We have OI 3.7 running on NT4.0 w/IIS 4 and the only way to get the oicgi to work is by granting administrative rights to the user that runs the script. Does anyone know what rights would allow a user to run the script without granting admin rights?

Ken–

If you encounter this error there are a few things that should be checked:

1. Set the registry key

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\CreateProcessAsUser

to zero. If this registry key is not present create it.

2. Grant the IUSR_computername user the right "logon as service", as well as "administrator" rights. This is done from Start–]Programs–]Administrative Tools–]User Manager. "Logon as service" is present only when the Show Advanced User Rights check box is checked.

3. You must change the startup parameters of the Personal Web Server Services. The three services you have to change these for are the IIS Admin Service, the World Wide Web Publishing Service, and the FTP Publishing Service. Have the services start Automatically and Allow Service to Interact with the Desktop. This can be done through Start–]Settings–]ControlPanel–]Services–] Highlight the specific Service–]Startup…(button).

This is the only way I have gotten rid of the CGI has no access rights error so far.

Rob

Revelation

Rob,

Thank you for your quick response!

Actually I have been able to get the oicgi/inet_trace to work, I am just investigating a way to not grant administrative rights to the IUSR_computername. We are going to be using this on our Internet site and granting administrative rights to the IUSR_computername is a large security risk.

Ken

View this thread on the forum...