Re: iis6 / windows server 2003/ network service account

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: jzink (anonymous_at_discussions.microsoft.com)
Date: 03/23/04 

Date: Tue, 23 Mar 2004 05:51:08 -0800

     It's not the application that is accessing the registry, it's IIS. By using the regmon utility from sysinternals we could see that IIS was failing because "network service" could not read the registry. The app has been working for over 2 months and we suddenly ran into the problem yesterday. Unfortunately, we don't have a policy in place to audit the modifying of the registry. So I am trying to figure out why network service lost it's permissions to read the necessary keys that iis requires it to read.
     ----- Desmond Lam wrote: -----
     
     Network Service account only has limited priviledges on the system. By
     default, it should not have any explicit permission to the registry. I have
     also verified it on my machine as well. If your application needs to access
     the registry, and the app pool (worker process) hosting application is
     running as network service account, it will encounter problems.
     
     Hence it should not the case as erroeous code causing the "network service
     to loss registry permission".
     
     Hope it helps,
     
     "jzink" <anonymous@discussions.microsoft.com> wrote in message
     news:39BEB2DA-6999-4AB1-841C-F6D8EB5A0D5B@microsoft.com...
> just had my production site crash. was getting error service unavailable.
     restarted iis, rebooted, nothing was working. after working with microsoft
     on the problem it was determined that when the site was trying to load the
     network service account was getting registry read errors. regranted the
     network service account read access to the hklm root and everything worked
     fine. this app is fairly new and was wondering if anyone had any ideas on
     what could cause this type of a problem. a new norton anti virus file was
     pushed to the server around the time of the problem, but i doubt that could
     do it ? could it be some erroneous code ? not sure how code could cause
     network service to loose it's registry permissions
>> any ideas would be appreciated
     
     
     

Relevant Pages

  • Re: SBS wont pass Internet Connection every once a while!!!
    ... I did the registry modification and thank you. ... How many NICs are you installed on your SBS server? ... > As for the error of the DHCP, the issue may occur if the Network Service ... > Network Service account is a predefined local account that is used to ...
    (microsoft.public.windows.server.sbs)
  • DHCP - Access denied
    ... For some reason I am getting a number servers giving me this error, ... solution is to grant the NETWORK SERVICE account write permissions on two ... permissions to the registry. ... The Network Service account resides in the SAD of the local machine i.e. it ...
    (microsoft.public.windows.group_policy)
  • Re: iis6 / windows server 2003/ network service account
    ... It's not the application that is accessing the registry, it's IIS. ... So I am trying to figure out why network service lost it's ... Network Service account only has limited priviledges on the system. ...
    (microsoft.public.inetserver.iis)
  • RE: Cannot open log for source {0}. You may not have write access.
    ... you need grant permission to the ... NETWORK SERVICE account. ... I suggest you may trace the registry and file access with ... They can record any access to registry ...
    (microsoft.public.dotnet.framework.aspnet.security)