Configured Identity is Incorrect on IIS5 after reinstalling
Jon VanHemelryck
My IIS5 was not working on Win2000 Adv Server Trial. I decided to delete IIS5 and reinstall it. I am away from my home for one more month working a contract job and realized I left my Win2000 Adv. Server CD but tried to reinstall with a different trial Win2000 (not advanced) Server CD. Installed ok (I had my Service Pack CD which was also needed). But then I got the following warning and errror (error 1st):
Warning
The server failed to load application '/LM/W3SVC/1/ROOT/IISHELP'. The error was 'The server process could not be started because the configured identity is incorrect. Check the username and password.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.
error
DCOM got error "Logon failure: unknown user name or bad password. " and was unable to logon .\IWAM_[my computer name here] in order to run the server:
{3D1422 ......rest of unique identifier?}
Do I have to have my original Win 2000 Adv Server CD or is there another way to fix this? Appreciate any help.
Jon
FransG [MS]
The passwords are out of sync between the IIS metabase, Users and Groups,
and/or
MTS/Component Services.
RESOLUTION
==========
"Configured Identity is incorrect" error is caused by having an invalid
username
or password in MTS/Component Services. By default, this is the
IWAM_MACHINENAME
account. The IWAM password is stored in three places: IIS Metabase, Users
and
Groups, and MTS/Component Services. Following are instructions for
synchronizing
the the IWAM and IUSR passwords in these locations.
Solution 1 : Change Users and Groups to match the metabase. :
Use Adsutil.vbs to obtain the IUSR and IWAM passwords from the metabase. See
Using Adsutil.vbs (#ADSUTIL)
Go into Users and Groups and enter these passwords for the IUSR and IWAM
accounts.
You probably will not have to update the IWAM password in MTS/Component
Services
because the password in MTS/Component Services should match the metabase. If
the
problem is still occurring, then update the password in MTS/Component
Services.
See Using SyncIwam (#SYNCIWAM)
Solution 2 : Change the metabase to match IUSR and/or IWAM passwords.:
In Users and Groups, set the IUSR and/or the IWAM passwords.
Use adsutil to set the IUSR and/or IWAM passwords in the metabase
Syntax:
CScript adsutil.vbs set w3svc/anonymoususerpass "password"
CScript adsutil.vbs set w3svc/wamuserpass "password"
For IWAM, update the password in MTS/Component Services.
See Changing the Password in MTS/Component Services. (#MTSPASS)
You may need to restart IIS for the changes to take effect.
Changing the Password in MTS/Component Services:
Use SyncIwam.vbs to update the launching identity of all IIS COM+ packages
that
run out-of process to use the IWAM account with the password from the
metabase.
SyncIwam.vbs is located in <Drive>\Inetpub\Adminscripts. Please see Using
SyncIwam (#SYNCIWAM) to know how to use SyncIwam.vbs. You may need to
restart
IIS for all changes to take effect.
To restart IIS,
In Windows 2000:
Use "iisreset" command from Command prompt or Run Dialog
In Windows NT 4:
net stop iisadmin /y
net start w3svc
net start msftpsvc
net start smtpsvc
net start cisvc
Using Adsutil.vbs:
Adsutil.vbs is usually located in either
<Drive>\Winnt\system32\inetsrv\adminsamples or
<Drive>\Inetpub\adminscripts
Syntax:
To get the password of IUSR account: adsutil get w3svc/anonymoususerpass
To get the password of IWAM account: adsutil get w3svc/wamuserpass
Versions:
NT4: Password is displayed as clear text.
Windows 2000: Password is displayed as asterisks. To obtain the password,
first
perform the following steps to modify the Adsutil.vbs file so that it
displays
the unmasked password:
1. In Notepad, open the Adsutil.vbs file (by default, this is located in the
<Drive>\Inetpub\AdminScripts folder).
2. With Adsutil.vbs open in Notepad, on the Edit menu, click Find, and type
the
following string: "IsSecureProperty = True" (without the quotation marks)
and
then click Find Next.
3. Change this string as follows: "IsSecureProperty = False" (without the
quotation marks)
4. Save the changes to Adsutil.vbs, and then close Notepad.
The first time adsutil is run, you may be prompted to associate this program
with
cscript.exe. This is normal, just click yes to the prompt and run adsutil
again.
If you do not want to associate VBS files with cscript.exe, then issue the
commands as follows to avoid this dialog:
- cscript adsutil get w3svc/anonymoususerpass
- cscript adsutil get w3svc/wamuserpass
Using SyncIwam.vbs:
Per Q255770, use <Drive>\Inetpub\AdminScripts\Synciwam.vbs to update "the
launching identity of all IIS COM+ application packages that run
out-of-process"
to use the IWAM account with the password from the metabase. You may need to
restart IIS for all changes to take affect.
--
FransG [MS]
*** Please do not send email directly to this alias. ***
***This is our online account name for newsgroup participation only. ***
"Jon VanHemelryck" <r...@maui.net> wrote in message
news:#lSV$FRMBHA.1572@tkmsftngp03...