Solved

configure IIS for cgi

Posted on 2011-02-15
7
1,829 Views
Last Modified: 2013-12-25
I am getting an error when trying to run a perl script. I put a file called task1.cgi in the directory
C:\inetpub\wwwroot
then I tried to run it by going to www.mydomain.com/task1.cgi but I get an error message (see code below) which says
Error Summary
HTTP Error 403.19 - Forbidden
The configured user for this application pool does not have sufficient privileges to run CGI applications.

It mentions something later on in the message about doing something for the anyomous user but I cannot find reference to that user in %windir%\System32\Secpol.msc

Any help would be appreciated.
HTTP Error 403.19 - Forbidden
The configured user for this application pool does not have sufficient privileges to run CGI applications.
Detailed Error Information
Module	CgiModule
Notification	ExecuteRequestHandler
Handler	CGI as Perl64
Error Code	0x80070522
Requested URL	http://www.chatminer.com:80/task1.cgi
Physical Path	C:\HostingSpaces\getready\chatminer.com\wwwroot\task1.cgi
Logon Method	Anonymous
Logon User	Anonymous
Most likely causes:
CGI applications are launched as the authenticated user, if the site has anonymous authentication configured, the application may be launched as the anonymous user account.
If CreateProcessAsUser is true, then CGI applications are launched as the authenticated user.
If CreateProcessAsUser is false, then CGI applications are launched as the process identity.
The user account under which the application pool is configured to run does not have the following privileges:
Replace a process level token - SE_ASSIGNPRIMARYTOKEN_NAME.
Adjust memory quotas for a process - SE_INCREASE_QUOTA_NAME.
Things you can try:
If the CGI application is launched as the anonymous user, you can set the IIS configuration property, called CreateProcessAsUser, to False. This setting launches the CGI application as the application pool identity.
Add the necessary privileges to the user account the application pool is running as by completing the following:
Open the Local Security Policy settings MMC. Start %windir%\System32\Secpol.msc.
Expand the Local Policies node and then click User Rights Assignment.
In the right-hand pane, double-click Adjust memory quotas for a process.
Add the application pool identity to this user right and then click OK.
In the-right hand pane, double-click Replace a process token.
Add the application pool identity to this user right and then click OK.
Restart IIS for the changes to take effect.

Open in new window

0
Comment
Question by:onyourmark
  • 3
  • 3
7 Comments
 
LVL 16

Expert Comment

by:sjklein42
Comment Utility
0
 
LVL 9

Accepted Solution

by:
shalabhsharma earned 500 total points
Comment Utility
1. Open "Local Security Settings" MMC snap-in (Start -> Administrative Tools -> Local Security Policy).

2. Navigate to "Security Settings -> Local Policies -> User Rights Assignments":

3. Add "IIS_WPG" group to the following policies:

    *     Adjust memory quotas for a process
    *     Generate security audits
    *     Log on as a service
    *     Replace a process-level token

4. Close MMC snap-in.

5. Restart IIS (Start -> Run... -> iisreset).
0
 

Author Comment

by:onyourmark
Comment Utility
hi. I don't see how to add IIS_WPG. Please see attached screen shots. Thank you. first second
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:onyourmark
Comment Utility
Hi. I get the message "Name Not Found" when I put IIS_WPG at the object name.
0
 
LVL 9

Assisted Solution

by:shalabhsharma
shalabhsharma earned 500 total points
Comment Utility
Click on object type select group

Ok

Now enter IIS_wpg
0
 

Author Comment

by:onyourmark
Comment Utility
I already tried that. It did not work. Thanks
0
 
LVL 9

Assisted Solution

by:shalabhsharma
shalabhsharma earned 500 total points
Comment Utility
you have ii6 or iis7
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

Debug Tools to analyse IIS process: This article focus on taking memory dumps from IIS to determine which code is taking more time and to analyse which calls hangs/causes more CPU usage. To take dumps,download the following. Install1: To st…
Email validation in proper way is  very important validation required in any web pages. This code is self explainable except that Regular Expression which I used for pattern matching. I originally published as a thread on my website : http://www…
The viewer will learn how to count occurrences of each item in an array.
The viewer will learn the basics of jQuery, including how to invoke it on a web page. Reference your jQuery libraries: (CODE) Include your new external js/jQuery file: (CODE) Write your first lines of code to setup your site for jQuery.: (CODE)

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now