Groups | Blog | Home
all groups > iis security > june 2004 >

iis security : Event ID 2266 error



Lorenzo Pena
6/30/2004 2:17:09 PM
I have a new IIS 6.0 web server running in Worker Process Isolation Mode.
There are about 150 ASP apps distributed among 12 application pools.

I keep getting the following error in the Application log.

Source: W3SVC-WP
Event Id: 2266
Type: Warning
User: n/a
Description: the account that the current worker process is running
under does not have SeTcbPrivilege privilege, the anonymous password sync
feature and the Digest Authentication feature are disabled.

How can I find out which of my app pools is the one which is causing the
error?

Any help will be appreciated.

Thanks.

richardmarr[MS] NO[at]SPAM online.microsoft.com
7/2/2004 7:17:40 AM

Check your metabase.xml for any instances of AnonymousPasswordSync=true
If this is set at any node and the associated application pool identity is
something other than system you wil get this error.
To get rid of the events you can change the the setting to false.

Here are some references to this setting.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/iissdk/iis/
ref_mb_anonymouspasswordsync.asp

http://support.microsoft.com/default.aspx?scid=KB;EN-US;332167



//Richard
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//

Lorenzo Pena
7/2/2004 7:44:00 AM
Richard,

Thanks for the reply.

I searched my metabase.xml and did not find any instance of
AnonymousPasswordSync=True.

There are a few applications that have Anonymous Access enabled but those
are all assigned to Application pools that have Local System as the
applicaiton pool identity.


[quoted text, click to view]

richard[MS] NO[at]SPAM online.microsoft.com
7/3/2004 11:16:52 AM
Lorenzo,

Check for UseDigestSSP . ,
Change this to true if its set to false .

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/iissdk/iis/
ref_mb_usedigestssp.asp


"This posting is provided "AS IS" with no warranties, and confers no
rights. You assume all risk for your use. © 2003 Microsoft Corporation. All
rights reserved."

Richard Marr
Microsoft IIS Support Professional
AddThis Social Bookmark Button