Re: IWAM account

From: Andrew Davis [MS] (adavis_at_online.microsoft.com)
Date: 12/17/03 

Date: Wed, 17 Dec 2003 16:09:28 GMT

Check the user right "logon as batch", and add the iwam account to have
this user right. This should take care of your problem.

This appears to be a negotiate failure due to logon as batch.
http://support.microsoft.com/?id=326985

Logon Type A numeric value indicating the type of logon attempted.
Possible values are:
2 - Interactive (interactively logged on)
3 - Network (accessed system via network)
4 - Batch (started as a batch job)
5 - Service (a Windows service started by service controller)
6 - Proxy (proxy logon; not used in Windows NT or Windows 2000)
7 - Unlock (unlock workstation)
8 - NetworkCleartext (network logon with cleartext credentials)
9 - NewCredentials (used by RunAs when the /netonly option is used)

This posting is provided "AS IS" with no warranties, and confers no rights.

Thanks!
~Andrew Davis
Microsoft PSS Security

--------------------
| From: Paul Lynch <paul.lynch@nospam.com>
| Subject: Re: IWAM account
| Date: Tue, 16 Dec 2003 11:53:58 +0000
| Message-ID: <ahsttvk6klr8aeq1s5462tqhni4j7j15ld@4ax.com>
| References: <090401c3c341$bf719b50$a001280a@phx.gbl>
| X-Newsreader: Forte Agent 1.93/32.576 English (American)
| MIME-Version: 1.0
| Content-Type: text/plain; charset=us-ascii
| Content-Transfer-Encoding: 7bit
| Newsgroups: microsoft.public.inetserver.iis.security
| NNTP-Posting-Host: host81-133-143-93.in-addr.btopenworld.com 81.133.143.93
| Lines: 1
| Path:
cpmsftngxa07.phx.gbl!cpmsftngxa06.phx.gbl!cpmsftngxa09.phx.gbl!TK2MSFTNGP08.
phx.gbl!tk2msftngp13.phx.gbl
| Xref: cpmsftngxa07.phx.gbl microsoft.public.inetserver.iis.security:7913
| X-Tomcat-NG: microsoft.public.inetserver.iis.security
|
| On Mon, 15 Dec 2003 11:29:24 -0800, "Chuck"
| <anonymous@discussions.microsoft.com> wrote:
|
| >I upgraded to WinXP last week and installed IIS. When I
| >try to run my web app (Java Applet and lots of ASP), I
| >get the following error logged in EventViewer:
| >Event Type: Failure Audit
| >Event Source: Security
| >Event Category: Logon/Logoff
| >Event ID: 534
| >Date: 12/15/2003
| >Time: 1:18:10 PM
| >User: NT AUTHORITY\SYSTEM
| >Computer: <computer name>
| >Description:
| >Logon Failure:
| > Reason: The user has not been granted the
| >requested
| > logon type at this machine
| > User Name: IWAM_<computer name>
| > Domain: <computer name>
| > Logon Type: 4
| > Logon Process: Advapi
| > Authentication Package: Negotiate
| > Workstation Name: <computer name>
| >
| >---
| >When I first installed IIS, I was able to hit a testing
| >web app (basic ASP) with no problem. When I try to hit
| >the real web app, the browser hangs. Cycling IIS usually
| >hangs so I have to reboot. After that, I can't even hit
| >the test site again. Any help would be greatly
| >appreciated.
| >
| >Thanks,
| >--Chuck
|
| Chuck,
|
| Try these articles :
|
| Domain Controller Demotion Causes Out-of-Process Applications to Fail
| http://support.microsoft.com/?id=236007
|
| Event ID 36 - The server process could not be started because the
| configured identity is incorrect
| http://www.iisfaq.com/default.aspx?View=A464&P=123
|
|
| Regards,
|
| Paul Lynch
| MCSE
|

Relevant Pages

  • Re: Sudden and repeated launching of cmd.exe and net.exe
    ... earlier suggestion to check the Task Scheduler for a batch ... and changing it to run only at logon. ... I will put the two kill commands on my ... >The Task manager will also display process users names ...
    (microsoft.public.win2000.cmdprompt.admin)
  • Re: TSO multi-logon on multi-system, restricting to specific users?
    ... user to logon to every system in the sysplex concurrently. ... "batch like" work by being logged on to multiple systems, ... For IBM-MAIN subscribe / signoff / archive access instructions, ... send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO ...
    (bit.listserv.ibm-main)
  • TSO multi-logon on multi-system, restricting to specific users?
    ... user to logon to every system in the sysplex concurrently. ... "batch like" work by being logged on to multiple systems, ... And we simply cannot afford the CPU overhead. ...
    (bit.listserv.ibm-main)
  • Re: Scheduled Task wont run unless use Admin account
    ... When you said "You may need to add the user/ group 'logon as batch job' ... and Bypass Traverse Checking directly to the desired account, ... If I am interactively logged in as the target account, ...
    (microsoft.public.windows.server.general)
  • Unusual logon / logoff Security event log
    ... Another preculiar is for example event ID 540, On the event id, the logon ... On the webpage, type 3 is network, type 4 is batch. ...
    (microsoft.public.windows.server.sbs)