App-Domain could not be created

Question

User1223669877 posted

Hi All,

Recently our server was affected with Conficker virus. After that I am unabel to run any of the asp.net 2.0 application from IIS(I am able to run asp.net 1.1 application). The error I am getting is as below.

Server Application Unavailable <?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p>The web application you are attempting to access on this web server is currently unavailable.  Please hit the "Refresh" button in your web browser to retry your request. <o:p></o:p>Administrator Note: An error message detailing the cause of this specific request failure can be found in the application event log of the web server. Please review this log entry to discover what caused this error to occur. <o:p></o:p>

 

In system event log:<o:p></o:p><o:p> </o:p>Event Type:        Error<o:p></o:p>Event Source:    ASP.NET 2.0.50727.0<o:p></o:p>Event Category:                None<o:p></o:p>Event ID:              1088<o:p></o:p>Date:                     26/01/2009<o:p></o:p>Time:                     11:43:20<o:p></o:p>User:                     N/A<o:p></o:p>

Computer:          srv-srv-01

Description:<o:p></o:p>

Failed to execute request because the App-Domain could not be created. Error: 0x80070005 Access is denied. 

 

I have tried giving the IIS_WPG access to all the required folders. But no use. This server is in AD and the security policy is controlled by group policy.

 

Thanks in advance...

Answer 1

User1632528892 posted

Hi,

This is definitely a permissions related issue as indicated by the 'Access Denied' error message. You need to use a tool such as Process Monitor to track down the source of this resource denial.

This KB article explains what is occurring :

Error message when you request an ASP.NET 1.1 page: "Server Application Unavailable"

However, fixing this issue will be pointless unless you patch your server. You need to get MS08-067 applied pronto :

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

Regards,

Answer 2

User1223669877 posted

Hi Paul,

Thanks for your response.

I wil use Process Monitor to find out where the problem is...

Regarding the permissions, I have given IIS_WPG group for the virtual directory. And I have also applied the patch.

As I said ASP.NET 1.1 applications are working fine, but the problem is only with ASP.NET 2.0 application.

Thanks, 

 

 

Answer 3

User1223669877 posted

Paul,

Can you please briefly explain how to identify the source of the resource denial using Process Monitor. I was trying using this but I am getting many events and unable to find the usefull one.

Thanks, 

Answer 4

User1223669877 posted

Hi Paul,

I have tried Process Monitor and didnt find any thing like Access Denied. Instead one suspicious thing was

Date & Time: 27/01/2009 11:08:09
Event Class: Registry
Operation: RegQueryValue
Result: NAME NOT FOUND
Path: HKLM\SOFTWARE\Microsoft\ASP.NET\UseWorkStation
TID: 2808
Duration: 0.0000048
Length: 144

This was only the unsuccessfull task. Can you guess any thing from this information.

Thanks, 

 

 

Answer 5

User1632528892 posted

Paul,

Can you please briefly explain how to identify the source of the resource denial using Process Monitor. I was trying using this but I am getting many events and unable to find the usefull one.

Thanks, 

 

Hi,

You need to repro the error whilst running a capture and the simply search for the term 'DENIED' in your capture. It should be in there somewhere.

Regards,

Answer 6

User1223669877 posted

Hi Paul,

I tried Process Monitor and didnt find anthing as 'DENIED'. Instead one thing suspicious was

Date & Time: 27/01/2009 11:08:09
Event Class: Registry
Operation: RegQueryValue
Result: NAME NOT FOUND
Path: HKLM\SOFTWARE\Microsoft\ASP.NET\UseWorkStation
TID: 2808
Duration: 0.0000048
Length: 144

Can you guess any thing from this.

Thanks,

 

Answer 7

User1632528892 posted

Hi,

Check that your process identity account (usually your app pool ID) has sufficient permissions to your web content and the .Net Framework folders.

Regards,

Answer 8

User-2064283741 posted

It is difficult to know what the virus did.

But I would look at reinstalling .net and reregistering (regiis) it to see if that helps. 

Answer 9

User1223669877 posted

I am using the default account "Network Servcie" and it has enough permissions for my virtual directory and .net folders.

Thanks, 

 

Answer 10

User1223669877 posted

Hi Rovaster,

I have tried this...reinstalling .net and reregistering iis. But it didnt solve the problem.

Thanks,

Answer 11

User-823196590 posted

I have tried giving the IIS_WPG access to all the required folders. But no use.

Double-check that against this article: http://support.microsoft.com/kb/812614

If that still doesn't help, it might be time for a full re-install of the OS after a disk wipe ... and make sure you're fully patched and protected next time : )

Answer 12

User1223669877 posted

Thanks mate... I will check the permissions against the article....

Many of systems got affected by this virus...so re-installing OS is a painfull job for me :( .... 

 

Answer 13

User-275859662 posted

 

Hi, i am also facing same issue. How did you resolved your case?

Answer 14

User-1603808095 posted

The virus may change the folder permission. Try this fix: http://itjungles.com/dotnet/fixed-failed-to-execute-request-because-the-app-domain-could-not-be-created-error-0x80070005-access-is-denied