Why does the Chemoffice Webserver stop responding when the domain securitypolicy is applied?

Created
October 08, 2021 23:01

Date Posted: 2004-02-20
Product: ChemBioOffice Enterprise

Problem:

Why does the Chemoffice Webserver stop responding when the domain security policy is applied?

Solution:

This issue is not limited to the functioning of CS applications. It is not well understood what combination of factors lead to this problem or which applications if any will be affected.

Under some unknown set of conditions when the scheduled security policy update is applied, one or more ASP applications hang. The ChemOffice Webserver, being built on ASP technology, is susceptible to this issue.

This problem is avoided by disabling the SCecli updates or by setting the refresh interval to a high enough value so as not to interfere with your server scheduled uptime.

How to set windows group policies:

Got to your START menu and select Run.
Enter gpedit.msc into the Run textbox and Click OK.
The Group Policy dialog appears.
Expand Computer Configuration>Administrative Templates>System.
Click on the Group Policy folder.
Right click on Security policy processing and select Properties.
Select the Enabled radio button
Select the checkbox next to "Do not apply during periodic background processing"
Click OK.

NOTE: Microsoft recommends web servers be standalone systems, not part of a domain.

From the Microsoft documentation:

The "Do not apply during periodic background processing" option prevents the system from updating affected policies in the background while the computer is in use. Background updates can disrupt the user, cause a program to stop or operate abnormally, and, in rare cases, damage data.

In other word, if your IIS server belongs to a domain, your ASP programs may stop operating during the standard background security policy update.

Here are some useful links about IIS security:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/chklist/wsrvsec.asp

Here is the recommended security policy to lock down IIS:

http://support.microsoft.com/support/misc/kblookup.asp?id=Q316347