Trend, IIS, Permissions, Exhaustion and close to very bad language :-) Heelp!

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

We have an SBS2003 Premium where the the following error (List 1) is
occuring.
I understand this to be a problem with out of sync passwords in IIS, and
that this was one of the things stopping our Trend 3. CSM workstation
clients updating.
In another situation we have reset IUSR_servername and IWAM_username
passwords using IIS and adsutil as in List 2.
The errors in list 1 disappear and Trend Clients update as expected.

Didn't work this time.
I resynced the passwords again. Uninstalled Trend, rebooted the server and
reinstalled.
Now when I go to the dashboard http://192.168.17.2:8059/smb etc I get the
warning that I am downoading cgichkpassword.exe and do I want to save or
open or cancel....
I am getting the same error on Company Web, but the Default website works
properly
I have gone through the process several times in the last five hours... and
am getting rather sick of it.
What I also find is that although I get successful logons by Iusr_servername
account after I resync the password... after a while I get failed logons
again... as though somewhere else in the system the syncing I have been
doing has not worked.

Does anyone have a clue where I could go next???

TIA

Andrew



List Error 1
-----------------------
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 6/06/2006
Time: 10:48:50 PM
User: NT AUTHORITY\SYSTEM
Computer: TSWAS01
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: IUSR_TSWAS01
Domain: ***********
Logon Type: 8
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: TSWAS01
Caller User Name: NETWORK SERVICE
Caller Domain: NT AUTHORITY
Caller Logon ID: (0x0,0x3E4)
Caller Process ID: 2656
Transited Services: -
Source Network Address: -
Source Port: -

List 2
----------------------------
RESOLUTION
To resolve this issue, reset the passwords for the IUSR and the IWAM
accounts so that they are the same in both the Internet Information Services
(IIS) metabase and in the local accounts directory. To do this, follow these
steps:

1.
Click Start, point to Programs, point to Administrative Tools, and then
click Computer Management.

2.
Under System Tools, click Local Users and Groups, and then click Users.

3.
Right-click IUSR_ComputerName, and then click Set Password.

4.
Click Proceed.

5.
Type the password in the New password box and in the Confirm password
box, and then click OK.

6.
Right-click IWAM_ComputerName, and then click Set Password.

7.
Click Proceed.

8.
Type the password in the New password box and in the Confirm password
box, and then click OK.

9.
Quit Computer Management.

10.
Click Start, and then click Run.

11.
In the Open box, type cmd and then click OK.

12.
Type cd drive:\inetpub\adminscripts, where drive is the drive where
Windows is installed, and then press ENTER.

13.
To reset the password for the IUSR_ComputerName account, type the
following command (where password is the password that you set in step 5),
and then press ENTER:

cscript.exe adsutil.vbs set w3svc/anonymoususerpass "password"

14.
To reset the password for the IWAM_ComputerName account, type the
following command (where password is the password that you set in step 8),
and then press ENTER:

cscript.exe adsutil.vbs set w3svc/wamuserpass "password"

15.
Update the starting identity of all IIS COM+ application packages by
typing the following at the command prompt:

cscript.exe synciwam.vbs -v

Note You may need to restart IIS for all changes to take effect. To
restart IIS, click Start, click Run, type iisreset, and then click OK.





.

Relevant Pages

  • IIS, Trend, Exhaustion, Permissions, Heelp!!!
    ... passwords using IIS and adsutil as in List 2. ... Logon Failure: ... Caller User Name: NETWORK SERVICE ... To reset the password for the IUSR_ComputerName account, ...
    (microsoft.public.windows.server.sbs)
  • Trend, IIS, Permissions, Exhaustion and very bad language threatened....
    ... that this was one of the things stopping our Trend 3. ... passwords using IIS and adsutil as in List 2. ... successful logons by Iusr_servername account after I resync the password... ... Logon Failure: ...
    (microsoft.public.backoffice.smallbiz)
  • Re: How do I trace a batch process?
    ... IIS installed on machine named EMPIRE but that its ... IWam_EMPIRE account is not granted the batch logon ...
    (microsoft.public.win2000.security)
  • Re: IIS Subauthentication Required
    ... Verify that the user account you created has the necessary logon permissions, and also verify that the user has the necessary NTFS permissions to the files/folders in question ... Now, in a normal IIS installation, IIS install creates the IUSR account (in ... >I have 4 Web servers that should all be set up the same; ...
    (microsoft.public.inetserver.iis.security)
  • Re: Failure Audits in Event log question
    ... This is someone trying to gain access through your web site [IIS logon ... times in the security log and then add a firewall rule to block all access ... > CATEGORY Account Logon ...
    (microsoft.public.win2000.security)