IWAM_xxxxxxx A/C

IWAM_xxxxxxx A/C

am 14.08.2007 03:54:00 von DD

For security reason, I need to disabled the IWAM_USxxxxxxxx INTERNET GUEST
A/C,but disabled theaccount, the event log non stop showing the following
error

"DCOM got error "Logon failure: user account restriction. " and was unable
to logon .\IWAM_USGSCW2000 in order to run the server:
{3D14228D-FBE1-11D0-995D-00C04FD919C1} "

"The server failed to load application '/LM/W3SVC/1/ROOT'. The error was
'The server process could not be started because the configured identity is
incorrect. Check the username and password."

I have trend Micro running on this pc but not required this a/c

Would like to know what are the application still using this a/c and how to
disable it ?

Re: IWAM_xxxxxxx A/C

am 14.08.2007 07:56:16 von Roger Abell

Are you using IIS on this machine ?
If not, uninstall it, in Add Remove Programs / Windows Components.
If you are, then what do you expect to happen if it is configured to use
that Iwam_ account ?

"DD" wrote in message
news:FD264CFE-1576-403D-B5C0-1232B4EC80BD@microsoft.com...
> For security reason, I need to disabled the IWAM_USxxxxxxxx INTERNET GUEST
> A/C,but disabled theaccount, the event log non stop showing the following
> error
>
> "DCOM got error "Logon failure: user account restriction. " and was unable
> to logon .\IWAM_USGSCW2000 in order to run the server:
> {3D14228D-FBE1-11D0-995D-00C04FD919C1} "
>
> "The server failed to load application '/LM/W3SVC/1/ROOT'. The error was
> 'The server process could not be started because the configured identity
> is
> incorrect. Check the username and password."
>
> I have trend Micro running on this pc but not required this a/c
>
> Would like to know what are the application still using this a/c and how
> to
> disable it ?
>
>
>
>

Re: IWAM_xxxxxxx A/C

am 17.08.2007 03:06:22 von DD

We are using the IIS for trend Micro, but trendMicro do not required for this
a/c, so I disabled this a/c , found the non stop error message from the event
log.

Not sure which application still using this a/c .



"Roger Abell [MVP]" wrote:

> Are you using IIS on this machine ?
> If not, uninstall it, in Add Remove Programs / Windows Components.
> If you are, then what do you expect to happen if it is configured to use
> that Iwam_ account ?
>
> "DD" wrote in message
> news:FD264CFE-1576-403D-B5C0-1232B4EC80BD@microsoft.com...
> > For security reason, I need to disabled the IWAM_USxxxxxxxx INTERNET GUEST
> > A/C,but disabled theaccount, the event log non stop showing the following
> > error
> >
> > "DCOM got error "Logon failure: user account restriction. " and was unable
> > to logon .\IWAM_USGSCW2000 in order to run the server:
> > {3D14228D-FBE1-11D0-995D-00C04FD919C1} "
> >
> > "The server failed to load application '/LM/W3SVC/1/ROOT'. The error was
> > 'The server process could not be started because the configured identity
> > is
> > incorrect. Check the username and password."
> >
> > I have trend Micro running on this pc but not required this a/c
> >
> > Would like to know what are the application still using this a/c and how
> > to
> > disable it ?
> >
> >
> >
> >
>
>
>

Re: IWAM_xxxxxxx A/C

am 17.08.2007 07:40:22 von Ken Schaefer

Are you sure Trend Micro does not need this account?

What application is loaded at the root of the Default Web Site?
('/LM/W3SVC/1/ROOT')?

IWAM_ is used to host "out of process" web applications in IIS5
(and also IIS6.0 in IIS5.0 Compatibility Mode). This means that if you run
the web application in medium or high isolation, it runs inside a
dllhost.exe process, and that process' user identity is IWAM_ by
default

Are you running IIS 5.0 or IIS 6.0?

Cheers
Ken

"DD" wrote in message
news:CFE7558C-9ABE-428F-80A8-F58289AA2897@microsoft.com...
> We are using the IIS for trend Micro, but trendMicro do not required for
> this
> a/c, so I disabled this a/c , found the non stop error message from the
> event
> log.
>
> Not sure which application still using this a/c .
>
>
>
> "Roger Abell [MVP]" wrote:
>
>> Are you using IIS on this machine ?
>> If not, uninstall it, in Add Remove Programs / Windows Components.
>> If you are, then what do you expect to happen if it is configured to use
>> that Iwam_ account ?
>>
>> "DD" wrote in message
>> news:FD264CFE-1576-403D-B5C0-1232B4EC80BD@microsoft.com...
>> > For security reason, I need to disabled the IWAM_USxxxxxxxx INTERNET
>> > GUEST
>> > A/C,but disabled theaccount, the event log non stop showing the
>> > following
>> > error
>> >
>> > "DCOM got error "Logon failure: user account restriction. " and was
>> > unable
>> > to logon .\IWAM_USGSCW2000 in order to run the server:
>> > {3D14228D-FBE1-11D0-995D-00C04FD919C1} "
>> >
>> > "The server failed to load application '/LM/W3SVC/1/ROOT'. The error
>> > was
>> > 'The server process could not be started because the configured
>> > identity
>> > is
>> > incorrect. Check the username and password."
>> >
>> > I have trend Micro running on this pc but not required this a/c
>> >
>> > Would like to know what are the application still using this a/c and
>> > how
>> > to
>> > disable it ?
>> >
>> >
>> >
>> >
>>
>>
>>

Re: IWAM_xxxxxxx A/C

am 20.08.2007 04:52:19 von DD

According to Trend , they only need IUSR_xxxx id. only tmcm running on this
machine. how to check which application is loaded at the root ?

using IIS 5.0


"Ken Schaefer" wrote:

> Are you sure Trend Micro does not need this account?
>
> What application is loaded at the root of the Default Web Site?
> ('/LM/W3SVC/1/ROOT')?
>
> IWAM_ is used to host "out of process" web applications in IIS5
> (and also IIS6.0 in IIS5.0 Compatibility Mode). This means that if you run
> the web application in medium or high isolation, it runs inside a
> dllhost.exe process, and that process' user identity is IWAM_ by
> default
>
> Are you running IIS 5.0 or IIS 6.0?
>
> Cheers
> Ken
>
> "DD" wrote in message
> news:CFE7558C-9ABE-428F-80A8-F58289AA2897@microsoft.com...
> > We are using the IIS for trend Micro, but trendMicro do not required for
> > this
> > a/c, so I disabled this a/c , found the non stop error message from the
> > event
> > log.
> >
> > Not sure which application still using this a/c .
> >
> >
> >
> > "Roger Abell [MVP]" wrote:
> >
> >> Are you using IIS on this machine ?
> >> If not, uninstall it, in Add Remove Programs / Windows Components.
> >> If you are, then what do you expect to happen if it is configured to use
> >> that Iwam_ account ?
> >>
> >> "DD" wrote in message
> >> news:FD264CFE-1576-403D-B5C0-1232B4EC80BD@microsoft.com...
> >> > For security reason, I need to disabled the IWAM_USxxxxxxxx INTERNET
> >> > GUEST
> >> > A/C,but disabled theaccount, the event log non stop showing the
> >> > following
> >> > error
> >> >
> >> > "DCOM got error "Logon failure: user account restriction. " and was
> >> > unable
> >> > to logon .\IWAM_USGSCW2000 in order to run the server:
> >> > {3D14228D-FBE1-11D0-995D-00C04FD919C1} "
> >> >
> >> > "The server failed to load application '/LM/W3SVC/1/ROOT'. The error
> >> > was
> >> > 'The server process could not be started because the configured
> >> > identity
> >> > is
> >> > incorrect. Check the username and password."
> >> >
> >> > I have trend Micro running on this pc but not required this a/c
> >> >
> >> > Would like to know what are the application still using this a/c and
> >> > how
> >> > to
> >> > disable it ?
> >> >
> >> >
> >> >
> >> >
> >>
> >>
> >>
>
>