This page
Symptom Cause Solution Status More Information Reference
symptom
When you browse the existing Active Server Pages (ASP page, the browser may return "HTTP 500 - INTERROR ERROR" or "Server Application Error" error message. After the error message appears, if you view the server's system event log, you will find the following two:
Source: W3SVC
Error: Configured Identity Is IncorRect
- with -
Source: DCOM
Error: unable to logon ward_computername
If you are app
Only "Basic Authentication" is enabled and "Application Protection" is set to "low", the application can start to run again. In addition, if new ASP applications have been created after the error occurs, browse this new application does not have any errors.
Related Error Messages You may also receive the following error message:
In the browser:
HTTP 500 - INTERNAL Server Error
- or -
Server Application Error
.
In the system event log:
Source: DCOM
Error: DCOM GOT Error "Logon Failure: Unknown Username or Bad Password" Unable to logon ./iwam_servername in Order to Run The Server.
- with -
Source: W3SVC
Error: "The server failed to load application '/LM/W3SVC/1/Root/op.'The error was' The server process could not be started because the configured identity is incorrect.Check the username and password.
- or -
Source: w3svc error: "The Server failed to load application '/lm/w3svc/4/root'.the error WAS' C000003B '."
- with -
Source: W3SVC error: "The com application '{3D14228D-FBE1-11D0-995D-00c04FD919C1}' at '/ lm / w3svc / 4 / root' failed to activate out of process."
Note: If you select "Run WWW service in IIS 5.0 Isolation mode", you will see the error message in Microsoft Internet Information Service 6.0 (IIS 6.0). For the steps to select the "Run the WWW service in IIS 5.0 Isolation" checkbox, see the "More Information" section of this article.
the reason
IUSR_
Computer name and IWAM_
The username and password of the computer name account are stored in three locations:
• Internet Information Server (IIS) Database Domain (Windows NT) or Local User and Group (Windows 2000) User Manager • Microsoft Transaction Server (Windows NT) or Component Service (Windows 2000) If in these three locations The user name and / or password are not synchronized, you will receive the above error message. solution
To resolve this issue, you must ensure that IUSR and IWAM account passwords in the above three locations are synchronized. There are two ways to synchronize: You can set the password for IWAM and IUSR accounts in User Manager (Windows NT) or User and Group (Windows 2000), and change the password in the IIS metadata to reflect the same password, and vice versa . Use one of the following methods to synchronize your password.
Note: For instructions on how to use the management script utility (Adsutil.vbs) and how to change your password in Microsoft Transaction Server (MTS), or Component Services, see the "More Information" section.
Method 1: Change the password in the user manager or user and group to match the IIS metadata library password
1. In the Command window, find the folder where the adsutil.vbs file is located. Use the Adsutil.vbs tool to get the password for IWAM and IUSR accounts from the IIS meta database. 2. To change the IUSR and / or IWAM password in Windows NT, follow these steps:
a. On the Start menu, point to the program, point to Administrative Tool, and then click Domain Manager. In Domain User Manager, you can change account information for all Windows NT user accounts and groups. b. Double-click the IUSR_ computer name and / or IWAM_ computer name user, then modify the password to reflect the IIS metadata library password you obtained in step 1. To change the IUSR and / or IWAM password in Windows 2000, follow these steps:
a. On the Start menu, point to the program, point to Administrative Tool, and then click Computer Management. b. Under the System Tool Node, click to expand the Local User and Groups and User nodes. In the User Node, you can change the account information of all Windows 2000 user accounts and groups. c. Right-click on the IUSR_ computer name and / or iWam_ computer name account, and then click Set Password. d. Modify the password to reflect the IIS metadata library password you obtained in step 1. 3. Browse the ASP page that returns an error message and checks if the problem is resolved.
Method 2: Change the IIS metabase to match the IUSR and / or IWAM password
1. To change the IUSR and / or IWAM password in Windows NT, follow these steps:
a. On the Start menu, point to the program, point to Administrative Tool, and then click Domain Manager. In Domain User Manager, you can change account information for all Windows NT user accounts and groups. b. Double-click the IUSR_ computer name and / or IWAM_ computer name account, and type the new password. To change the IUSR and / or IWAM password in Windows 2000, follow these steps:
a. On the Start menu, point to the program, point to Administrative Tool, and then click Computer Management. b. Under the System Tool Node, click to expand the Local User and Groups and User nodes. In the User Node, you can change the account information of all Windows 2000 user accounts and groups. c. Right-click on the IUSR_ computer name and or IWAM_ computer name account, and then click Set Password. Type a new password. 2. In the Command window, find the folder where the adsutil.vbs file is located. Use the Adsutil.vbs utility to set your password for the IWAM and IUSR accounts in the IIS configuration database. 3. Browse the ASP page that returns an error message and checks if the problem is resolved. Note: Although the password in Microsoft Transaction Server (Windows NT) and Component Services (Windows 2000) is usually consistent with the passwords in the IIS meta database, please update the Microsoft Transaction Server (MTS) or component service if the problem is still not resolved. IWAM password. For more information, see "How to change the password in the MTS or component service" section.
status
This phenomenon is designed to make.
More information
How to use Adsutil.vbsiis with a script file called Adsutil.vbs to get or set the IUSR and IWAM account passwords in the IIS metabase. In Windows NT 4.0, Adsutil.VBS is usually located in <
Drive> / WinNT / System32 / InetSrv / Adminsamples folder. In Windows 2000, Adsutil.vbs is located in <
Drive> / INETPUB / ADMINScripts folder.
The following table lists the syntax of the various functions of the AdsUtil.vbs utility:
Functional Grammar obtain IUSR account password cscript.exe adsutil.vbs get w3svc / anonymoususerpass get IWAM account password cscript.exe adsutil.vbs get w3svc / wamuserpass set IUSR account password cscript.exe adsutil.vbs set w3svc / anonymoususerpass "password" Set the IWAM account Password Cscript.exe Adsutil.vbs Set W3SVC / WamuserPass "Password"
Note: When you try to get a password in Windows NT 4.0, the password is displayed as a plaintext; but in Windows 2000, the password is displayed as an asterisk. To make the password as a plaintext in Windows 2000, you must modify the adsutil.vbs to display the bright code. To do this, follow these steps:
1. In the Notepad, open Adsutil.vbs. 2. On the Edit menu, click Find, type iSsecureProperty = true, and then click Find Next. 3. Change "ISSecureProperty = true" to "ISSecureProperty = false". 4. Save the changes made to Adsutil.vbs and close the Notepad.
How to change the password in the MTS or component service
Windows 2000IIS 5.0 provides the SynciWam.vbs file to update the startup ID of all IIS COM application packages running outside the process. Synciwam.vbs Scripts is located in <
Drive> / INETPUB / ADMINScripts folder. You can run SynciWam.vbs using CScript or WScript. To use SynciWam.vbs, type the following command at the command prompt:
Cscript.exe synciwam.vbs -v
To make all changes take effect, you may need to restart IIS. To restart IIS, please
Start menu, click
Run, type
Iisreset, then click
determine.
Note: Use SynciWam.vbs to reset all process outsource applications ("中" and "high" isolated) to IWAM_
Computer name.
Windows NT 4.0IIS 4.0 does not provide any tools such as SynciWam.vbs scripts. You must manually change the IWAM password by using MTS Explorer to manually change each application running in a separate memory process. To do this, follow these steps:
1. On Windows's Start menu, point to Programs, point to Windows NT Option Pack 4, click Microsoft Transaction Server, and then click Transaction Server Explorer. 2. In Transaction Server Explorer, click to expand the Microsoft Transaction Server, computer, my computer, and installed package nodes. 3. Right-click one of the installed packages and click Properties. 4. On the Identification tab, if the package is running under the IWAM_ computer name user ID, type the password to match the IIS metadata, and then click OK. 5. Repeat steps 3 and 4.6 for each package installed. Restart IIS to make these changes take effect. To do this, follow these steps:
a. On Windows's Start menu, click Run, type CMD, and then click OK. b. Under Command Promats, type the following command in turn:
• Net Stop iisadmin / y • NET Start W3SVC • NET Start MsftpsVC (Use this command if you run the FTP server) • NET Start SMTPSVC (Use this command if you run the SMTP server) • NET Start CISVC (if you run the index server, Use this command)
Run IIS 6.0 WWW service in IIS 5.0 isolation mode
1. Click Start, and then click Run. 2. In the Run dialog box, type inetmgr, and then click OK. 3. In the Internet Information Services (IIS) Manager window, right-click the "Web Site" folder, and then click Properties. 4. On the Service tab of the Web Site Properties dialog box, click to select "Run WWW service in IIS 5.0 Isolation mode". 5. Click OK to close the Web Site Properties dialog. 6. Close the Internet Information Services (IIS) Manager window.
reference
For additional information, click the article number below to see the article in the Microsoft Knowledge Base:
255770 PRB: LOGON FAILURE: (Login Failure:) Unknown User Name OR Bad Password When You Run Out-of-Process Webs (User Name or Error Password When Running Process Web)
240225 Description of the Adsutil and MetaEdit utilities for modifying the metadata 240941 IIS metadata
The information in this article applies to:
• Microsoft Internet Information Server 4.0 • Microsoft Internet Information Services 5.0 • Microsoft Internet Information SERVICES 6.0
Back to top
Keywords: KBPRB KBSecurity KBServer Kbsysadmin Kbweb Server KB297989
Back to top
