How do I properly instantiate 32-bit COM objects in classic ASP after installing Windows Update KB4340558?
On Windows Server 2012 R2, after installing update KB4340558 (update history) / KB4338424 (installed updates) we can no longer instantiate .NET .DLLs (interop) in classic ASP in 32-bit mode using server.createobject. We receive the error 0x800A01AD "ActiveX component can't create object"
When we uninstall the update, the error disappears. Despite my best efforts, I was unable to find an alternate solution to uninstalling. We would prefer to reinstall the update and make whatever changes were necessary to Windows Server and/or the DLL's to allow the COM objects to be instantiated properly. There are no clues in the system logs, no clues in the CVE database, and no clues in the errors ASP is generating. Please help!
We were affected with multiple customers too.
I ruled out invalid strong-name signing of our assemblies, since the .NET Assemblies from the Framework itself were affected by that access-denied error too.
Finally I managed to solve the issue by configuration. Apparently the authenticating identity of the website has now to match the identity of the app-pool. Or IUSR has no longer enough permissions.
EDIT: 19.07.2018
Warning! This change also has a side-effect:
The asp-classic event "Session_OnEnd" was no longer called and therefore resources eventually could no longer be freed. But there is a fix for that, too!
The ASP-Config-Property "system.webServer/asp/runOnEndAnonymously" has to be "false", then the event fires again.
EDIT 2: 23.07.2018
As Dijkgraaf pointed out, Microsoft now considers this "new behaviour" a bug. So i guess my "solution" should now be considered a workaround until a new patch comes to rescue.
- Accessing a .NET Assembly from classic ASP
- Which performs best: Classic ASP, ASP.NET WebForms or ASP.NET MVC?
- Why am I getting Data provider or other service returned an E_FAIL status? SQL Native Client
- Refactoring "include file hell"
- classic asp character encoding
- Is codepage 65001 and utf-8 the same thing?
- Accessing Employee ID via LDAP in a Classic ASP/VBScript application
- How to AES Encrypt in .NET without an IV
- A complete image manupulation solution in classical ASP
- Using 2FA authentication with classic ASP always returns an invalid response
- Parse Json string to Classic ASP page
- ServerXMLHTTP request returing data but not returning url of final page after 301 redirection
- ORDER BY clause is invalid unless TOP or FOR XML is also specified
- Check if an Object exists in VBScript
- Regex to split a CSV
- Classic ASP problem connecting to remote SQL Server database
- How to tell if web visitor is a robot
- How to list distinct column after a join and also count?
- Calling VBScript from JavaScript or vice versa?
- Check for Nothing in vbscript/classic asp
- Error checking for NULL in VBScript, getting "Object Required"
- A class contains an array of objects. Do I need to set each of them to nothing on terminating the containing class?
- How do I set a default content page on classic ASP?
- HTTP/1.1 New Application Failed
- Difference between asp and asp.net
- iis 8.5, how to set visitor permission only on current site?
- How do you replace the last comma with "and" in a comma-separated string?
- CRUD operation not work with ADODB and SQL server using MSOLEDBSQL19 Provider and "strict" option (TLS1.3)
- JavaScript won't execute when calling webpage via VBScript using XMLHttpRequest
- Json not being parsed ConvertAPI