Groups | Blog | Home
all groups > iis security > august 2007 >

iis security : IWAM_xxxxxxx A/C


DD
8/13/2007 6:54:00 PM
For security reason, I need to disabled the IWAM_USxxxxxxxx INTERNET GUEST
A/C,but disabled theaccount, the event log non stop showing the following
error

"DCOM got error "Logon failure: user account restriction. " and was unable
to logon .\IWAM_USGSCW2000 in order to run the server:
{3D14228D-FBE1-11D0-995D-00C04FD919C1} "

"The server failed to load application '/LM/W3SVC/1/ROOT'. The error was
'The server process could not be started because the configured identity is
incorrect. Check the username and password."

I have trend Micro running on this pc but not required this a/c

Would like to know what are the application still using this a/c and how to
disable it ?



Roger Abell [MVP]
8/13/2007 10:56:16 PM
Are you using IIS on this machine ?
If not, uninstall it, in Add Remove Programs / Windows Components.
If you are, then what do you expect to happen if it is configured to use
that Iwam_ account ?

[quoted text, click to view]

DD
8/16/2007 6:06:22 PM
We are using the IIS for trend Micro, but trendMicro do not required for this
a/c, so I disabled this a/c , found the non stop error message from the event
log.

Not sure which application still using this a/c .



[quoted text, click to view]
Ken Schaefer
8/17/2007 12:00:00 AM
Are you sure Trend Micro does not need this account?

What application is loaded at the root of the Default Web Site?
('/LM/W3SVC/1/ROOT')?

IWAM_<servername> is used to host "out of process" web applications in IIS5
(and also IIS6.0 in IIS5.0 Compatibility Mode). This means that if you run
the web application in medium or high isolation, it runs inside a
dllhost.exe process, and that process' user identity is IWAM_<servername> by
default

Are you running IIS 5.0 or IIS 6.0?

Cheers
Ken

[quoted text, click to view]
DD
8/19/2007 7:52:19 PM
According to Trend , they only need IUSR_xxxx id. only tmcm running on this
machine. how to check which application is loaded at the root ?

using IIS 5.0


[quoted text, click to view]
AddThis Social Bookmark Button