Within IIS 6, I am trying to change the Logon account for all of the IIS
services (IIS Admin, HTTP SSL, and WWW) from the Local System account to a
custom account in the Administrators group. Whenever I try to start IIS
Admin, the service terminates with an error in the Event Log: "Access is
Denied". When I set the Logon account back to the Local System account,
services start.

The Administrators group has the required permissions on inetinfo.exe and
the system32 and inetsrv directories. In the Local Security Policy, I've
tried giving the Administrators group the "replace a process level token" and
"adjust memory quotas for a process" rights (Administrators group has most
rights already).

After researching on Microsoft's site, I ran the command line below:
sc query IISADMIN
It showed that the STATE was "STOPPED" and the WIN32_EXIT_CODE was 5.

answered in inetserver.iis

Cheers
Ken

--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com


[quoted text, click to view]
: Within IIS 6, I am trying to change the Logon account for all of the IIS
: services (IIS Admin, HTTP SSL, and WWW) from the Local System account to a
: custom account in the Administrators group. Whenever I try to start IIS
: Admin, the service terminates with an error in the Event Log: "Access is
: Denied". When I set the Logon account back to the Local System account,
: services start.
:
: The Administrators group has the required permissions on inetinfo.exe and
: the system32 and inetsrv directories. In the Local Security Policy, I've
: tried giving the Administrators group the "replace a process level token"
and
: "adjust memory quotas for a process" rights (Administrators group has most
: rights already).
:
: After researching on Microsoft's site, I ran the command line below:
: sc query IISADMIN
: It showed that the STATE was "STOPPED" and the WIN32_EXIT_CODE was 5.
:
: Does anyone have any ideas?