XP SP2 is incompatible with IIS components, resulting in a 500 Error Solution

Iis5's HTTP 500 internal server error is one of the common errors that we encounter. Its main error is that ASP programs cannot browse but HTM static webpages are not affected. In addition, System Event Logs and Security Event Logs are recorded when an error occurs.

The details are as follows:

(1) Performance in IE

The following error occurs when you browse ASP pages that previously run normally:

Webpage cannot be displayed

The webpage you want to access has problems, so it cannot be displayed.

Please try the following operations:

Go to the http: // 127.0.0.1 homepage and find a link to the desired information.

Click Refresh or try again later.

HTTP 500-Internal Server Error

Internet Information Service

Technical Information (Personal Support)

Details:

Microsoft support

Or:

Server application error

The
Server has encountered an error while loading an application during
Processing of your request. Please refer to the event log for more
Detail information. Please contact the server administrator
Balance ance.

(2) security log records (2)

Event Type: Failed Review

Event Source: Security

Event Type: logon/logout

Event ID: 529

Date: 2001-9-9

Event: 11:17:07

User: nt authority/System

Computer: Myserver

Description:

Logon Failed:

Cause: Unknown user name or incorrect password

Username: iwam_myserver

Domain: mydom

Logon type: 4

Logon Process: advapi

Authentication package: microsoft_authentication_package_v1_0

WorkSite name: myserver

 

Event Type: Failed Review

Event Source: Security

Event Type: Account Logon

Event ID: 681

Date: 2001-9-9

Event: 11:17:07

User: nt authority/System

COMPUTER: myserver

Description:

Log on to the account: iwam_myserver

Login User: microsoft_authentication_package_v1_0

Slave Workstation: myserver

Failed. Error code: 3221225578

 

(3) records in system logs (2)

Event Type: Error

Event Source: DCOM

Event Type: None

Event ID: 10004

Date: 2001-9-9

Event: 11:20:26

User: N/

COMPUTER: myserver

Description:

"The password cannot be updated. The value provided to the new password contains the value that is not allowed in the password. And cannot log on to./iwam_myserver to run the server:

3d14228d-fbe1-11d0-995d-00c04fd919c1}

Event Type: Warning

Event Source: w3svc

Event Type: None

Event ID: 36

Date: 2001-9-9

Event: 11:20:26

User: N/

COMPUTER: myserver

Description:

The server failed to transfer to the application '/lm/w3svc/4/root '. The error is that 'runas format must be <Domain Name>/<User Name> or only <User Name> '.

For more information about this message, visit the Microsoft online support site: http://www.microsoft.com/contentredirect.asp.

Ii. Cause Analysis

According to the above error analysis, we can see that the internal HTTP 500 error is mainly caused by the Password error of the IWAM account (iwam_myserver account on my computer.

In
Before analyzing the cause of an internal error in http500, I would like to briefly introduce the IWAM account: the IWAM account is a built-in account automatically created by the system when iis5 is installed, mainly used
Internet Information Service for applications outside the startup process. The name of the IWAM account varies depending on the NetBIOS name of each computer. The common format is
Iwam_machine is composed of the prefix "IWAM", the connection line "_", and the computer's NetBIOS name. My computer's NetBIOS name is
Myserver. Therefore, the IWAM account name on my computer is iwam_myserver, which is in the same way as the IIS Anonymous Account isur_machine.
Similar.

The IWAM account is active after it is created.
Directory, IIS
The metabase database and the COM + application are jointly used by the third party. The account and password are respectively saved by the third party, and the operating system is responsible for synchronizing the IWAM password stored by the third party. According to common sense
The system is responsible for the work we can rest assured that there is no need to worry about errors, but I do not know whether it is a bug or what other reasons, the system's password synchronization for the IWAM account sometimes fails, so that the third-party IWAM account used
Different passwords. When IIS or COM + applications use the wrong IWAM password to log on to the system, start IIS Out-of-process pooled
Applications, the system will reject this request due to a Password error, resulting in IIS Out-of-process pooled
Applications failed to start, that is, the "cannot run server" we saw in the id10004 error event
3d14228d-fbe1-11d0-995d-00c04fd919c1} "(here
3d14228d-fbe1-11d0-995d-00c04fd919c1} is an IIS Out-of-process pooled
Application Key), cannot be transferred to the iis5 application, the internal HTTP 500 error is generated.

Iii. Solution

Knowing the cause of an internal error in HTTP 500 makes it easy to solve the problem, that is, manually synchronize the password of the IWAM account in Active Directory, IIS metabase database, and COM + applications.

You must log on to the computer as an administrator in three steps to provide sufficient operation permissions (IWAM uses iwam_myserver as an example ).

(1) change the password of the iwam_myserver account in Active Directory

Because the password of the IWAM account is controlled by the system and generated randomly, we don't know what it is. To complete the password synchronization in the following two steps, we must set the password of the IWAM account to a value we know.

1. Choose Start> program> Administrative Tools> Active Directory users and computers to start the Active Directory users and computers Management Unit.

2. Click "user", select "iwam_myserver" on the right, right-click and select "Reset Password (t )... ", in the Reset Password dialog box that appears, set a new password for iwam_myserver. Here we will set it to" aboutnt2001 "(without quotation marks). OK, wait until the password is successfully modified.

(2) synchronize the password of iwam_myserver account in IIS metabase

This change may be too sensitive and important. Microsoft did not provide an explicit user interface for us to modify the iwam_myserver account password in IIS metabase, and only provided a management script adsutil with iis5. vbs, thisScriptLocated in the C:/inetpub/adminscr javaspts subdirectory (the location may vary depending on the settings you set when installing iis5 ).

The adsutil. vbs script has powerful functions, many parameters, and complex usage. Here we only provide the method to use this script to modify the iwam_myserver account password:

Adsutil set w3svc/wamuserpass Password

The "password" parameter is the new password of the IWAM account to be set. Therefore, the command to change the password of iwam_myserver in IIS metabase to "aboutnt2001" is:

C:/inetpub/adminscr effecpts> adsutil set w3svc/wamuserpass "aboutnt2001"

After the modification is successful, the system prompts the following:

Wamuserpass: (string) "aboutnt2001"

(3) password of iwam_myserver used to synchronize COM + applications

The iwam_myserver password used to synchronize COM + applications. You can choose either the component service MMC management unit or the IWAM account synchronization script synciwam. vbs.

1. Use the component service MMC Management Unit

(1) Start the Component Service Management Unit: Choose Start> RUN> MMC to start the management console and open the Add/delete Management Unit dialog box, add the Component Service Management Unit.

(2)
Choose component service> Computer> my computer> COM + application> out-of-process pooled.
Applications, right-click "out-of-process pooled Applications"-> "properties ".

(3)
Switch to "out-of-process pooled"
The flags tab in the applications Properties dialog box. "This application runs under the following accounts" selected "this user" will be selected, the user name is
"Iwam_myserver ". These are all default values and do not need to be modified. Enter the correct password "aboutnt2001" in the "password" and "Confirm Password" text boxes below to confirm the return
Output.

(4) If the system prompts "the application is created by more than one external product. Are you sure you want to be supported by these products ?" .

(5) If we set "application protection" for some other web pages in IIS to "high (independent )", the IWAM account and password of the COM + application used by the web must also be synchronized. Repeat Step (1)-(4) To synchronize the IWAM account and password of the corresponding out of Process application.

2. Use the IWAM account synchronization script synciwam. vbs

Real
Microsoft has discovered that the IWAM account has problems in password synchronization. Therefore, in the iis5 management script, a script synciwam. vbs is prepared separately for the IWAM account password synchronization,
This script is located in the C:/inetpub/adminscr javaspts subdirectory (the location may vary depending on the settings you set when installing iis5 ).

Synciwam. vbs script is easy to use:

Cscr listen PT synciwam. vbs [-v |-H]

The "-V" parameter indicates that the entire script execution process is displayed in detail (recommended), and the "-h" parameter is used to display simple help information.

To synchronize the password of the iwam_myserver account in the COM + application, Run "cscr Using Pt synciwam. vbs-V" as follows:

Cscr platinum Pt C:/inetpub/adminscr merge pts/synciwam. vbs-V

Microsoft (r) Windows SCR platinum PT host version 5.6

Copyright (c) Microsoft Corporation 1996-2000. All rights reserved.

Wamusername: iwam_myserver

Wamuserpass: aboutnt2001

IIS applications defined:

Name, appisolated, package ID

W3SVC, 0, 3d14228c-fbe1-11d0-995d-00c04fd919c1}

Root, 2,

IISHelp, 2,

IISADMIN, 2,

Iissamples, 2,

MSADC, 2,

Root, 2,

IISADMIN, 2,

IISHelp, 2,

Root, 2,

Root, 2,

Out of process applications defined:

Count: 1

3d14228d-fbe1-11d0-995d-00c04fd919c1}

Updating applications:

Name: IIS Out-of-process pooled applications key: 3d14228d-fbe1-11d0-995d-00c04fd919c1}

Slave
The execution of the above script shows that using the synciwam. vbs script is more comprehensive and convenient than using the component service method. It is first found in the metabase database of IIS
IWAM account "iwam_myserver", obtain the corresponding password "aboutnt2001", and then find all the defined IIS
Applications and out of process applications, and synchronize each out of Process
The IWAM account password of the applications application.

Use
When synciwam. vbs scripts are run, you must ensure that IIS
The metabase database and IWAM password in Active Directory are consistent. Because the synciwam. vbs script is from IIS
Metabase database instead of obtaining the IWAM account password from Active Directory, if IIS
The password in metabase is incorrect. The password obtained by synciwam. vbs is also incorrect. The synchronization operation is executed to "Updating
Applications "the system reports a 80110414 error, that is," the application cannot be found.
3d14228d-fbe1-11d0-995d-00c04fd919c1 }".

Now, the password of the IWAM account in Active Directory, IIS metabase database, and COM + application has been synchronized successfully, and your ASP program can run again!

After the modification is successful, the system prompts the following:
---------------------------------------------------
AfterTest, Display should be
Wamuserpass: (string )"*******"