Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

MVolo's Blog — Sun, 09 Dec 2007 02:17:35 GMT

ASP.NET 2.0 applications on IIS 7.0 are hosted using the ASP.NET Integrated mode by default. This post lists the changes in behavior that you may encounter when deploying your ASP.NET applications on IIS 7.0 on Windows Vista and Windows Server 2008.

Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Noticias externas — Sun, 09 Dec 2007 02:19:27 GMT

ASP.NET 2.0 applications on IIS 7.0 are hosted using the ASP.NET Integrated mode by default. This new

A list of Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Hosam Kamel — Tue, 11 Dec 2007 09:11:44 GMT

Mike Volodarsky has post a list of breaking changes for ASP.NET 2.0 application running in integrated

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Richard — Tue, 11 Dec 2007 12:09:37 GMT

The link to "Implementing a two level authentication scheme using Forms Authentication and another IIS authentication method in IIS 7.0" is broken - it just returns a blank page.

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Manoel Braga — Tue, 11 Dec 2007 14:30:30 GMT

para melhorar minhas habilitações técnicas.

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Manoel Braga — Tue, 11 Dec 2007 14:32:01 GMT

Aprendizado.

Links for Architect Forum IIS7 Session

Eric Nelson - Development for .NET Framework for ISVs — Tue, 11 Dec 2007 15:19:04 GMT

Today I delivered an overview of IIS7 at the Architect Forum held at our offices in Reading. I promised

25 issues: Deploying ASP.NET apps on IIS 7 on Vista/Windows 2008

WindowsDevPro Blog — Tue, 11 Dec 2007 17:07:48 GMT

See the blog of a Microsoft IIS Program Manager on advanced IIS server deployment and development. Mike

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Ivaylo Bakalov — Tue, 11 Dec 2007 19:53:13 GMT

The link for issue 4 is broken: http://mvolo.com/tiny_mce/jscripts/tiny_mce/blank.htm#_msocom_1 Regards

Our daily link (2007-12-11)

Trumpi's blog — Tue, 11 Dec 2007 20:14:07 GMT

I'm replacing my del.icio.us feed with posts to this blog. That way they will appear on the website

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Robert — Wed, 12 Dec 2007 18:48:34 GMT

The link M1 is currently broken. We currently use a mixed authentication process on our web apps, so knowing what that pattern needs to be going forward would be very helpful.

December 16th Links: ASP.NET, ASP.NET AJAX, ASP.NET MVC, VS, .NET, IIS7, WPF

ScottGu's Blog — Mon, 17 Dec 2007 07:29:25 GMT

Here is the latest in my link-listing series .  Also check out my ASP.NET Tips, Tricks and Tutorials

December 16th Links: ASP.NET, ASP.NET AJAX, ASP.NET MVC, VS, .NET, IIS7, WPF

BusinessRx Reading List — Mon, 17 Dec 2007 07:56:51 GMT

Here is the latest in my link-listing series .  Also check out my ASP.NET Tips, Tricks and Tutorials

December 16th Links: ASP.NET, ASP.NET AJAX, ASP.NET MVC, VS, .NET, IIS7, WPF

Elan Hasson's Favorite Blogs — Mon, 17 Dec 2007 08:16:56 GMT

Here is the latest in my link-listing series .  Also check out my ASP.NET Tips, Tricks and Tutorials

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Abhishek Hingu — Mon, 17 Dec 2007 12:39:27 GMT

can any one please tell me, is there any facility in IIS Server to handle URL Rewriteing without any code in asp.net like a Apache server facility

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

ivaylo bakalov — Mon, 17 Dec 2007 21:26:51 GMT

The link to this article "Implementing a two level authentication scheme using Forms Authentication and another IIS authentication method in IIS 7.0" appears broken. Regards.

[导入]Interesting Finds: 2007.12.12

gOODiDEA — Tue, 18 Dec 2007 03:30:38 GMT

BLOCKED SCRIPT AJSONQueryLanguage

.NET: BreakingChangesforASP.NET2.0applicationsrunnin...

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Tue, 18 Dec 2007 08:29:31 GMT

Hi Ivaylo, Robert,

The link to the explanation of issue #4 will be up shortly.

Thanks,

Mike

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Anders Ljusberg — Tue, 18 Dec 2007 16:05:26 GMT

Hi Mike,

I had a problem with URL rewriting and found you gave the solution in this thread:

http://forums.iis.net/t/1031243.aspx

Did you ever get around to create that blog post about runAllManagedModulesForAllRequests="true", if so can you please post a link to it?

Cheers,

Anders

December 16th Links: ASP.NET, ASP.NET AJAX, ASP.NET MVC, VS, .NET, IIS7, WPF

Programming — Wed, 19 Dec 2007 10:58:57 GMT

Here is the latest in my link-listing series .  Also check out my ASP.NET Tips, Tricks and Tutorials

MSDN Magazine: Enhance Your Applications with ASP.NET Integrated Pipeline

ServerSide with IIS 7.0 — Thu, 20 Dec 2007 20:37:39 GMT

This month, the Enhance Your Apps With the Integrated ASP.NET Pipeline article is finally out in MSDN

December 16th Links: ASP.NET, ASP.NET AJAX, ASP.NET MVC, VS, .NET, IIS7, WPF

Developer Blogs — Fri, 21 Dec 2007 15:41:35 GMT

Here is the latest in my link-listing series .  Also check out my ASP.NET Tips, Tricks and Tutorials

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Kima — Fri, 21 Dec 2007 20:26:33 GMT

Hey Mike, Ed Maurer posted a blog (http://blogs.msdn.com/ed_maurer/archive/2007/12/14/nxcompat-and-the-c-compiler.aspx) on the C# compiler changes in .NET 3.5 (and .NET 2.0 SP1) causing all assemblies to be marked with the NX flag. This is affecting components using COM interop to use native components, in the cases where those native components link to pre-ATL80, as pre-ATL80 may run illegal calls that are stopped under DEP. I am wondering if this has any impact to ASP.NET? I know for a fact that native components linking to pre-ATL80 that worked as add-ins in VS2008 fail under DEP, since VS2008 itself is marked with the NX flag. I also know that w3wp.exe is marked with the NX flag on Vista (the system I checked this had .NET 3.5 installed, but I am not sure if w3wp.exe is installed by the .NET fwk or Vista/IIS itself). I also know that ASP.NET 1.1 apps couldn't run on Vista/IIS7 due to DEP, but that was 1.1-specific and got fixed with .NET 1.1 SP1. Unfortunately I have trouble verifying if my Asp.NET 2.0 app (using native components linking to ATL71) would crash under DEP as I need to do a lot of testing to ensure I covered all of the workflows, so I am wondering if you can confirm if DEP could be a problem for ASP.NET using native components or not? Thanks, Kima

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Fri, 21 Dec 2007 20:59:55 GMT

Hi Kima,

As far as I know, the NX bit is for PE assemblies only, and enables DEP per process. The changes to the compiler sound like they simply enable DEP by default for .exe files compiled with VS 2008. This doesnt affect ASP.NET hosted in w3wp.exe.

Like you said, w3wp.exe on Vista enables DEP by default so any code executed in process will be subject to DEP. If your managed code invokes native in-process COM or DLL code that has trouble under DEP, your app will as well.

Thanks,

Mike

Making your ASP.NET 2.0 app work in IIS 7

LA.NET [EN] — Fri, 21 Dec 2007 21:03:02 GMT

Another great post by Mike Volodarsky that presents some problems that migh occur when you deploy a 2

Making your ASP.NET 2.0 app work in IIS 7

ASPInsiders — Fri, 21 Dec 2007 21:57:10 GMT

Another great post by Mike Volodarsky that presents some problems that migh occur when you deploy a 2.0

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Joshua Flanagan — Sun, 23 Dec 2007 19:21:15 GMT

In #5 (do not send credentials on initial request), you mention that most browsers send the initial request anonymously. What about web service calls, and use of the HttpWebRequest, and System.Net.WebClient? I always set the Credentials property on these objects to CredentialCache.DefaultCredentials when I know the resource is protected. This should be a very common scenario. I assume that means the credentials will be sent on the initial request and things will start failing. Do I now need to write code that first checks for the rejected response, and then re-submit the request with the credentials? (yuck) Or do those framework classes I mentioned already handle that under the hood?

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

geee — Mon, 24 Dec 2007 16:00:20 GMT

Mike , why cant we have a list of steps explaining how to configure am ASP.NET 2.0 application. None of the existing docs explain the end to end process

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Tue, 25 Dec 2007 05:17:56 GMT

Hi geee,

Setting up an ASP.NET application on IIS 7.0 is pretty easy - install ASP.NET from Windows Setup, create an IIS application (or use the built-in one) in InetMgr.exe, and drop in your files. A common gotcha is that IIS 7.0 is a modular server, so you need to install things like ASP.NET support and other features from Windows Setup before they become available.

You can find information on IIS 7.0 componentized setup here: http://www.iis.net/articles/view.aspx/IIS7/Deploy-an-IIS7-Server/Installing-IIS7/Install-IIS7-on-Vista.

If you are looking for more ASP.NET-specific information about developing your app, you should check out the extensive web community starting with www.asp.net. Do a web search for "setting up an asp.net application" to find tons more info.

You can discuss any specific installation or setup issues on forums.iis.net and forums.asp.net.

Thanks,

Mike

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Tue, 25 Dec 2007 05:24:05 GMT

Hi Joshua,

I believe the 2.0 HttpWebRequest and System.NET classes already handle this under the covers.

The 1.1 classes may experience problems based on what I've seen. The quick workaround is to disable kernel authentication if you have such clients, as shown in the workaround.

Thanks,

Mike

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Horton — Tue, 15 Jan 2008 17:08:52 GMT

Can we get the link for M1 fixed? All it brings up is a blank page and the issue is currently a showstopper for me if users want to run in Integrated mode instead of Classic.

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Mon, 11 Feb 2008 20:15:01 GMT

Appologies for taking so long to provide this. The link is now fixed.

You can access the post on using a two-level authentication scheme here: http://mvolo.com/blogs/serverside/archive/2008/02/11/IIS-7.0-Two_2D00_Level-Authentication-with-Forms-Authentication-and-Windows-Authentication.aspx.

Thanks,

Mike

Two-Level Authentication with Forms Authentication and Windows Authentication

MVolo's Blog — Mon, 11 Feb 2008 20:52:44 GMT

The integration of IIS and ASP.NET authentication stages in Integrated mode applications brings a lot

December 16th Links: ASP.NET, ASP.NET AJAX, ASP.NET MVC, VS, .NET, IIS7, WPF

Mirrored Blogs — Wed, 20 Feb 2008 07:53:52 GMT

Here is the latest in my link-listing series .  Also check out my ASP.NET Tips, Tricks and Tutorials

Fixed: CS url encoding problem on Vista

Rory Primrose — Mon, 25 Feb 2008 21:46:44 GMT

I previously posted about a Community Server url encoding problem on Vista. The problem was the urls

IIS7 - Kernel Mode Authentication

Wed, 05 Mar 2008 00:08:40 GMT

One of my customer was running into a kerberos issue on IIS 7.0. While working on this issue, I remembered

IIS7 - Kernel Mode Authentication

Rakki MK — Wed, 05 Mar 2008 00:10:11 GMT

One of my customer was running into a kerberos issue on IIS 7.0. While working on this issue, I remembered

IIS7 - Kernel Mode Authentication

Noticias externas — Wed, 05 Mar 2008 00:24:58 GMT

One of my customer was running into a kerberos issue on IIS 7.0. While working on this issue, I remembered

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Salman — Thu, 10 Apr 2008 19:57:13 GMT

Great post, I'm assuming MVC framework doesn't have any new issues?

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Tim Biden — Thu, 10 Apr 2008 22:32:32 GMT

So with the "Migration Errors #2" we have to do this for every site... Is there a way of making this the default for a web server with multiple domains and more to be added?

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Fri, 11 Apr 2008 00:52:41 GMT

Tim,

With the impersonation breaking change, you really should make sure that the application isnt affected by the lack of impersonation in early stages before configuring it to ignore this error, so doing it one by one makes sense. If you just bulk configure every app, you may miss those that will be affected.

However, if you have a list of those that are known not to be affected, the safest thing is to write a script that runs "appcmd migrate config <AppPath>" for all those apps. This way, you'll set them to ignore this error in one shot, AND, make sure that their other configuration is migrated before you disable validation.

If you just want to disable validation globally, set the <validation validateIntegratedModeConfiguration="false" /> in at the server level, or, just disable the validation module. However, this may result in incorrect behavior for apps that have not been migrated, so do it only after making sure that they have the correct migrated configuration / no issues with impersonation.

Thanks,

Mike

Ajax.NET and IIS 7 Integrated Mode

Community Blogs — Mon, 14 Apr 2008 15:07:16 GMT

As there are some questions on how to run Ajax.NET on IIS 7 (i.e. Windows Vista) in integrated mode instead

IIS 7.0: Get Started... extiendeMe

SergioTarrillo's RichWeblog — Mon, 28 Apr 2008 00:53:14 GMT

Para empezar a probar IIS 7 sobre Windows Server 2008, podemos descargar Windows Web Server 2008 , lo

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Steve Trefethen — Sat, 03 May 2008 05:46:41 GMT

Mike, Thanks for taking the time to put this list together, great resource!

how to get a six pack

how to get a six pack — Sun, 04 May 2008 00:28:20 GMT

Hi - just wanted to say good design and blog - cu Frank

IIS7 Breaking Changes for ASP.NET 2.0

If broken it is, fix it you should — Wed, 14 May 2008 07:36:13 GMT

I just came across this great post from Mike Volodarsky (a program manager in the IIS team) about breaking

IIS7.0 : Breaking changes for .net 2.0 apps

Creative Jar Blog — Wed, 14 May 2008 13:58:07 GMT

IIS7.0 : Breaking changes for .net 2.0 apps

IIS 7.0: Get Started... extiendeMe

ASP.NET Espanol Blogs — Tue, 20 May 2008 19:16:58 GMT

Para empezar a probar IIS 7 sobre Windows Server 2008, podemos descargar Windows Web Server 2008 , lo

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Rusty — Thu, 29 May 2008 20:40:34 GMT

I tried to set but the app fails with ...This configuration section cannot be used at this path. Any suggestions? + is a valid character in paths, isn't it?

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Fri, 30 May 2008 15:37:09 GMT

Rusty,

What are you trying to set / at what path? You may get this error if the config section is locked, as request filtering is by default in Vista prior to SP1.

> appcmd unlock config -section:requestFiltering

+ is rejected because it may lead to double dencoding of the url, which could create canonicalization vulnerabilities during application request processing. Its a good idea to keep allowDoubleEscaping = false and not use + characters in your URLs.

Thanks,

Mike

Ab exercise machine

Ab exercise machine — Thu, 12 Jun 2008 12:02:32 GMT

cool article

Liste de changements brisants pour ASP.NET si utilisé avec le mode intégré de IIS 7.0

CoqBlog — Sun, 15 Jun 2008 12:03:48 GMT

Dans le genre post qu'on ne retrouve jamais quand on en a besoin, celui-ci bien sympathique de Mike Volodarsky

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

EricLi — Wed, 09 Jul 2008 03:55:34 GMT

If I config the application using .Net 2.0, I receive an error message as "This can include HTTP Error 500.22, and HTTP Error 500.23: An ASP.NET setting has been detected that does not apply in Integrated managed pipeline mode.". However, if I config the application as .NET 3.5, everything is fine without requring any change. I am using VISTA64 + VS2008. Why is that?

Breaking changing in IIS 7.0 and ASP.NET

Scott Forsyth's Blog — Fri, 11 Jul 2008 17:38:25 GMT

This quick post is for my own sake so I can find it again later. :-) I refer to the following link often

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Kamran Shahid — Sat, 12 Jul 2008 06:00:56 GMT

Great Post.

Very descriptive Good Job Done Mike Volodarsky

[转]Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Benny_NET — Tue, 22 Jul 2008 07:47:57 GMT

[原文：http://mvolo.com/blogs/serverside/archive/2007/12/08/IIS-7.0-Breaking-Changes-ASP.NET-2.0-applic...

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Richard Price — Wed, 23 Jul 2008 09:42:34 GMT

I tried using the migrate command on vista ultimate but it is not allowed due to permissons 'cannot read from the configuration file due to permissions. I set full control access to the reporting services application directory for localhost. Still doesn't work. What next? 1) ASP.NET applications require migration when specifying configuration in or . You will receive a 500 - Internal Server Error. This can include HTTP Error 500.22, and HTTP Error 500.23: An ASP.NET setting has been detected that does not apply in Integrated managed pipeline mode. It occurs because ASP.NET modules and handlers should be specified in the IIS and configuration sections in Integrated mode. Workaround: 1) You must migrate the application configuration to work properly in Integrated mode. You can migrate the application configuration with AppCmd: > %windir%\system32\inetsrv\Appcmd migrate config "" 2) You can migrate manually by moving the custom entries in in the / and / configuration manually to the / and / configuration sections, and either removing the and configuration OR adding the following to your application’s web.config:

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

ss — Thu, 31 Jul 2008 06:28:50 GMT

Hi, I am not able to upload a file on ftp location. I am putting file into writeable folder fisrt, then I am putting the same file into the Attachment folder. But the file is going to the writeable folder, however it is not going to the attachment folder. It was working fine before 25th but started filing after that.. What could be the reason please let me know as soon as possible. Thanks & Regards, ss

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Dodge — Fri, 22 Aug 2008 14:28:34 GMT

Passport authentication is not supported??? How are we to use Windows LiveID authentication in Windows Server 2008 then? Are you scrapping Windows Live ID authentication as well? C'mon guys, there's nothing on the web regarding this and this is a big deal... get typing...

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

David — Mon, 25 Aug 2008 01:00:42 GMT

Hi. I am trying to run IIS on Vista Home Premium. I get "An ASP.NET setting has been detected that does not apply in Integrated managed pipeline mode." error. I tried to remove all .net installations. (I need just SQL server and Reporting Services that requires IIS). I uninstalled .net framework from my computer. Still getting the same error. What am I missing? All help are greatly appreciated. Thanks.

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Tue, 26 Aug 2008 04:36:10 GMT

David, please see item #1 in this post.

Thanks,

Mike

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Tue, 26 Aug 2008 04:38:14 GMT

Hi Dodge,

I'll blog about this sometime in the future. In the meantime, you'd be best off asking this at forums.iis.net.

Live ID auth should be supported in WS08 as far as I know, I believe MS has a program for supporting Passport users and getting them on the new APIs.

They should be able to direct you to the right place on the forums.

Thanks,

Mike

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

AP — Wed, 17 Sep 2008 22:56:20 GMT

I am facing the 500.19 error; error code 0x80070021 (change#3 mentioned in your blog above) with one of the application. I have Vista and IIS 7.0. So far I have tried the following things- 1. Given full access control to Everyone on inetpub folder (my application is in inetpub\wwwroot) 2. Tried accessing as the Vista super Administrator 3. deleting ISAPI filter entry from IIS manager 4. Giving full control to IIS_IUSRS and Users to inetpub folder. None of these things seem to work. The error message says it is unable to read the following part of the web.config file (requestfiltering is highlighted in red) I have tried using the workaround you have explained, but I am not sure what Application path should be used. Please help me resolve this issue. Thanks, AP

IIS 7 migráció: Request is not available in this context

Balássy György (MSDNKK) — Wed, 29 Oct 2008 12:26:33 GMT

Az elmúlt időszakban több alkalmazást migráltunk Windows Server 2008-ra és IIS 7-re. Volt olyan, amelyik

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Guilherme Morais — Tue, 11 Nov 2008 16:27:19 GMT

Thanks.... a lot.

HTTP 401.1 Error: Delegation

Half Blood Programmer, MSFT Chapter — Tue, 02 Dec 2008 09:54:34 GMT

HTTP 401 is a common error code you may see in an error page. While 401 has a few sub cases, 401.1 is

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

SG — Fri, 23 Jan 2009 07:33:44 GMT

"ASP.NET Integration with IIS7" is broken.

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Fri, 23 Jan 2009 19:42:04 GMT

The links seem to have changed. The new link is http://learn.iis.net/page.aspx/243/aspnet-integration-with-iis7/.

I'll update the post.

Thanks for the note -

Mike

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Milada — Thu, 12 Feb 2009 16:22:57 GMT

Hi Mike, I had 404.15 error while trying login with windows auth. My application worked fine with certificate, username&pass and DA. Bu it failed with windows auth. I tried with next commands: %windir%\system32\inetsrv\appcmd set config -section:requestFiltering -requestLimits.maxAllowedContentLength:1000000 %windir%\system32\inetsrv\appcmd set config /section:requestFiltering /requestLimits.maxQueryString:4096 Now, I cannot even run my home page to chose other type of login... Pls heelp :)

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Milada — Fri, 13 Feb 2009 15:01:57 GMT

Hi Mike, part of the problem is fixed... I deleted whole line with requestLimits, and of course restarted computer. But I still cannot do login with win auth. :S

Some links to IIS 7 information

Florian's weblog — Tue, 03 Mar 2009 10:28:40 GMT

IIS 7 changed fundamentally since IIS 6. Here are some links that might help you when you feel lost with

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Absorb — Thu, 18 Jun 2009 23:32:53 GMT

Hi Mike, I have a slightly different probem. I have a native module that should intercept requests at the BeginRequest stage (the requests are also consumed by other native and possibly managed modules). I find that if I hook in post auth stage, the requests go fine, but in earlier stages like BeginRequest, I get 503s returned. Any idea? Thanks

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Sun, 21 Jun 2009 02:07:16 GMT

Absorb,

You need to get the detailed error and figure out what exactly is going wrong. It sounds like your module is causing an AV that in turn is causing the application pool to become disabled.

Run your module under a debugger to see where it happens.

Thanks,

Mike

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Absorb — Tue, 23 Jun 2009 20:46:20 GMT

Thanks Mike. I actually found out that it fails whenever an E_FAIL error code gets returned from the RegisterModule fn. I tried returning an E_FAIL in the RegisterModule immediately after we enter and I get the same result: no response to a request for a while and eventually a 503.

Are we supposed to only report back S_OK and above in the RegisterModule? Also note that I have not subscribed to any event notifications at the point (since i return with an E_FAIL immediately). Thanks.

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Wed, 24 Jun 2009 14:11:04 GMT

Yes of course. If RegisterModule fails, the worker process will fail to start, which will eventually lead to your apppool being disabled/503 responses after start is attempted 5 times.

In general, S_FALSE and S_OK are the only success HRESULT codes you can return, and I recommend always using S_OK. IIS is very strict about failures - it doesnt subscribe to the "best effort" philosophy of ignoring error return codes and trying to load/execute anyway.

Thanks,

Mike

IIS 7.0 Server-Side : Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Fairfeeds.com — Sat, 25 Jul 2009 13:03:01 GMT

Thank you for submitting this cool story - Trackback from Fairfeeds.com

win7 validateIntegratedModeConfiguration

gf7788 — Sat, 05 Sep 2009 09:31:03 GMT

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Rafael — Wed, 30 Sep 2009 00:31:17 GMT

hi, I just want to know one thing. Is or isn't possible to impersonate in IIS 7? Whatever I do a get the same result. The process is running on the system account in the classic mode and always is visible in the taskmanager. I've tried everithing. Im a web developer with a iis 7 issue since last week. On iis 7 and iis 6 its really possible. Can you help me with this??

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Mike Volodarsky — Sat, 03 Oct 2009 02:56:55 GMT

Rafael,

It is definitely possible to impersonate. IIS supports a variety of execution identity modes depending on your application.

You can configure the ASP.NET application to impersonate the currently logged on user (if Anon/Basic Auth/Windows Auth is being used). ASP applications automatically impersonate the logged on user. The Integrated mode impersonation issues have to do with the inability to impersonate in early stages of the ASP.NET pipeline, which wont be an issue unless you have custom modules that rely on impersonation.

By default, IIS worker processes run under the Network Service account, and so does all other code that doesnt impersonate (including ASP.NET if impersonation is not enabled).

Note that impersonation happens per request and is not visible in the task manager. Only the application pool identity is since thats what the IIS worker process runs as.

NOTE that you should NEVER be running your IIS application pool as the LocalSystem account. The identity of the worker process depends entirely on the configured IIS application pool identity and has nothing to do with Classic/Integrated modes.

I suggest you read the security chapter in the IIS7 resource kit book to understand this further.

Regards,

Mike

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Ashish Agrawal — Wed, 11 Nov 2009 05:26:28 GMT

This is a great post.

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Elisha — Wed, 02 Dec 2009 07:46:39 GMT

Other websites use %systemroot% and I tried like so many times but still not working. I found your blog and you use %windir% where it solved my problem immediately. Thanks.

ASP.NET 2.0 Breaking Changes on IIS 7.0

Yeejie's Blog — Fri, 01 Jan 2010 21:24:15 GMT

ASP.NET 2.0 Breaking Changes on IIS 7.0

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

hackthisway — Thu, 21 Jan 2010 22:03:28 GMT

Helpful Info !

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Craig — Mon, 01 Mar 2010 15:29:37 GMT

Has anyone had the issue where integrated mode causes the / on the end of your base url (http://www.example.com/) to require authentication and redirects to your login page? And if so does anyone have a solution or workaround?

http://mvolo.com/blogs/serverside/archive/2007/12/08/IIS-7.0-Breaking-Changes-ASP.NET-2.0-applications-Integrated-mode.aspx

Twitter Mirror — Wed, 10 Mar 2010 04:04:25 GMT

http://mvolo.com/blogs/serverside/archive/2007/12/08/IIS-7.0-Breaking-Changes- ASP.NET -2.0-applications

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

kofi — Thu, 20 May 2010 13:14:04 GMT

I did have an error in my web.config file, which when fixed worked fine. I changed the true in '' tag with So instead I declared it with false and it worked.

Migrated this BlogEngine.net Blog to Windows Server 2008... Not Bad

Seth Webster on the web — Sat, 22 May 2010 14:59:32 GMT

Migrated this BlogEngine.net Blog to Windows Server 2008... Not Bad

Seth Webster on the web — Sat, 22 May 2010 14:59:32 GMT

Migrated this BlogEngine.net Blog to Windows Server 2008... Not Bad

Seth Webster on the web — Sat, 22 May 2010 14:59:33 GMT

Migrated this BlogEngine.net Blog to Windows Server 2008... Not Bad

[Azure] Migration : attention au web.config

RonnyK — Mon, 24 May 2010 17:09:40 GMT

Lors d’une migration d’un projet existant sur Azure, le principal stress, c’est de savoir si votre application

re: Breaking Changes for ASP.NET 2.0 applications running in Integrated mode on IIS 7.0

Magnus Markling — Tue, 25 May 2010 10:13:13 GMT

This was an excellent post, clear and precise. It's very valuable even today.