is a change that can potentially break existing >code that uses earlier versions of the ServerXmlHttp object (such as prior
released versions of both MSXML 3.0 and MSXML 4.0) to post form data when >the Internet Explorer security policy setting for submitting non-encrypted
form data is not enabled.

To configure Internet Explorer security to allow submitting nonencrypted >form data for all users on a computer, do the following in Windows 2000 and >later:

From the Start menu, click Run, type "mmc" and then press ENTER.
From the File menu, select Add/Remove Snap-In.
In Add/Remove Snap-In, click Add.
In Add Standalone Snap-In, from the list of available snap-ins, scroll to
Resultant Set of Policy and select it, and then click Add. >The Resultant Set of Policy Wizard appears."

The "Resultant Set of Policy" never appeared in the dropdown list. Thus, I >was not able to complete this step.

I checked the installs for Windows 2000, and the Resultant Set of Policy was
not an optional component to add.

Thus, what would you suggest I do?

 

[Roger Abell]

Resultant set of policy is not a W2k era feature. It was first introduced
with the XP client and is supported in W2k3. You would need to attempt
this on a machine at current OS release levels.

An application should not dictate administrative policy of a Windows
infrastructure. Instead application designers should be able to function
within the infrastructure's administrative policies as they find it.
That said, the RSoP only lets one see what the current settings are.
It is not used to change them. You could use their directions for adjusting
setting levels and assume your environment is correctly configured so
that they are effective (after whatever propagation delays may be
involved.).

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA

I am trying to test a classic ASP application from my workstation and have it
communite with a secure website within the company. Right before the call to
the secure website, when trying to use the "Msxml2.ServerXMLHTTP.4.0"
component. The error number that > >shows up is: -2147024891.

I then tried the following from the following download site:

"http://msdn.microsoft.com/library/default.asp?url=/downloads/list/xmlgenera
Security in the implementation of the MSXML 4.0 SP2 ServerXmlHttp object

has >been enhanced to check the Internet Explorer security policy setting
for >submitting non-encrypted form data. A security policy setting of
"Disable" >or "Prompt" for the "Submit nonencrypted form data" option will
result in an >"Access Denied" error message when attempting to post form
data using theexisting >code that uses earlier versions of the ServerXmlHttp object (such
as prior

the Internet Explorer security policy setting for submitting non-encrypted
form data for all users on a computer, do the following in Windows 2000 and
later:

I >was not able to complete this step.