IIS does not support ASP. It only supports HTML solutions.

I. error message

Iis5's http 500 internal server error is one of the common errors that we encounter. Its main error is that asp programs cannot browse but htm static webpages are not affected. In addition, System Event Logs and Security Event Logs are recorded when an error occurs.

The details are as follows:

(1) Performance in ie

The following error occurs when you browse asp pages that previously run normally:

Webpage cannot be displayed

The webpage you want to access has problems, so it cannot be displayed.

Please try the following operations:

Go to the http: // 127.0.0.1 homepage and find a link to the desired information.

Click Refresh or try again later.

Http 500-Internal Server Error

Internet Information Service

Technical Information (Personal Support)

Details:

Microsoft support

Or:

Server application error

The server has encountered an error while loading an application during the processing of your request. please refer to the event log for more detail information. please contact the server administrator for maintenance.

(2) security log records (2)

Event Type: Failed Review

Event Source: security

Event Type: logon/logout

Event id: 529

Date: 2001-9-9

Event: 11:17:07

User: nt authoritysystem

COMPUTER: myserver

Description:

Logon Failed:

Cause: Unknown user name or incorrect password

Username: iwam_myserver

Domain: mydom

Logon type: 4

Logon Process: advapi

Authentication package: microsoft_authentication_package_v1_0

Work Station Name: myserver

Event Type: Failed Review

Event Source: security

Event Type: Account Logon

Event id: 681

Date: 2001-9-9

Event: 11:17:07

User: nt authoritysystem

COMPUTER: myserver

Description:

Log on to the account: iwam_myserver

Login User: microsoft_authentication_package_v1_0

Slave Workstation: myserver

Failed. Error code: 3221225578

(3) records in system logs (2)

Event Type: Error

Event Source: dcom

Event Type: None

Event id: 10004

Date: 2001-9-9

Event: 11:20:26

User: n/

COMPUTER: myserver

Description:

"The password cannot be updated. The value provided to the new password contains the value that is not allowed in the password. "And cannot log on to. iwam_myserver to run the server:

3d14228d-fbe1-11d0-995d-00c04fd919c1}

Event Type: Warning

Event Source: w3svc

Event Type: None

Event id: 36

Date: 2001-9-9

Event: 11:20:26

User: n/

COMPUTER: myserver

Description:

The server failed to transfer to the application '/lm/w3svc/4/root '. The error is that 'runas format must be <Domain Name> <User Name> or only <User Name> '.

To get more information about this message, visit the microsoft online support site: http://www.microsoft.com/contentredirect.asp.

Ii. Cause Analysis

According to the above error analysis, we can see that the internal http 500 error is mainly caused by the Password error of the iwam account (iwam_myserver account on my computer.

Before analyzing the cause of an internal error in http500 in detail, let's give a brief introduction to the iwam account: the iwam account is a built-in account automatically created by the system when iis5 is installed, it is mainly used to start internet Information Services for applications outside the process. The name of the iwam account varies depending on the netbios name of each computer. The common format is iwam_machine, it is composed of the prefix "iwam", the connection line "_", and the computer's netbios name. My computer's netbios name is myserver, so the iwam account name on my computer is iwam_myserver, which is very similar to the way in which the iis Anonymous Account isur_machine is named.

After the iwam account is created, it is used by the active directory, iis metabase database, and com + applications. The account and password are respectively saved by the three parties, the operating system is responsible for synchronizing the iwam password stored by the three parties. We can rest assured that the work undertaken by the operating system does not have to worry about errors, but we do not know whether it is a bug or another reason. The system sometimes fails to synchronize the password of the iwam account, the password used by the third-party iwam account is inconsistent. When iis or com + applications use the wrong iwam password to log on to the system and start iis out-of-process pooled applications, the system rejects this request due to a wrong password, this causes iis out-of-process pooled applications to fail to start, that is, the "cannot run server 3d14228d-fbe1-11d0-995d-00c04fd919c1}" (Region} is the key of iis out-of-process pooled applications) we see in the id10004 error event and cannot be transferred to the iis5 application, an internal http 500 error occurs.

Iii. Solution

Knowing the cause of an internal error in http 500 makes it easy to solve the problem, that is, manually synchronize the password of the iwam account in active directory, iis metabase database, and com + applications.

You must log on to the computer as an administrator in three steps to provide sufficient operation permissions (iwam uses iwam_myserver as an example ).

(1) change the password of the iwam_myserver account in active directory

Because the password of the iwam account is controlled by the system and generated randomly, we don't know what it is. To complete the password synchronization in the following two steps, we must set the password of the iwam account to a value we know.

1. Choose Start> program> Administrative Tools> active directory users and computers to start the active directory users and computers Management Unit.

2. Click "user", select "iwam_myserver" on the right, right-click and select "Reset Password (t )... ", in the Reset Password dialog box that appears, set a new password for iwam_myserver. Here we will set it to" aboutnt2001 "(without quotation marks). OK, wait until the password is successfully modified.

(2) synchronize the password of iwam_myserver account in iis metabase

This change may be too sensitive and important. Microsoft did not provide an explicit user interface for us to modify the iwam_myserver account password in iis metabase, and only provided a management script adsutil with iis5. vbs. The script is located in the c: inetpubadminscripts subdirectory (the location may vary depending on the settings you set when installing iis5 ).

The adsutil. vbs script has powerful functions, many parameters, and complex usage. Here we only provide the method to use this script to modify the iwam_myserver account password:

Adsutil set w3svc/wamuserpass password

The "password" parameter is the new password of the iwam account to be set. Therefore, the command to change the password of iwam_myserver in iis metabase to "aboutnt2001" is:

C: inetpubadminscripts> adsutil set w3svc/wamuserpass "aboutnt2001"

After the modification is successful, the system prompts the following:

Wamuserpass: (string) "aboutnt2001"

(3) password of iwam_myserver used to synchronize com + applications

The iwam_myserver password used to synchronize com + applications. You can choose either the component service mmc management unit or the iwam account synchronization script synciwam. vbs.

1. Use the component service mmc Management Unit

(1) Start the Component Service Management Unit: Choose Start> RUN> mmc to start the management console and open the Add/delete Management Unit dialog box, add the Component Service Management Unit.

(2) choose component service> Computer> my computer> com + application> out-of-process pooled applications ", right-click "out-of-process pooled applications"-> "properties ".

(3) switch to the "sign" tab in the "out-of-process pooled applications" attribute dialog box. "This application runs under the following accounts" and "this user" is selected, with the username "iwam_myserver ". These are all default values and do not need to be modified. Enter the correct password "aboutnt2001" in the "password" and "Confirm Password" text boxes below to exit.

(4) If the system prompts "the application is created by more than one external product. Are you sure you want to be supported by these products ?" .

(5) If we set "application protection" for some other web pages in iis to "high (independent )", the iwam account and password of the com + application used by the web must also be synchronized. Repeat Step (1)-(4) To synchronize the iwam account and password of the corresponding out of process application.

2. Use the iwam account synchronization script synciwam. vbs

In fact, Microsoft has discovered that the iwam account has problems in password synchronization. Therefore, in the iis5 management script, a script synciwam is written separately for the iwam account and password synchronization. vbs. The script is located in the c: inetpubadminscripts subdirectory (the location may vary depending on the settings you set when installing iis5 ).

Synciwam. vbs script is easy to use:

Cscript synciwam. vbs [-v |-h]

The "-v" parameter indicates that the entire script execution process is displayed in detail (recommended), and the "-h" parameter is used to display simple help information.

To synchronize the password of the iwam_myserver account in the com + application, Run "cscript synciwam. vbs-v" as follows:

Cscript c: inetpubadminscriptssynciwam. vbs-v

Microsoft (r) windows script host version 5.6

Copyright (c) microsoft corporation 1996-2000. All rights reserved.

Wamusername: iwam_myserver

Wamuserpass: aboutnt2001

Iis applications defined:

Name, appisolated, package id

W3svc, 0, 3d14228c-fbe1-11d0-995d-00c04fd919c1}

Root, 2,

Iishelp, 2,

Iisadmin, 2,

Iissamples, 2,