Re: IIS Server default user account reset after patching?

From: Jason Brown [MSFT] (i-brjaso_at_online.microsoft.com)
Date: 03/17/05 

Date: Thu, 17 Mar 2005 22:44:01 +1100

As far as I'm aware, no patch should reset these settings. Did you apply any
security templates, or restore a metabase?

are you able to repeat this to pin down what caused it, or is this a
production box? Or can you supply the exact patch details so someone else
can replicate? 

-- 
Jason Brown
Microsoft GTSC, IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
"Steve Marshall" <Steve Marshall@discussions.microsoft.com> wrote in message 
news:AD977CC2-30D7-4F23-94E3-F5F467191BEC@microsoft.com...
> We have a clustered application that required the use of a specific 
> account
> for anonymous access.  The application was configured with a local user
> account on each node in the cluster and has been working correctly since
> November.  This week 2 situations occured that caused both nodes in the
> cluster to fail simultaniously.  The issue was traced back to the fact 
> that
> the account setup in IIS had been replaced back with the IUSR_Machinename
> account.  The machines are tightly controlled and have very limited access
> for someone to be able to make a change of this nature.
> Is it possible that a windows security patch could have reset this 
> account?
> We automate our patching and keep up to date with new patches as they are
> released.  The latest round of patches were installed on the 20th Feb.  If
> this is not possible could it be something within the cluster that changed
> the user account back? (I am doubting this to be the case since the server
> has  been running since November without incident).
>
> Any help on this issue is much appreciated.
>
> Steve

Relevant Pages

  • Re: 0x8007005 Access is Denied adding new host to Active/Active Cluste
    ... Also ensure that this account is an Administrator ... to create the first node in a cluster or add additional nodes. ... specify the domain user account under which the Cluster service runs. ... Professional, or to administer a cluster locally from a node, you must use ...
    (microsoft.public.windows.server.clustering)
  • Re: Clstr Servce wont start after changing logon account
    ... By any chance did you enable cluster logging? ... try changing the cluster service account to ... You said "Server1 runs as domain controller unless something goes wrong at ... What advantage does that have over having 2 separate DCs? ...
    (microsoft.public.windows.server.clustering)
  • Re: Exchange install failed
    ... Cluster Common Failure Exception: The group or resource is not in the ... trying to install Exchange again. ... I had removed the computer account, but didn't realize it had gotten ...
    (microsoft.public.exchange.setup)
  • Re: Exchange install failed
    ... Cluster Common Failure Exception: The group or resource is not in the ... trying to install Exchange again. ...  I had removed the computer account, but didn't realize it had gotten ... as a computer account in AD) an admin on both cluster nodes? ...
    (microsoft.public.exchange.setup)
  • Re: Error 42d during Fail Over SQL 2000 Enterprise in a Server 2003 Ent. Cluster
    ... a valid login that you add back the service account that operates the ... Cluster service. ... Microsoft SQL Server MVP ... Administrator account, have re-entered the username and password 3+ ...
    (microsoft.public.sqlserver.clustering)