当将DCOM与IIS和.aspx页面一起使用时，可以解决DCOM交互式用户权限错误，该页面显示来自数据库的数据? [英] Is it possible to resolve a DCOM Interactive User permission error, when using DCOM with IIS and .aspx pages displaying data from a database?
问题描述
有很多听起来相似的问题，但没有一个能解决这个特定问题.
There are a number of similar-sounding questions to this, but none of them quite address this specific question.
-
https://social.technet.microsoft.com/Forums/windows/zh-CN/4aa643b6-f90d-4672-aba4-6c0a290e22d4/distributedcom-permissions?forum=win10itprosecurity
https://www.automation.com/pdf_articles/Troubleshooting_OPC_and_DCOM.pdf
我确定还有很多与此类似的页面，但我将在这里停止.
I'm sure there are many other pages that are similar to this, but I'll stop here.
方案是这样的: Windows 10 ... ...托管一个从真实传感器中获取近实时数据的应用程序(或应用程序集群)，将数字解析，将其写入数据库，然后通过IIS和DCOM将其显示在浏览器.aspx页上 (这是一个古老的神秘应用程序/一组应用程序，其源代码或文档很少或没有).
The scenario is this: Windows 10... ...hosting an application (or cluster of applications) that takes near-real-time data from real sensors parses the numbers, writes them to a database, and presents them onto a browser .aspx page via IIS and DCOM (this is an archaic mysterious application/set of applications for which there is limited or no source code or documentation).
有时，在完成所有安装和配置步骤之后，会向您显示localhost/something.aspx页面，尽管您可以通过将鼠标悬停在字段上来查看变量，但不会填充值. 在Windows事件查看器中查看，您可能会看到如下错误:
Occasionally, after working through all the installation and configuration steps, you are presented with a localhost/something.aspx page and whilst you can see the variables by hovering over the fields, the values are not populated. Looking in Windows event viewer, you may see errors like this:
事件ID 10016-特定于应用程序的权限设置不授予COM Server应用程序的本地激活权限
特定于应用程序的权限设置不会授予具有CLSID {...在注册表中找到的长十六进制数字...}的COM Server应用程序本地启动权限
即: HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ AppID {8D8B8E30-C451-421B-8553-D2976AFA648C} 还有另外两个键，但是我键入的PC上没有它们.一个是已安装的用于处理DCOM的组件，另一个是与交互式用户有关的.
i.e.: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID{8D8B8E30-C451-421B-8553-D2976AFA648C} There are two more keys, but I don't have them on this PC that I'm typing on; one is an installed component for handling DCOM, and another one is to do with the Interactive User as well.
已安装的通常是报告无权限的一个，通常针对"NT AUTHORITY \ NETWORK SERVICE SID(S-1-5-20)"用户(形成为一组管理员和用户帐户) [ https://www.experts-exchange.com/questions/24205909/NT-AUTHORITY-NETWORK-SERVICE-SID-S-1-5-20-on-Windows-Server-2003.html ...目前无法访问此页面]；然后，当您进入安全性并为其添加特定权限时，将剩下的报告上面的交互式用户密钥，即8d8 ...一个和726 ...一个，您不能为其编辑权限.
The installed one, is usually the one that reports having no permissions, typically for the "NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20)" user (formed into a group of admin and user accounts) [https://www.experts-exchange.com/questions/24205909/NT-AUTHORITY-NETWORK-SERVICE-SID-S-1-5-20-on-Windows-Server-2003.html... can't access this page at the moment]; then when you go into the security and add specific permissions for it, you're left with it reporting the above Interactive User keys, the 8d8... one and a 726... one, which you can't edit permissions for.
令我烦恼的是，这显然是一个完整的神奇谜团，在计算机系统中是无法接受的！ :D 当前的解决方案是不费吹灰之力，只格式化机器，重做窗口，完成所有应用程序安装，IIS和DCOM步骤以及从头开始重新配置.aspx配置，并希望达到最佳效果-即:您做事的神奇特殊顺序就是因为它能做"才使它起作用.我认为这有点荒谬且耗时，更重要的是，这使我感到非常烦恼，即对于真正的问题是什么以及解决方案可能是什么，并没有一个清晰的概念.
What bugs me about this is that it's apparently a complete magical mystery, which is unacceptable in a computer system! :D The current solution is to just no bother fiddling, and just format the machine, redo windows, work through all the application installation, IIS, and DCOM steps, and .aspx config again from scratch, and hope for the best - i.e.: that the magical special order that you do things in just makes it work, "because it does". I think this is a bit ridiculous, and time-consuming, more to the point, it bugs me intensely that there's not really a clear notion of what the actual problem is and what the solution might be.
必须有特定的正在发生或未发生的事情导致DCOM无法与.aspx网页对话；当然，可以在活动结束后进行一些调整，而无需更改整个系统并花费很多时间来重做所有这些事情.好像某个东西被拔掉了"，或者具有与.aspx页面所查看或过滤的身份/名称/编号不同的东西，也许是代码中的某些东西? IIS选择中的某些内容?需要重置的东西吗?不确定...
There must be something specific happening or not happening that is causing the DCOM to not talk to the .aspx webpage; surely something that can be tweaked after the event without zapping the whole systems and spending ages redoing it all. It's as if something is "unplugged" or has a different identity/name/number from what is being looked at or filtered by what the .aspx page ingests, maybe something in the code? something in the IIS selections? something that needs resetting? Not sure...
我不是要万灵药，但是如果有人愿意帮助解决这个问题，将不胜感激，这很烦人和令人沮丧，我想深入浅出，并希望创建一个其他人可能会受益的确定性线程.
I'm not asking for a silver bullet, but if anyone is willing to help work through this, that would be appreciated, it's just annoying and frustrating, and I'd like to get to the bottom of it, and hopefully create a definitive thread that others might benefit from.
推荐答案
在进入这些冗长的过程并编辑注册表之前.我想看看本地连接设置"中的TCP/IPv6.如果已启用，则将其禁用，然后刷新dns或重新启动服务器.希望它对将来的求职者有帮助.
Before going into these lengthy procedures and editing registry. I would you look at TCP/IPv6 in the Local Area Connection Settings. If it is enabled then disable it and flush the dns or restart your server. Hope it helps the future seekers.
保持祝福大家.
这篇关于当将DCOM与IIS和.aspx页面一起使用时，可以解决DCOM交互式用户权限错误，该页面显示来自数据库的数据?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
