Re: 401.1 After IIS6 Setup

From: WebGuyBob (WebGuyBob_at_discussions.microsoft.com)
Date: 03/24/05 

Date: Thu, 24 Mar 2005 06:57:04 -0800

Hi, Bernard.

Thanks for responding in this and the asp.net site's forum. For the sake of
the users of this forum, I'll try to keep the thread alive here also.

I appreciate the input. I followed your instructions explicitly, but I'm
still getting the 401.1 error. Below my sig is the error in the Security
Event Log. Am I to the point where I should delete the IIS site or at least
the docroot folder and start over, reselecting the appropriate users and
perms? Is IWAM a factor here?

I'm really wondering if there might be something about the security policy
happening here. The reason I say that is because of the "Reason" indicated in
the error event:

"The user has not been granted the requested logon type at this machine"

Note: "logon type". Is that a clue?

TIA,

Bob

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 534
Date: 3/24/2005
Time: 8:18:05 PM
User: NT AUTHORITY\SYSTEM
Computer: USPLSWEBH104
Description:
Logon Failure:
Reason: The user has not been granted the requested
logon type at this machine
User Name: IUSR_USPLSWEBH104
Domain: USPLSWEBH104
Logon Type: 8
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: USPLSWEBH104
Caller User Name: NETWORK SERVICE
Caller Domain: NT AUTHORITY
Caller Logon ID: (0x0,0x3E4)
Caller Process ID: 1596
Transited Services: -
Source Network Address: -
Source Port: -

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

"Bernard" wrote:

> For Local SAM - open computer management, local users and groups, find the
> IUSR_COMPUTER name account, right mouse on the account, and reset the
> password.
>
> Then go to IIS MMC, open the site property, directory security tab,
> anonymous access, reselect the iusr account, enter the password, click ok to
> save.
>
> then go to command prompt, enter 'iisreset.exe' to restart IIS services.
>
> then test browse your site.
>
> --
> Regards,
> Bernard Cheah
> http://www.tryiis.com/
> http://support.microsoft.com/
> http://www.msmvps.com/bernard/
>
>
> "WebGuyBob" <WebGuyBob@discussions.microsoft.com> wrote in message
> news:867C2E9C-1425-4975-AE5B-B62161B72D69@microsoft.com...
> > Hello, folks.
> >
> > I have setup literally dozens of IIS6 Web sites and just ran into subject
> > problem. I read the following from Mr. Wang in a German IT forum:
> >
> > "401.1 means that the username/password that you gave to IIS for
> > authentication was incorrect. If this happens when you have Anonymous
> > access
> > enabled, it means that the username/password you configured in IIS for the
> > anonymous user is NOT the same as the NT user in the local SAM. Please
> > synchronize them and try again."
> >
> > Being fairly new systems administration, my question is...How do I
> > synchronize these accounts?
> >
> > TIA,
> >
> > Bob
>
>
>

Relevant Pages

  • Re: 401.1 After IIS6 Setup
    ... Below my sig is the error in the Security ... "The user has not been granted the requested logon type at this machine" ... Caller User Name: NETWORK SERVICE ... > IUSR_COMPUTER name account, right mouse on the account, and reset the ...
    (microsoft.public.inetserver.iis.security)
  • Re: account locked out multiple times per day
    ... recently I pulled the account from domain ... Event Source: Security ... Logon Failure: ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Help attempting to get hacked?
    ... Event Source: Security ... Event Category: Account Management ... Target Account ID: WCPCI\ekeller ... Caller Machine Name: PAMELAMAIN ...
    (microsoft.public.win2000.security)
  • Re: account locked out multiple times per day
    ... recently I pulled the account from domain ... Event Source: Security ... Logon Failure: ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Unknown Domain user - domain authentication appears limited
    ... I have enabled the Tcpip Netbios Helper Service and I can ... seeing the user authenticate anymore in the security logs though it is still ... > Microsoft MVP (Windows Server System: ... >> requested logon type at this computer. ...
    (microsoft.public.windows.server.security)