RE: Problem with IUSR_Servername
- From: v-robeli@xxxxxxxxxxxxxxxxxxxx (Robert Li [MSFT])
- Date: Fri, 04 May 2007 12:05:56 GMT
Hi Kim,
Thanks for updating.
I am sorry for not writing detail steps. I meant to reset the password of
IUSR_Servername. You can right click IUSR_Servername and select Reset
Password. Do remember this new password. Then try step 1 again. Thanks for
your understanding.
Please send the MPS Report to me and I will have deep research on this.
I am looking forward to hear from you.
If you need further assistance, please don't hesitate to let me know.
Best regards,
Robert Li(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
<Thread-Topic: Problem with IUSR_Servername
<thread-index: AceNv3MK5Rhr1cTCRN2wyW0buFb1Sg==
<X-WBNR-Posting-Host: 207.46.19.197
<From: =?Utf-8?B?TWlqYWtpREs=?= <MijakiDK@xxxxxxxxxxxxxxxxxxxxxxxxx>
<References: <982F7133-D9C5-4A3C-B60A-2E32BAD5BA42@xxxxxxxxxxxxx>
<gTABt$TjHHA.4068@xxxxxxxxxxxxxxxxxxxxxx>
<Subject: RE: Problem with IUSR_Servername
<Date: Thu, 3 May 2007 13:13:01 -0700
<Lines: 210
<Message-ID: <77BA88A8-9396-49A3-8E3D-50520FDE6E78@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:34520
<NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Hi Robert,
<
<Tried to follow your guidelines, however I pretty fast ran into problems.
<
<As far as I know you cannot reset account only computer accounts, as
stated
<in Step 1. Also I was to reinput the password and I can't remember
entering
<any password for this account. I thought wizzards did all this on SBS?
<
<Step 2 has already been implemented from day 1
<Step 3 do
<Step 4 Sophos antivirus
<Step 5 refers to Event 529 and my problem lies with Event 537
<
<Should I go for the MPS thing?
<
<Regards
<Kim
<
<
<
<"Robert Li [MSFT]" wrote:
<
<> Hi Kim,
<>
<> Thanks for posting in our newsgroup.
<>
<> Please take the following steps to see if the problem can be resolved:
<>
<> Please do the following steps on the SBS 2003 server to see if the
problem
<> can be resolved:
<>
<> Step 1: Reset the IUSR_Servername account in AD, then at the "WebSite"
<> level and reinput password.
<>
<> To do this:
<>
<> 1. Open Internet Information Server(IIS) Manager.
<> 2. Expand to Servername->Websits'Default Web Site.
<> 3. Right click Default Web Site, on the Directory Security tab, click
Edit
<> under Authentication and access control.
<> 4. Input password under Enable anonymous access. Click OK.
<> 5. Do the same steps for the companyweb virtual directory.
<> 6. Restart IIS Service.
<>
<> Step 2: Implement Strong password policies. To do this:
<>
<> Open ''Server Management console'', navigate to Users snap-in. In the
right
<> panel, click ''Configure Password Policies''. Enable the password
policies.
<>
<> For more information, please refer to:
<>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/
<> security/bpactlck.mspx
<>
<> Step 3: Configure account lockout policy.
<>
<> 1) Click Start, click Settings, click Control Panel, double-click
<> Administrative Tools, and then double-click Active Directory Users and
<> Computers.
<> 2) In the console tree, right-click the domain on which you want to set
a
<> Group Policy object.
<> 3) Click Properties, and then click the Group Policy tab.
<> 4) In Group Policy Object Links, click Default Domain Policy or create
and
<> name your Group Policy object, and then click Edit.
<> 5) In the console tree, double-click Computer Configuration,
double-click
<> Windows Settings, double-click Security Settings, double-click Account
<> Policies, and then click Account Lockout Policy.
<> 6) In the details pane, right-click the policy setting that you want,
and
<> then click Properties.
<> 7) If you are defining this policy setting for the first time, click
Define
<> this policy setting.
<> 8) Click the options that you want, and then click OK.
<>
<> For medium security requirement, the recommended configurations are:
<>
<> Reset account lockout counter after: 30
<> Account lockout duration: 30
<> Account Lockout Threshold: 10
<> For high security requirement, the recommendations are:
<> Reset account lockout counter after: 30
<> Account lockout duration: 0
<> Account Lockout Threshold: 10
<> For more information, please refer to:
<> Account Passwords and Policies
<>
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/
<> security/bpactlck.mspx
<>
<> Step 4: Use an Enterprise anti-virus with updated signatures and scan
you
<> machine.
<>
<> For more information, please refer to:
<>
<> Windows Defender Home
<> http://www.microsoft.com/athome/security/spyware/software/default.mspx
<>
<> 823166 Overview of Exchange Server 2003 and Antivirus Software
<> http://support.microsoft.com/?id=823166
<>
<> Step 5: Please install the fix in KB 811082.
<>
<> Security Event 529 is logged for local user accounts
<> http://support.microsoft.com/kb/811082
<>
<> Note: This fix is not publicly available through the Microsoft website,
<> please contact CSS to get the fix.
<>
<> If the problem still exists, please help me collect the MPS Report on
the
<> SBS Server.
<>
<> 1. Download MPS report tool from:
<>
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
<> 15706/MPSRPT_SETUPPerf.EXE
<> 2. Run the MPSRPT_SETUPPerf.exe on the server box.
<> 3. Wait for 10~15 minutes.
<> 4. Open Windows explorer, navigate to
<> %SYSTEMROOT%\MPSReports\Setup\Reports\cab\
<> 5. Send the .cab file to v-robeli@xxxxxxxxxxxxx with subject:
<> 39005179-Problem with IUSR_Servername.
<>
<> If you need further assistance, please don't hesitate to let me know
<>
<> Best regards,
<>
<> Robert Li(MSFT)
<>
<> Microsoft CSS Online Newsgroup Support
<>
<> Get Secure! - www.microsoft.com/security
<>
<> =====================================================
<>
<> This newsgroup only focuses on SBS technical issues. If you have issues
<> regarding other Microsoft products, you'd better post in the
corresponding
<> newsgroups so that they can be resolved in an efficient and timely
manner.
<> You can locate the newsgroup here:
<> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<>
<> When opening a new thread via the web interface, we recommend you check
the
<> "Notify me of replies" box to receive e-mail notifications when there
are
<> any updates in your thread. When responding to posts via your
newsreader,
<> please "Reply to Group" so that others may learn and benefit from your
<> issue.
<>
<> Microsoft engineers can only focus on one issue per thread. Although we
<> provide other information for your reference, we recommend you post
<> different incidents in different threads to keep the thread clean. In
doing
<> so, it will ensure your issues are resolved in a timely manner.
<>
<> For urgent issues, you may want to contact Microsoft CSS directly.
Please
<> check http://support.microsoft.com for regional support phone numbers.
<>
<> Any input or comments in this thread are highly appreciated.
<>
<> =====================================================
<>
<> This posting is provided "AS IS" with no warranties, and confers no
rights.
<>
<> --------------------
<> <Thread-Topic: Problem with IUSR_Servername
<> <thread-index: AceMlZ28Zmr4t1hnRvee41ToTXA9Iw==
<> <X-WBNR-Posting-Host: 207.46.19.168
<> <From: =?Utf-8?B?TWlqYWtpREs=?= <MijakiDK@xxxxxxxxxxxxxxxxxxxxxxxxx>
<> <Subject: Problem with IUSR_Servername
<> <Date: Wed, 2 May 2007 01:41:02 -0700
<> <Lines: 26
<> <Message-ID: <982F7133-D9C5-4A3C-B60A-2E32BAD5BA42@xxxxxxxxxxxxx>
<> <MIME-Version: 1.0
<> <Content-Type: text/plain;
<> < charset="Utf-8"
<> <Content-Transfer-Encoding: 7bit
<> <X-Newsreader: Microsoft CDO for Windows 2000
<> <Content-Class: urn:content-classes:message
<> <Importance: normal
<> <Priority: normal
<> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
<> <Newsgroups: microsoft.public.windows.server.sbs
<> <Path: TK2MSFTNGHUB02.phx.gbl
<> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:34008
<> <NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
<> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <
<> <Hi,
<> <
<> <I get the below error almost every day from my daily Server performance
<> <report. Today I had 17 since yesterday. Yesterday I had 6 and the day
<> before
<> <none.
<> <
<> <Any clue on how to resolve?
<> <
<> < Reason: Unknown user name or bad password
<> < User Name: IUSR_Servername
<> < Domain: Mydomain
<> < Logon Type: 8
<> < Logon Process: Advapi
<> < Authentication Package: Negotiate
<> < Workstation Name: Servername
<> < Caller User Name: NETWORK SERVICE
<> < Caller Domain: NT AUTHORITY
<> < Caller Logon ID: (0x0,0x3E4)
<> < Caller Process ID: 3160
<> < Transited Services: -
<> < Source Network Address: -
<> < Source Port: -
<> <
<> <
<> <Regards
<> <Kim Jahn
<> <
<>
<>
<
.
- Follow-Ups:
- RE: Problem with IUSR_Servername
- From: Robert Li [MSFT]
- RE: Problem with IUSR_Servername
- References:
- RE: Problem with IUSR_Servername
- From: Robert Li [MSFT]
- RE: Problem with IUSR_Servername
- From: MijakiDK
- RE: Problem with IUSR_Servername
- Prev by Date: Re: Regular disconnections from remote web workplace
- Next by Date: Re: Windows Defender
- Previous by thread: RE: Problem with IUSR_Servername
- Next by thread: RE: Problem with IUSR_Servername
- Index(es):
Relevant Pages
|
Loading