IIS, Trend, Exhaustion, Permissions, Heelp!!!
- From: "Andrew" <andrew@xxxxxxxxxxxxxxxxx>
- Date: Wed, 7 Jun 2006 07:54:54 +0930
[My apologies if this post comes up twice, I had trouble getting newsgroup
access last night and it seems not to have posted.]
We have an SBS2003 Premium where the the following error (List 1) is
occuring.
I understand this to be a problem with out of sync passwords in IIS, and
that this was one of the things stopping our Trend 3. CSM workstation
clients updating.
In another situation we have reset IUSR_servername and IWAM_username
passwords using IIS and adsutil as in List 2.
The errors in list 1 disappear and Trend Clients update as expected.
Didn't work this time.
I resynced the passwords again. Uninstalled Trend, rebooted the server and
reinstalled.
Now when I go to the dashboard http://192.168.17.2:8059/smb etc I get the
warning that I am downoading cgichkpassword.exe and do I want to save or
open or cancel....
I am getting the same error on Company Web, but the Default website works
properly
I have gone through the process several times in the last five hours... and
am getting rather sick of it.
What I also find is that although I get successful logons by Iusr_servername
account after I resync the password... after a while I get failed logons
again... as though somewhere else in the system the syncing I have been
doing has not worked.
Does anyone have a clue where I could go next???
TIA
Andrew Prior
List Error 1
-----------------------
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 6/06/2006
Time: 10:48:50 PM
User: NT AUTHORITY\SYSTEM
Computer: TSWAS01
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: IUSR_TSWAS01
Domain: ***********
Logon Type: 8
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: TSWAS01
Caller User Name: NETWORK SERVICE
Caller Domain: NT AUTHORITY
Caller Logon ID: (0x0,0x3E4)
Caller Process ID: 2656
Transited Services: -
Source Network Address: -
Source Port: -
List 2
----------------------------
RESOLUTION
To resolve this issue, reset the passwords for the IUSR and the IWAM
accounts so that they are the same in both the Internet Information Services
(IIS) metabase and in the local accounts directory. To do this, follow these
steps:
1. Click Start, point to Programs, point to Administrative Tools,
and then
click Computer Management.
2. Under System Tools, click Local Users and Groups, and then
click Users.
3. Right-click IUSR_ComputerName, and then click Set Password.
4. Click Proceed.
5. Type the password in the New password box and in the Confirm
password
box, and then click OK.
6. Right-click IWAM_ComputerName, and then click Set Password.
7. Click Proceed.
8. Type the password in the New password box and in the Confirm
password
box, and then click OK.
9. Quit Computer Management.
10. Click Start, and then click Run.
11. In the Open box, type cmd and then click OK.
12. Type cd drive:\inetpub\adminscripts, where drive is the drive
where
Windows is installed, and then press ENTER.
13. To reset the password for the IUSR_ComputerName account, type
the
following command (where password is the password that you set in step 5),
and then press ENTER:
cscript.exe adsutil.vbs set w3svc/anonymoususerpass "password"
14. To reset the password for the IWAM_ComputerName account, type
the
following command (where password is the password that you set in step 8),
and then press ENTER:
cscript.exe adsutil.vbs set w3svc/wamuserpass "password"
15. Update the starting identity of all IIS COM+ application
packages by
typing the following at the command prompt:
cscript.exe synciwam.vbs -v
Note You may need to restart IIS for all changes to take effect. To
restart IIS, click Start, click Run, type iisreset, and then click OK.
.
- Prev by Date: Exchange Backup Strategy
- Next by Date: Re: VPN Setup
- Previous by thread: Exchange Backup Strategy
- Next by thread: Sharepoint unusably slow
- Index(es):
Relevant Pages
|
