Re: How do I trace a batch process?

What is your actual issue ?
The event message seems to be saying that you have
IIS installed on machine named EMPIRE but that its
IWam_EMPIRE account is not granted the batch logon
user right (which it needs). However, it also appears
that the account is not EMPIRE\IWam_EMPIRE as one
would expect in a normal (unmodified) setup of IIS on
a member in domain CLAIMLINE, but instead it appears
to be configured to use CLAIMLINE\IWam_EMPIRE.
This makes be think perhaps that EMPIRE is a DC and
IIS was installed before dcpromo, rather than after as
should be done.

"Greg" <Greg@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A03F9FD2-36AC-4E81-8372-3437C1BC1B4E@xxxxxxxxxxxxxxxx
I know logon type 4 is a batch process, like scheduled tasks. This looks
like
a hack job, how can I find out where this is coming from? Below is the
event
log. TIA

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 534
Date: 10/13/2006
Time: 11:40:48 AM
User: NT AUTHORITY\SYSTEM
Computer: EMPIRE
Description:
Logon Failure:
Reason: The user has not been granted the requested
logon type at this machine
User Name: IWAM_EMPIRE
Domain: CLAIMLINE
Logon Type: 4
Logon Process: DCOMSCM
Authentication Package: Negotiate
Workstation Name: EMPIRE




.

Relevant Pages

  • IIS, Trend, Exhaustion, Permissions, Heelp!!!
    ... passwords using IIS and adsutil as in List 2. ... Logon Failure: ... Caller User Name: NETWORK SERVICE ... To reset the password for the IUSR_ComputerName account, ...
    (microsoft.public.windows.server.sbs)
  • Trend, IIS, Permissions, Exhaustion and close to very bad language :-) Heelp!
    ... passwords using IIS and adsutil as in List 2. ... The errors in list 1 disappear and Trend Clients update as expected. ... Logon Failure: ... To reset the password for the IUSR_ComputerName account, ...
    (microsoft.public.windows.server.sbs)
  • Re: IIS Subauthentication Required
    ... Verify that the user account you created has the necessary logon permissions, and also verify that the user has the necessary NTFS permissions to the files/folders in question ... Now, in a normal IIS installation, IIS install creates the IUSR account (in ... >I have 4 Web servers that should all be set up the same; ...
    (microsoft.public.inetserver.iis.security)
  • Re: Failure Audits in Event log question
    ... This is someone trying to gain access through your web site [IIS logon ... times in the security log and then add a firewall rule to block all access ... > CATEGORY Account Logon ...
    (microsoft.public.win2000.security)
  • Re: IIS 6 Anonymous / SUS always 401.3
    ... when you ONLY have anonymous authentication enabled suggests that IIS ... this user identity lacks access to the requested resource. ... LOGON to have the same permissions. ... Event Type: Success Audit ...
    (microsoft.public.inetserver.iis.security)