Article ID: 249603
Article Last Modified on 2/23/2007
APPLIES TO
- Microsoft Windows 2000 Advanced Server
- Microsoft Internet Information Services 5.0
This article was previously published under Q249603
SUMMARY
IISSync, which is used to synchronize the metabase of clustered Web servers, is still available on Windows 2000 Advanced Server. Specific steps are needed to ensure that IISSync is executed correctly.
The default anonymous user accounts (IUSR_servername and IWAM_servername) used for Web authentication and impersonation are local accounts on the Windows 2000 Server where IIS is installed. In order to use IISSync to automatically synchronize the metabase to both nodes, domain accounts need to be created to replace the two default accounts.
MORE INFORMATION
The following steps are required to run IISSync when the clustered nodes are both member servers:
Note IISSync and the VBScripts are installed and registered when the World Wide Web (WWW) Server service is installed. When clustering an IIS Server Instance for a FTP site, ensure the WWW Server service is installed.
Note If the clustered nodes are domain controllers, you can skip steps 1 through 4.
- On a domain controller for the member servers, click Start, click Programs, and then choose Administrative Tools.
- Open the Active Directory and choose Users and Computers.
- Expand the tree under the domain name, and then click to highlight the Users folder. Right-click and select New User. Create two new domain accounts in the Domain Users group (for example IUSR_uniquename and IWAM_uniquename).
- On the two cluster nodes, right-click My Computer, and then select Manage.
- With the Computer Management snap-in, expand Local Users and Groups, expand Groups, and then click Users. Add the two new user accounts as
domain\IUSR_uniquename anddomain\IWAM_uniquename. By default, Domain Users will be a member of the local Users group and local Users group is granted the "Log on Locally" right.
To manually assign the two domain accounts the "Log on Locally" right, open Administrative Tools and select Local Security Policy. In Security settings, expand Local Policies and User Right Assignment. Click Log on locally, and then click Add. Add the two domain accounts. - Open the Internet Services Manager from Node A. From the clustered Web site's Properties page, select Directory Security, select Anonymous Access, and then choose Edit. Replace the default anonymous user account with the domain user account (IUSR_uniquename) and password as you specified.
- From the command prompt on Node A, go to the directory
systemdrive:\inetpub\adminscripts and run the following:NOTE: If you receive a dialog box prompting to use CScript as host for VBScript, click OK, and then run both scripts again without "Cscript."Cscript adsutil.vbs SET W3SVC/WAMUserName
domain\IWAM_uniquename
Cscript adsutil.vbs SET W3SVC/WAMUserPass "userpassword" - From the command prompt on Node A, go to the directory
systemdrive:\winnt\system32\inetsrv and run the following:iissync
nodeBcomputernameIISsync will return a status of 0 that indicates that IISSync finished successfully. Node B is now synchronized with the same metabase settings from Node A. If IISSync returns a status other than 0, refer to the following article to isolate the reason for the failure:
224801 Deciphering IISSync status codes
- Remove the two domain user accounts that you created in step 3, and then change the default anonymous user accounts IUSR_servername and IWAM_servername back.
For more information on the NTOP IISSync utility, refer to the NTOP installation in the Installing the Windows NT Option Pack on Microsoft Cluster Server (MSCS) white paper.
Additional query words: MSCS, IISSYNC, adsutil, cluster, Advanced Server, NTOP, IIS server cluster
Keywords: kbhowto KB249603
