Microsoft KB Archive/842493

= You receive a &quot;Service Unavailable&quot; error message when you browse an IIS 6.0 Web page on a Windows Server 2003-based domain controller =

Article ID: 842493

Article Last Modified on 9/22/2006

-

APPLIES TO


 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Web Edition

-





SYMPTOMS
When you browse a Web page that is hosted on a Microsoft Windows Server 2003-based domain controller, you may receive the following Active Server Pages (ASP) Error 5 error message:

Service Unavailable

Additionally, the following warning event may be logged in the system event log: Event Type: Warning

Event Source: W3SVC

Event Category: None

Event ID: 1009

Date:

Time:

User: N/A

Computer:

Description:

A process serving application pool ' ' terminated unexpectedly. The process id was '5288'. The process exit code was '0xffffffff'.

For more information, see Help and Support Center at 

Additionally, the following error event may be logged in the application event log: Event Type: Message

Event Source: Active Server Pages

Event Category: None

Event ID: 5

Date:

Time:

User: N/A

Computer:

Description:

Error: The Template Persistent Cache initialization failed for Application Pool ' ' because of the following error: Could not create a Disk Cache Sub-directory for the Application Pool. The data may have additional error codes.

For more information, see Help and Support Center at 

When you use Filemon to monitor file activity, you receive an error message that is similar to the following:

3521  w3wp.exe:3168 CREATE C:\WINDOWS\system32\inetsrv\ASP Compiled Templates\PID3168.TMP ACCESS DENIED NT AUTHORITY\NETWORK SERVICE



CAUSE
This issue may occur if the server that is running Microsoft Internet Information Services (IIS) 6.0 is also a domain controller. The problem occurs because the Application pool is using the NT Authority\Network Service account, and the NT Authority\Network Service account may not have permissions to access the required folders.



RESOLUTION
To resolve this problem, manually set permissions on the folders for the IIS_WPG group, and then set permissions on the folders for the NT Authority\Network Service account.

To set permissions on the folders for the IIS_WPG group, follow these steps:  Start Windows Explorer, and then open the following folder:

%systemroot%\Help\iisHelp

 In the right pane, right-click the Common folder, and then click Sharing and Security. Click the Security tab, click Add, type IIS_WPG, and then click OK. With IIS_WPG selected, click to select the following check boxes under the Allow column, and then click OK:  Read and Execute</li> List Folder Contents</li> Read</li></ul> </li> Open the following folder:

%systemroot%\system32\inetsrv

</li> In the right pane, right-click the ASP Compiled Templates folder, and then click Sharing and Security.</li> Click the Security tab, click the IIS_WPG group, and then click to select the Full Control check box under the Allow column. Click OK.</li> Open the following folder:

%systemroot%

</li> In the right pane, right-click the IIS Temporary Compressed folder, and then click Sharing and Security.</li> Click the Security tab, click the IIS_WPG group, and then click to select the Full Control check box under the Allow column. Click OK.</li></ol>

To set permissions on the folders for the NT Authority\Network Service account, follow these steps: <ol> Start Windows Explorer, and then open the following folder:

%systemroot%\Help\iisHelp

</li> In the right pane, right-click the Common folder, and then click Sharing and Security.</li> Click the Security tab, click Add, type NETWORK SERVICE, and then click OK.</li> With NETWORK SERVICE selected, click to select the following check boxes under the Allow column, and then click OK: <ul> Read and Execute</li> List Folder Contents</li> Read</li></ul> </li> Open the following folder:

%systemroot%\system32\inetsrv

</li> <li>In the right pane, right-click the ASP Compiled Templates folder, and then click Sharing and Security.</li> <li>Click the Security tab, click Add, type NETWORK SERVICE, and then click OK.</li> <li>With the NETWORK SERVICE group selected, click to select the Full Control check box under the Allow column, and then click OK.</li> <li>Open the following folder:

%systemroot%

</li> <li>In the right pane, right-click the IIS Temporary Compressed folder, and then click Sharing and Security.</li> <li>Click the Security tab, click Add, type NETWORK SERVICE, and then click OK.</li> <li>With the NETWORK SERVICE group selected, click to select the Full Control check box under the Allow column, and then click OK.</li></ol>

After you have completed these steps, restart the IIS Admin service from the Services snap-in or from the Computer Management snap-in.

<div class="workaround_section">

WORKAROUND
You may be able to temporarily work around this problem by restarting the IIS Admin service from the Services snap-in or from the Computer Management snap-in.

<div class="status_section">

STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

<div class="moreinformation_section">

MORE INFORMATION
For additional information about a similar issue with a different cause, click the following article number to view the article in the Microsoft Knowledge Base:

332097 DCPROMO does not retain permissions on some IIS folders

Keywords: kberrmsg kbprb KB842493

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.