Jim -
You're right about where my focus is. I'll try to change it.
Here are some lines from the "mon"s with path = Server.MapPath("/db/mydb.mdb")
Regmon - I dunno what I'm looking at here but these lines seem relevant:
3441 10.17034721 dllhost.exe:1944 CloseKey HKU\.Default SUCCESS
3442 10.17066479 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\odbcinst.ini\Microsoft Access Driver (*.mdb) SUCCESS Access:
0x20019
3443 10.17070580 dllhost.exe:1944 QueryValue
HKLM\SOFTWARE\ODBC\odbcinst.ini\Microsoft Access Driver (*.mdb)\setup SUCCESS
"C:\WINDOWS\System32\odbcjt32.dll"
3444 10.17078018 dllhost.exe:1944 CloseKey
HKLM\SOFTWARE\ODBC\odbcinst.ini\Microsoft Access Driver (*.mdb) SUCCESS
3445 10.17097855 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3446 10.17103004 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3447 10.17107964 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3448 10.17121315 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3449 10.17125988 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3450 10.17130375 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3451 10.17134571 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3452 10.17138767 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3453 10.17143250 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3454 10.17147350 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3455 10.17151642 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3456 10.17155933 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3457 10.17160225 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3458 10.17164421 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3459 10.17168808 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3460 10.17175198 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3461 10.17179775 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3462 10.17184162 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3463 10.17188454 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3464 10.17192554 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3465 10.17197037 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3466 10.17201233 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3467 10.17205715 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3468 10.17209911 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3469 10.17214108 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3470 10.17218304 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3471 10.17222786 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3472 10.17226982 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3473 10.17231178 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3474 10.17235470 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3475 10.17239761 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3476 10.17243958 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3477 10.17248440 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3478 10.17252636 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3479 10.17256927 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3480 10.17261219 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3481 10.17266369 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3482 10.17270660 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3483 10.17275620 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3484 10.17280769 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3485 10.17285252 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3486 10.17289639 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3487 10.17294121 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3488 10.17298317 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3489 10.17302704 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3490 10.17307091 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3491 10.17311382 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3492 10.17315674 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3493 10.17320156 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3494 10.17324448 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3495 10.17328835 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3496 10.17333031 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3497 10.17337322 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3498 10.17341709 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3499 10.17346096 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3500 10.17350292 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3501 10.17354774 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3502 10.17358971 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3503 10.17363358 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3504 10.17367649 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3505 10.17371941 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3506 10.17377663 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3507 10.17382526 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3508 10.17386913 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3509 10.17391300 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3510 10.17395687 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3511 10.17400074 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3512 10.17404175 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3513 10.17408848 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3514 10.17412949 dllhost.exe:1944 OpenKey
HKU\.DEFAULT\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3515 10.17417336 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\ODBC\ODBC.INI\\Engines\Jet NOT FOUND
3516 10.17421722 dllhost.exe:1944 OpenKey
HKLM\SOFTWARE\Microsoft\Jet\3.5\Engines\Jet NOT FOUND
3517 10.19049263 dllhost.exe:1944 OpenKey HKLM\SOFTWARE\ODBC ACCESS DENIED
Access: 0x2001F BROOMHILDA\IUSR_BROOMHILDA
3518 10.19078350 dllhost.exe:1944 CreateKey HKLM\SOFTWARE\ODBC\Temporary
(volatile) Jet DSN for process 0x798 Thread 0xf50 DBC 0x111c024 Jet ACCESS DENIED
Access: 0xF003F BROOMHILDA\IUSR_BROOMHILDA
3519 10.19090080 dllhost.exe:1944 CreateKey HKLM\SOFTWARE SUCCESS
Access: 0x2000000
3520 10.19096565 dllhost.exe:1944 CreateKey HKLM\SOFTWARE\ODBC SUCCESS
Access: 0x2000000
3521 10.19101238 dllhost.exe:1944 CloseKey HKLM\SOFTWARE SUCCESS
3522 10.19115257 dllhost.exe:1944 CreateKey HKLM\SOFTWARE\ODBC\Temporary
(volatile) Jet DSN for process 0x798 Thread 0xf50 DBC 0x111c024 Jet ACCESS DENIED
Access: 0xF003F BROOMHILDA\IUSR_BROOMHILDA
3523 10.19118214 dllhost.exe:1944 CloseKey HKLM\SOFTWARE\ODBC SUCCESS
3524 10.19128895 dllhost.exe:1944 OpenKey HKCU NOT FOUND
3525 10.19145107 dllhost.exe:1944 OpenKey HKU\.Default SUCCESS Access:
0x2000000
And from Filemon:
126 2:07:57 PM inetinfo.exe:604 OPEN
C:\INETPUB\WWWROOT\subweb1\CHALLENGE\TEST.ASP SUCCESS Options: Open Access: All
127 2:07:57 PM inetinfo.exe:604 QUERY SECURITY
C:\INETPUB\WWWROOT\subweb1\CHALLENGE\TEST.ASP BUFFER OVERFLOW
128 2:07:57 PM inetinfo.exe:604 QUERY SECURITY
C:\INETPUB\WWWROOT\subweb1\CHALLENGE\TEST.ASP SUCCESS
129 2:07:57 PM inetinfo.exe:604 QUERY INFORMATION
C:\INETPUB\WWWROOT\subweb1\CHALLENGE\TEST.ASP BUFFER OVERFLOW FileFsVolumeInformation
130 2:07:57 PM inetinfo.exe:604 QUERY INFORMATION
C:\INETPUB\WWWROOT\subweb1\CHALLENGE\TEST.ASP BUFFER OVERFLOW FileAllInformation
131 2:07:57 PM inetinfo.exe:604 CLOSE
C:\INETPUB\WWWROOT\subweb1\CHALLENGE\TEST.ASP SUCCESS
132 2:07:57 PM dllhost.exe:1944 QUERY INFORMATION C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Attributes: A
133 2:07:57 PM dllhost.exe:1944 OPEN C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Options: Open Access: Execute
134 2:07:57 PM dllhost.exe:1944 QUERY INFORMATION C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Length: 536576
135 2:07:57 PM dllhost.exe:1944 CLOSE C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS
136 2:07:57 PM dllhost.exe:1944 QUERY INFORMATION C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Attributes: A
137 2:07:57 PM dllhost.exe:1944 QUERY INFORMATION C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Attributes: A
138 2:07:57 PM dllhost.exe:1944 OPEN C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Options: Open Access: Execute
139 2:07:57 PM dllhost.exe:1944 QUERY INFORMATION C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Length: 536576
140 2:07:57 PM dllhost.exe:1944 CLOSE C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS
141 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 4096 Length: 32768
142 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 36864 Length: 32768
143 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 69632 Length: 32768
144 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 102400 Length: 32768
145 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 135168 Length: 32768
146 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 167936 Length: 32768
147 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 200704 Length: 32768
148 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 233472 Length: 32768
149 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 266240 Length: 32768
150 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 299008 Length: 32768
151 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 331776 Length: 32768
152 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 364544 Length: 32768
153 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 397312 Length: 28672
154 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 425984 Length: 8192
155 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 434176 Length: 4096
156 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 438272 Length: 16384
157 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 454656 Length: 16384
158 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 471040 Length: 16384
159 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 487424 Length: 16384
160 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 503808 Length: 8192
161 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 512000 Length: 16384
162 2:07:57 PM dllhost.exe:1944 READ C:\Program Files\Common
Files\system\ado\msado15.dll SUCCESS Offset: 528384 Length: 8192
163 2:07:57 PM lsass.exe:696 READ C: SUCCESS Offset: 46080 Length: 16384
164 2:07:57 PM lsass.exe:696 READ C: SUCCESS Offset: 193536 Length:
32768
165 2:07:57 PM lsass.exe:696 READ C: SUCCESS Offset: 22499328 Length:
4096
166 2:07:57 PM dllhost.exe:1944 QUERY INFORMATION C:\WINDOWS\TEMP SUCCESS
Attributes: D
167 2:07:57 PM dllhost.exe:1944 CREATE C:\WINDOWS\TEMP\JETEF25.tmp SUCCESS
Options: Create Access: All
168 2:07:57 PM dllhost.exe:1944 QUERY INFORMATION C:\WINDOWS\TEMP\JETEF25.tmp
SUCCESS Length: 0
169 2:07:57 PM dllhost.exe:1944 QUERY INFORMATION
C:\inetpub\wwwroot\db\challenge.mdb PATH NOT FOUND Attributes: Error
170 2:07:57 PM dllhost.exe:1944 OPEN C:\inetpub\wwwroot\db\ NOT FOUND
Options: Open Directory Access: All
171 2:07:57 PM dllhost.exe:1944 OPEN C:\inetpub\wwwroot\db\challenge.mdb
PATH NOT FOUND Options: Open Access: All
172 2:07:57 PM dllhost.exe:1944 CLOSE C:\WINDOWS\TEMP\JETEF25.tmp SUCCESS
JIMCO said:
Mike,
Two things to keep in mind here.
1. When you change the configuration, you are forcing a different code path in
Microsoft's code. Therefore, trying to determine why you are seeing different behavior
based upon parent pathing is going to get you nowhere.
2. What you need to do is focus on identifying WHY you are seeing the error you are
seeing. What you are focusing on is why you DON'T see that error under a different
condition. Once again, that will get you nowhere.