IIS5 HTTP500 internal error solution
I. Error performance IIS5 HTTP 500 internal server error is one of the mistakes we often encounter, its main error performance
It is the ASP program that cannot be browsed but the HTM static page is not affected. In addition, when the error occurs, the system event day
There will be corresponding records.
details as follows:
(1) Performance in IE
This error occurs when browsing the ASP page that is working properly:
Web pages cannot be displayed
There is a problem with the webpage you want to access, so you cannot display it.
Try the following:
Open http://127.0.0.1 home page to find links to the required information.
Click Refresh button, or try again later.
HTTP 500 - Internal server error
Internet Information Services
Technical information (support personal)
details:
Microsoft support
or it could be:
Server Application Error
The Server Has Encountered An Error While Loading An Application Durin
g the processing of your request. please refer to the Event log for mo
Re Detail Information. Please contact the Server Administrator for ASS
iStance.
(2) Safety log record (2)
Event type: failed audit
Source: Security
Event type: login / logout
Event ID: 529
Date: 2001-9-9
Event: 11:17:07
User: NT Authority / System
Computer: MyServer
description:
Login failed:
Reason: User name is unknown or password error
Username: iWam_MyServer
Domain: Mydom
Login type: 4
Login process: Advapi
Authentication package: microsoft_authentication_package_v1_0
Workstation Name: MyServer
Event type: failed audit
Source: Security
Event Type: Account Login
Event ID: 681
Date: 2001-9-9
Event: 11:17:07
User: NT Authority / System
Computer: MyServer
description:
Log in to an account: iWam_MyServer
Sign in: Microsoft_Authentication_Package_v1_0
From workstation: MyServer
Not successful. Error code is: 3221225578
(3) Records in system logs (2)
Event type: error
Source: DCOM
Event type: no
Event ID: 10004
Date: 2001-9-9
Event: 11:20:26
User: N / A
Computer: MyServer
description:
DCOM encounters an error "Unable to update the password. Provide the value that is not allowed in the password."
And not logged in to ./iwam_myserver to run the server:
{3D14228D-FBE1-11D0-995D-00C04FD919C1}
Event type: warning
Event Source: W3SVC
Event type: no
Event ID: 36
Date: 2001-9-9
Event: 11:20:26
User: N / A
Computer: MyServer
description:
The server failed to transfer to the application '/ LM / W3SVC / 4 / root'. The error is the 'RunAs' format must be <
Domain name> /
To get more information about this message, please visit the Microsoft Online Support Site:
Http://www.microsoft.com/contentredirect.asp.
Two. Cause analysis
Comprehensive analysis The above error performance We can see that the password error of the IWAM account (in my computer is IWAM_MYSERVER account) caused HTTP 500 internal error.
Before detailed analysis of the reason for the internal error of HTTP500, you will make a brief sum.
Introduction:
The IWAM account is an built-in account that automatically established when installing IIS5, mainly for startup processes.
The application's Internet information service. The name of the IWAM account will be based on each computer NetBIOS name
Different, different, universal formats are iWam_Machine, namely "iWam" prefix, cable
"_" Plus computer NetBIOS name consists. My computer's NetBIOS name is MyServer,
So my computer on my computer is IWAM_MYSERVER, this is an anonymous account with IIS
Isur_machine naming method is very similar.
IWAM account is established by Active Directory, IIS Metabase database, and COM applications
Use together, the account password is saved separately by the triply, and the IWAM password saved by the three parties by the operating system
Synchronization work. According to the constant, we are responsible for the operating system, we can rest assured that we don't have to worry,
But I don't know if it is bug, what is the reason, the system's password synchronization is sometimes failed,
The password used by the triplet IWAM account is not uniform. When IIS or COM application uses error IWAM password login
When you start the IIS OUT-OF-Process Pooled Applications, the system will errors due to the password.
Reject this request, resulting in the failure of IIS OUT-OF-Process Pooled Applications,
Is our "Cannot run the server {3D14228D-FBE1-11D0-995 in the id10004 error event
D-00C04FD919C1} "(here {3D14228D-FBE1-11D0-995D-00C04FD919C1} is IIS O
UT-OF-Process Pooled Applications Key, you cannot transfer IIS5 applications, HTTP 5
The internal error is produced.
III. Solution
I know the reason for the internal error of HTTP 500, it is relatively simple, that is, manual synchronization
IWAM account in the Active Directory, IIS Metabase database, and passwords in the COM application.
For details, three steps are required, they need to log in to the computer as an administrator to provide sufficient operational rights (IWAM account)
Number as an example of IWAM_MYSERVER).
(1) Change the password of the IWAM_MYSERVER account in Active Directory because the password of the IWAM account is controlled by the system, randomly, we don't know what it is, to complete the following two
Step's password work, we must set the iWAM account password to a value we know.
1. Select "Start" -> Programs -> "Administrative Tools" -> "Active Directory Users and Computers",
Start the "Active Directory User and Computer" management unit.
2. Click "User", select "IWAM_MYSERVER" on the right, right click on "Reset Password (T) ...",
Set up new passwords to IWAM_MYSERVER in the Reset Password to IWAM_MYSERVER, which we set it into
"AboutNT2001" (without quotation marks), determine, wait for the password to modify success.
(2) Synchronous IIS Metabase password passwords may be too sensitive because this change is too sensitive, Microsoft does not modify IIS Metabase IWAM_M
The YSERVER account password provides an explicit user interface, only with IIS5, providing a management script adsut
Il.vbs, this script is located in the c: / inetpub / adminsscripts subdirectory (location may be installed)
The difference between IIS5 is set to change).
Adsutil.vbs script is powerful, the parameters are very large and the usage is complicated, only this feet are provided.
Method for changing the IWAM_MYSERVER account password:
AdsuTil Set W3SVC / WamuserPass Password
The "password" parameter is the new password for the IWAM account to set. So we will be in IIS Metabase
The password of the iWam_myserver account is modified to "AboutNT2001" is:
C: / inetpub / adminsscripts> Adsutil Set W3SVC / WamuserPass "ABOUTNT2001"
After the revision is successful, the system will have the following tips:
Wamuserpass: (String) "Aboutnt2001"
(3) The password of IWAM_MYSERVER used in synchronization COM application
Synchronize the IWAM_MYSERVER of the COM application, we have two ways to choose from: one
It is the use of component service MMC management units and the other is to use the IWAM account synchronization script synciwam.vbs.
1. Use the component service MMC management unit
(1) Startup component service management unit: Select "Start" -> "Run" -> "MMC", start the management
Table, open the Add / Delete Management Unit dialog box, add the Component Services management unit.
(2) Find "Component Service" -> "Computer" -> "My Computer" -> "COM App) ->" O
UT-OF-Process Pooled Applications ", right-click" OUT-OF-Process Pooled Appli
CATIONS "->" Properties ".
(3) Switch to the "Sign" selection of the "OUT-OF-Process Pooled Applications" Properties dialog box
Card. "This application runs under the following account" "This user" will be selected, the user name is
"IWam_Myserver". These are default, no need to change. In the following "password" and "confirmation secret
The correct password "AboutNT2001" is entered in the text box to determine exit.
(4) System If prompted "The application is created by more than one external product. You are sure you want to be
Support? "It is determined when it is.
(5) If we set other web "Application Protection" to "High (independent)" in IIS,
Then the IWAM account password for the COM application used by this web also needs to synchronize. Repeat (1) -
(4) Step, synchronize other IWAM account passwords for other Out of Process Applications.
2, use IWAM account synchronization script synciwam.vbs
In fact, Microsoft has found that IWAM account has problems in password synchronization, so the management script in IIS5
A script synciwam.vbs is written separately for the IWAM account password. This script is located in C: / INE.
Under the TPUB / Adminscripts subdirectory (location may vary depending on the settings you have installed IIS5). Synciwam.vbs script usage is relatively simple: cscript synciwam.vbs [-v | -h]
"-V" parameter represents the entire process of detailed display scripts (recommended), "- h" parameter is used to display
Simple help information.
We want to sync the password of the IWAM_MYSERVER account in the COM application, just need to execute
"
Cscript synciwam.vbs -v, as follows:
Cscript c: /inetpub/adminscripts/synciwam.vbs -v
Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2000. all rights reserved.
WamuserName: IWAM_MYSERVER
Wamuserpass: ABOUTNT2001
IIS Applications Defined:
Name, Appisolated, Package ID
W3SVC, 0, {3D14228C-FBE1-11D0-995D-00C04FD919C1}
Root, 2,
Iishelp, 2,
Iisadmin, 2,
Iissamples, 2,
MSADC, 2,
Root, 2,
Iisadmin, 2,
Iishelp, 2,
Root, 2,
Root, 2,
Out of process Applications Defined:
COUNT: 1
{3D14228D-FBE1-11D0-995D-00C04FD919C1}
Updating Applications:
Name: IIS OUT-OF-Process Pooled Applications Key: {3D14228D-FBE1-11D0-
995D-00c04fd919c1}
As can be seen from the execution of the above script, using the synciwam.vbs script to serve the part of the component service
The law is more comprehensive and fast. It first found IWAM account "IWAM_MYSERVER" from the Metabase database of IIS
And take out the corresponding password "ABOUTNT2001", then find all the defined IIS Applications and
Out of process Applications, and synchronize each Out of Process Applicative
The IWAM account password for the NS application.
When using the synciwam.vbs script, pay attention to a problem, that is, before you run SynciWam.vbs,
The IS Metabase database must be guaranteed to be consistent with the IWAM password in Active Directory. because
The SynciWam.vbs script is from the IIS Metabase database instead of getting IW from Active Directory.
The password of the AM account, if the password in IIS Metabase is incorrect, the password obtained by SynciWam.vbs
It will also be incorrect, the synchronization operation is executed to the "Updating Applications" system will report 80110414
Mrror, that is, "find the application {3D14228D-FBE1-11D0-995D-00c04FD919C1}".
Ok, until now, IWAM account is in Active Directory, IIS Metabase database and COM
The password in the application has been successful, and your ASP program can run!
