We’ve now published the KB article for a recent hotfix that I was involved in.
I’m not going to write much about it here as a lot of my words have already gone into the KB article:
The main points are however:
- This problem does not occur “out of the box” – a number of factors have to come into play before you hit this issue.
- Kernel mode authentication (new in Windows Server 2008) has to be enabled.
- appPoolCredentials has to be set to ”true”. A reason for doing this is if your application pool is set to run under a domain account and you are configuring your site to use Kerberos authentication
- we’ve only seen this issue so far in relation to Microsoft Office SharePoint Server 2007, but it is not a problem with that product. it is just that the way that product sometimes requires IIS to be configured leads it to fall victim to the bug in HTTP.SYS