Re: ASP not working

From: Jeff Cochran (jcochran.nospam_at_naplesgov.com)
Date: 01/15/04 

Date: Thu, 15 Jan 2004 14:20:00 GMT

On Thu, 15 Jan 2004 03:04:27 -0800, "Michael Law"
<michael.law@bdrcareers.com> wrote:

>I host a site that runs classic ASP, but the site refuses
>to run and when I check the security log it some up with
>two 'failure audit' messages, basically
>
>Type:Failure Audit
>Source: Security
>Category: Account Logon and Logon/Logoff
>Event: 681 and 529
>User: system
>
>The first error (529) says
>
>Logon Failure:
> Reason: Unknown user name or bad password
> User Name: IWAM_HQ-WWW
> Domain: HQ-WWW
> Logon Type: 4
> Logon Process: DCOMSCM
> Authentication Package: Negotiate
>
>and the 681 error is...
>
>The logon to account: IWAM_HQ-WWW
> by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> from workstation: HQ-WWW
> failed. The error code was: 3221225578
>
>
>Does anyone know what I should do. I think that when an
>IIS process is being accessed it uses the IWAM_ account to
>authenticate and there is a bad password. I have tried
>resetting the password to blank but this has no effect.

Of course it doesn't. And it's dumb to do so anyway, but I digress.

IIS needs control of the password *or* you need to match the
account/password in your accounts *and* in IIS. Running synciwam.vbs
will resynch the passwords correctly if IIS is allowed control.

Jeff

Relevant Pages

  • Security listing
    ... My windows account gets repeatedly locked out. ... LockoutStatus tool and the security log, I was able to correlate my ... lockouts to IIS requests on a report server, ...
    (microsoft.public.inetserver.iis)
  • RE: SOME Users cannot access OWA others do, error HTTP 500
    ... I understand that some account access OWA ... IIS 6.0 compression corruption causes access violations ... compressed copy of the affected files on the SBS server: ...
    (microsoft.public.windows.server.sbs)
  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... On the IIS directory security tab, anonymous access is disabled, digest ... authentication is disabled, integrated authentication is disabled and basic ... account created has full permissions for the folder and the file that's in it. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 6 ASP: Which Process Identity Is It Using? App Pool or Anon?
    ... But isn't the COM object running under the ... The COM object can be running under the impersonated account, ... example, even if IIS launched the COM object with the impersonated user, the ... It will now be using "TestService" identity. ...
    (microsoft.public.inetserver.iis)
  • Re: Digest Authentication
    ... It sounds like IIS is having problems impersonating the IUSR account, ... In IIS, you do not need Script Source or Write permissions unless you ... But the Digest authentication for windows domain is ...
    (microsoft.public.inetserver.iis)
Quantcast