Microsoft KB Archive/237003

= Sessionless Event Creates Session When Running Application =

Article ID: 237003

Article Last Modified on 6/23/2005

-

APPLIES TO


 * Microsoft Internet Information Server 4.0
 * Microsoft Windows NT 4.0 Service Pack 4
 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows NT 4.0 Service Pack 4

-



This article was previously published under Q237003



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



SYMPTOMS
When you use Microsoft Internet Information Server (IIS) to run a default Web site application in a separate memory space, a session may be established even though you specified a sessionless event in the Session_OnStart code of the application file. However, the session is only established the first time an Active Server Pages (ASP) page is loaded; after that, a sessionless event is set as specified.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.



MORE INFORMATION
To start a sessionless default Web site in Internet Information Server, follow these steps:  Right-click the application under Default Web Site. Click Properties. Click the Directory tab. Click to select Run in separate memory.

The ASP pages and application files are loaded and administered by the Web Application Manager (WAM), which can be accessed at a command prompt by typing

IWAM NetBIOS computername

and then pressing ENTER.

