IIS Server Security - IIS Admin Service - changing Logon account

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > March 2005 > IIS Admin Service - changing Logon account





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author IIS Admin Service - changing Logon account
fwrs

2005-03-30, 5:58 pm

Within IIS 6, I am trying to change the Logon account for all of the IIS
services (IIS Admin, HTTP SSL, and WWW) from the Local System account to a
custom account in the Administrators group. Whenever I try to start IIS
Admin, the service terminates with an error in the Event Log: "Access is
Denied". When I set the Logon account back to the Local System account,
services start.

The Administrators group has the required permissions on inetinfo.exe and
the system32 and inetsrv directories. In the Local Security Policy, I've
tried giving the Administrators group the "replace a process level token" and
"adjust memory quotas for a process" rights (Administrators group has most
rights already).

After researching on Microsoft's site, I ran the command line below:
sc query IISADMIN
It showed that the STATE was "STOPPED" and the WIN32_EXIT_CODE was 5.

Does anyone have any ideas?
Ken Schaefer

2005-03-30, 5:58 pm

answered in inetserver.iis

Cheers
Ken

--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com


"fwrs" <fwrs@discussions.microsoft.com> wrote in message
news:2649BAC3-EE26-42E6-991E-E3BEF2B79FFA@microsoft.com...
: Within IIS 6, I am trying to change the Logon account for all of the IIS
: services (IIS Admin, HTTP SSL, and WWW) from the Local System account to a
: custom account in the Administrators group. Whenever I try to start IIS
: Admin, the service terminates with an error in the Event Log: "Access is
: Denied". When I set the Logon account back to the Local System account,
: services start.
:
: The Administrators group has the required permissions on inetinfo.exe and
: the system32 and inetsrv directories. In the Local Security Policy, I've
: tried giving the Administrators group the "replace a process level token"
and
: "adjust memory quotas for a process" rights (Administrators group has most
: rights already).
:
: After researching on Microsoft's site, I ran the command line below:
: sc query IISADMIN
: It showed that the STATE was "STOPPED" and the WIN32_EXIT_CODE was 5.
:
: Does anyone have any ideas?


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com