Solve the problem that ghost XP SP2 fails to install iis5.1

Today, we have solved a depressing problem for a long time. We can only reinstall the system before, because the ghost version is basically a simplified version, which simplifies things that many ordinary people don't need, but anyone who wants IIS to be reduced ..... now, I want to share my experience in installing IIS In ghostxp + SP2!

I. If you are using the ghost XP 7.0 special edition of tomato garden computer company, you can directly download this IIS installation package (100% successful ):

Address: http://soft.lingding.net/%CF%B5%CD%B3%B9%A4%BE%DF/%CF%B5%CD%B3%B0%B2%D7%B0/iissetup.rar

(Note: This compressed package has more than 20 mb, including iis5.0, 5.1, and 6.0. It is installed in the WINDOS component, when the system prompts that xxx files are required, specify the path for storing the downloaded files)

2. If you are using another ghost XP version, perform the following operations:

1. explanations from Microsoft:

A. test the integrity of SeCEdit. SDB:
Start -- run -- cmd
Esentutl/g C:/Windows/security/database/SeCEdit. SDB
Return
Integrity check successful.
After the test, the system prompts "normal". If no problem occurs, fix it again!
B. Database Restoration:
Esentutl/p c:/Windows/security/database/SeCEdit. SDB
Then try to install IIS again!

 

2. In XP, IIS cannot interpret dynamic pages such as ASP, which are mainly caused by a Microsoft Bug. The IWAM account password is incorrect due to system reasons, resulting in an iis500 internal error.

IWAM account introduction:
The IWAM account is a built-in account automatically created by the system when iis5 is installed. It is mainly used to start Internet Information Services for applications outside the process. The name of the IWAM account varies depending on the NetBIOS name of each computer. The common format is IWAM_machinename, it is composed of the prefix "IWAM", the connection line "_", and the computer's NetBIOS name. My computer's NetBIOS name is jallen, so the IWAM account name on my computer is iwam_jallen, which is very similar to the way in which the IIS Anonymous Account isur_machinename is named.

The Final Cause of IIS 500 error:
After the IWAM account is created, it is used by the Active Directory, IIS metabase database, and COM + applications. The account and password are respectively saved by the three parties, the operating system is responsible for synchronizing the IWAM password stored by the three parties. We can rest assured that the work undertaken by the operating system does not have to worry about errors, but we do not know whether it is a bug or another reason. The system sometimes fails to synchronize the password of the IWAM account, the password used by the third-party IWAM account is inconsistent. When IIS or COM + applications use the wrong IWAM password to log on to the system and start IIS Out-of-process pooled applications, the system rejects this request due to a wrong password, this causes IIS Out-of-process pooled applications to fail to start, that is, the "cannot run server {3d14228d-fbe1-11d0-995d-00c04fd919c1}" we see in the id10004 error event (here {token} is the key of IIS Out-of-process pooled applications ), it cannot be transferred to the iis5 application. An internal HTTP 500 error occurs.

Solution:
Knowing the cause of an internal error in HTTP 500 makes it easy to solve the problem, that is, manually synchronize the password of the IWAM account in Active Directory, IIS metabase database, and COM + applications.

Procedure/step:
You must log on to the computer as an administrator in three steps to provide sufficient operation permissions (IWAM_machinename is used as an example ).

(1) change the password of IWAM_machinename in Active Directory
Because the password of the IWAM account is controlled by the system and generated randomly, we don't know what it is. To complete the password synchronization in the following two steps, we must set the password of the IWAM account to a value we know.

A. Select "Management Tools"> "Computer Management"> "local users and groups"> "users" in the control panel"
B. Find "IWAM_machinename", right-click and select "Reset Password (t )... ", in the Reset Password dialog box that appears, set a new password for IWAM_machinename. Here we will set it to" iis500 "(without quotation marks). OK, wait until the password is successfully modified.
(2) synchronize the password of the IWAM_machinename account in IIS metabase
This change may be too sensitive and important. Microsoft did not provide an explicit user interface for us to modify the IWAM_machinename account password in IIS metabase, and only provided a management script adsutil with iis5. vbs. The script is located in the C:/inetpub/adminscripts subdirectory (the location may vary depending on the settings you set when installing iis5 ).
The adsutil. vbs script has powerful functions, many parameters, and complex usage. Here, we only provide the method to use this script to modify the password of the IWAM_machinename account:
Adsutil set w3svc/wamuserpass Password
The "password" parameter is the new password of the IWAM account to be set. Therefore, the command to change the password of IWAM_machinename in IIS metabase to "iis500" is:
C:/inetpub/adminscripts> adsutil set w3svc/wamuserpass "iis500"

Specific Operation: "run"-> "cmd"-> go to "C:/inetpub/adminscripts>" directory-> enter adsutil set w3svc/wamuserpass "iis500" to confirm;
After the modification is successful, the system prompts the following:

Wamuserpass: (string )"******"
(3) synchronize the IWAM_machinename password used by the COM + application
In fact, Microsoft may have discovered that the IWAM account has problems in password synchronization. Therefore, in the iis5 management script, a script synciwam is written separately for the IWAM account and password synchronization. vbs, we will use the synchronization script synciwam of this IWAM account. vbs. This script is the same as adsutil. like vbs, it is also located in the C:/inetpub/adminscripts subdirectory (the location may vary depending on the settings you set when installing iis5 ).
Synciwam. vbs script is easy to use:
Cscript synciwam. vbs [-v |-H]
The "-V" parameter indicates that the entire script execution process is displayed in detail (recommended), and the "-h" parameter is used to display simple help information.
To synchronize the password of the IWAM_machinename account in the COM + application, Run "cscript synciwam. vbs-V" as follows:
Cscript C:/inetpub/adminscripts/synciwam. vbs-V

Specific Operation: Enter cscript synciwam. vbs-V on the above page to confirm;
The following information is displayed after successful execution:

Microsoft (r) Windows Script Host version 5.6
Copyright (c) Microsoft Corporation 1996-2000. All rights reserved.
Wamusername: IWAM_machinename
Wamuserpass: iis500
IIS applications defined:
Name, appisolated, package ID
W3SVC, 0, {3d14228c-fbe1-11d0-995d-00c04fd919c1}
Root, 2,
IISHelp, 2,
IISADMIN, 2,
Iissamples, 2,
MSADC, 2,
Root, 2,
IISADMIN, 2,
IISHelp, 2,
Root, 2,
Root, 2,
Out of process applications defined:
Count: 1
{3d14228d-fbe1-11d0-995d-00c04fd919c1}
Updating applications:
Name: IIS Out-of-process pooled applications key: {3d14228d-fbe1-11d0-995d-00c04fd919c1}
It first finds the IWAM account "IWAM_machinename" from the metabase database of IIS, obtains the corresponding password "iis500", and then finds all the defined IIS applications and out of process applications, and synchronize the IWAM account and password of each out of process applications application one by one.
When synciwam. vbs script is used,
Note that before running synciwam. vbs, you must ensure that the IIS metabase database and IWAM password in Active Directory are consistent.
Because synciwam. the vbs script obtains the IWAM account password from the IIS metabase database rather than from the Active Directory. If the password in IIS metabase is incorrect, synciwam. the password obtained by vbs is incorrect. When the synchronization operation is performed on "Updating Applications", the system reports a 80110414 error, that is, "The application {3d14228d-fbe1-11d0-995d-00c04fd919c1} cannot be found }".
PS:
An error "error: 8004e00f:" occurs when the password of IWAM_machinename used by the COM + application is synchronized.
In the console, choose "Control Panel"> "Management Tools"> "component service"> "computer"> "my computer" to view COM + applications! An error occurred here, saying that you cannot talk to the Microsoft Distributed Event Processing Coordination Program ......; The following solutions are available.

 

1. Delete the keys in the registry:
? HKEY_LOCAL_MACHINE/system/CurrentControlSet/services/MSDTC
? HKEY_LOCAL_MACHINE/software/Microsoft/MSDTC
? Hkey_classes_root/CID
2. Stop MSDTC: net stop MSDTC
3. Uninstall the MSDTC Service: MSDTC-uninstall
4. reinstall the MSDTC Service: MSDTC-install
5. restart the computer

In addition, if you have successfully installed IIS, but cannot start properly, if the message "the specified metadata cannot be found" is displayed, perform the following operations:

Go to control panel-Add/delete programs, click "show updates" at the top, and find "Windows XP software update, uninstall windowsxp-kb939373-x86-chs.exe patch. this patch prevents IIS from remotely executing code. After uninstalling the patch, it can solve the above problems!

If the system prompts "Unexpected error 0x8ffe2740"

This is because a port conflict may occur in the system. by default, IIS uses port 80 for HTTP Communication. if the application except IIS is running and port 80 is being used on the same IP address, you may also receive this error message when trying to start the website using IIS manager.

Solution
To solve this problem, you can perform any of the following operations:
? In IIS manager, change the website binding port to a port other than port 80.
? Stop the application that is using port 80, and then start the website from IIS manager.
More information
You can use third-party tools such as tcpview or fport to determine other applications that are using port 80.

(Note: Disable the software such as Xunlei or QQ, because they may also occupy port 80. You can use netstat-An in cmd to check it, if this is not the case, restart the system to run nothing and directly start the default website)