Groups | Blog | Home
all groups > iis security > september 2004 >

iis security : How can I start IIS6.0 service under Domain Account ?(Kerberos)


Dmitry P.
9/30/2004 12:01:03 AM
History:
We want to use IIS for Intranet as middletier application with Kerberos
Delegation.

When we start IIS6.0 service under LocalSystem account - Kerberos delegation
dont work. We can see in Event Log that Kerberos Logon was successful to IIS
, but IIS requests SQL Server Database as LocalSystem (NT_ANONYMOUS) user.
All tunings which one can read in "TroubleShouting Kerberos Delegation"
article have been applied.

When we try to start IIS6.0 under domain accout (Administrators Group on IIS
Computer) we can see "Access is denied 5" message during service start and
Event Log EventID 7023 Access is denied.

Ken Schaefer
10/1/2004 9:00:27 AM
Hi,

Please see response in inetserver.iis group

Cheers
Ken


[quoted text, click to view]

AddThis Social Bookmark Button