Microsoft KB Archive/327722

= Cannot play an .asx file that is embedded in tags with URLScan installed =

Article ID: 327722

Article Last Modified on 11/21/2006

-

APPLIES TO


 * Microsoft Internet Information Services 5.1
 * Microsoft Internet Information Services 5.0
 * Microsoft Internet Information Server 4.0

-



This article was previously published under Q327722



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



SYMPTOMS
When you have URLScan installed, you may not be able to play files that have an active stream redirector (.asx) extension and that are embedded in tags. However, you can play files that have an .asx extension and that are not embedded in tags.



RESOLUTION
To resolve this problem, follow these steps:  Open the Urlscan.ini file with a text editor such as Notepad. By default, the Urlscan.ini file is located in \%windir%\System32\Inetsrv\UrlScan\URLScan.ini.  Change the RemoveServerHeader setting in the Urlscan.ini file to 0. By default, RemoveServerHeader is set to 1. After you make the change, the line is as follows: RemoveServerHeader=0       ; RemoveServerHeader set to 0 does not remove the header from response NOTE: If the RemoveServerHeader setting is set to 0, you can use the AlternateServerName setting to specify a replacement for the default Server header. For example, you can specify the server header by making the following change: AlternateServerName=NameOfServer  Restart IIS services. To do this, run IISRESET at a command prompt.



Steps to reproduce the behavior
 Install Urlscan.

307608 Availability of URLScan version 2.5 security tool

  Create an HTML file with the following code:Note Make sure that you substitute valid names for &quot;servername&quot; and &quot;filename&quot; in the code. <HTML> <HEAD> <TITLE>Embedded Windows Media Player Control</TITLE> </HEAD> <BODY> <OBJECT ID=&quot;MediaPlayer&quot; WIDTH=320 HEIGHT=240 CLASSID=&quot;CLSID:22D6f312-B0F6-11D0-94AB-0080C74C7E95&quot; STANDBY=&quot;Loading Windows Media Player components...&quot; TYPE=&quot;application/x-oleobject&quot; <PARAM name=&quot;autoStart&quot; value=&quot;True&quot;> <PARAM name=&quot;filename&quot; value=&quot;http://servername/filename.asx&quot;> </OBJECT> </BODY> </HTML> Note The .asx file is a pointer to the .asf file that contains the actual clip to be played in Microsoft Windows Media Player.

The following is sample code for the .asx file: <ASX version = &quot;3.0&quot;> <Entry> </Entry> </ASX> </li> Access the HTML file by using a Web browser. The Web page appears with an embedded Windows Media Player window, but the .asx file may not play.</li></ol>

<div class="references_section">