Microsoft Active Server Pages (ASP) stops responding if the following conditions are true:
- The response to a POST operation from
a ServerXmlHttp object is redirected to another server.
- In Microsoft Internet Explorer, the security policy
setting for the Access data sources across domains option is set to either
Prompt or Disable.
This problem occurs because a change of behavior that was
introduced in Microsoft XML (MSXML) 4.0 Service Pack 2 (SP2) checks the settings in the Internet Explorer
security policy. If the
Access data sources
across domains option is set to either
Prompt or
Disable, the call to the
Response.Redirect method tries
to open a dialog box. However, because the Microsoft Internet Information Services (IIS) process
cannot display any dialog boxes, ASP stops responding.
A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.
If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.
Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.
The English
version of this hotfix has the file attributes (or later) that are listed in
the following table. The dates and times for these files are listed in
coordinated universal time (UTC). When you view the file information, it is
converted to local time. To find the difference between UTC and local time, use
the
Time Zone tab in the Date and Time tool in Control
Panel.
Date Time Version Size File name
--------------------------------------------------------
19-Aug-2003 21:56 4.20.9819.0 1,233,920 Msxml4.dll
To work around this problem, change the relevant setting in the Internet Explorer security policy.
Note This workaround does not resolve the problem on a Microsoft Windows
Server 2003-based computer that is running in Internet Information Services
(IIS) 6.0 mode.
To work around this problem on a Microsoft Windows 2000-based
computer, follow these steps:
- Click Start, click Run,
type mmc, and then click OK.
- On either the File menu or the
Action menu, click Add/Remove Snap-in.
- In the Add/Remove Snap-in dialog box,
click Add.
- On the Standalone tab, click Add.
- In the Available Standalone Snap-in dialog
box, click Group Policy, and then click Add. The Group Policy
Wizard starts.
- In the Group Policy
Wizard, click
Finish.
- To close the Add Standalone Snap-in
dialog box, click Close.
- In the Add/Remove Snap-in dialog box, click OK.
- Under User Configuration, expand
Windows Settings, expand Internet Explorer
Maintenance, and then click Security.
- In the right pane, double-click Security Zones and
Content Ratings.
- Under Security Zones and Privacy, click
Import the current security zones and privacy settings, and
then click Modify Settings.
- Select the zone that you want to modify, and then click
Custom Level.
To determine the zone for this setting, select the same zone as the URL that is the destination of the POST operation. - Make sure that the Enable option is
selected for the Access data sources across domains option,
and then click OK.
- Restart the process that is running the ServerXmlHttp object. You may have to restart your computer.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
For additional information about changes in the product and about the topic "Security is tightened when you post data by using the ServerXmlHttp object", click the following article number to view the article in the Microsoft Knowledge Base:
820882Â
(http://kbalertz.com/Feedback.aspx?kbNumber=820882/
)
Conformance and security changes in MSXML 4.0 Service Pack 2