Article ID: 930461
Article Last Modified on 7/20/2007
APPLIES TO
- Microsoft SoftGrid for Terminal Services
- Microsoft SoftGrid for Windows Desktops
SYMPTOMS
When you try to connect to the SoftGrid Management Web Service from the SoftGrid Management Console, the connection is unsuccessful. Additionally, you receive the following error message:
Additionally, the following error message is logged in the SoftGrid Management Console log file (Sftmmc.log):
CAUSE
This issue may occur if one or more of the following conditions are true:
- The NETWORK SERVICE account does not have Local Activation permissions to the Internet Information Services (IIS) Admin service.
- The ASP.NET worker process account on the SoftGrid Management Web Service server does not have the correct file permissions.
- Microsoft Windows SharePoint Services 2.0 is installed on the same Web site as the SoftGrid Management Web Service.
- The NETWORK SERVICE account does not have access to the Web.config file in the C:\Program files\Softricity\SoftGrid Management Service directory.
- The .NET Framework version 2.0 or the .NET Framework version 3.0 was installed after IIS was installed.
- The LOCAL PATH in the default Web site of IIS is incorrect.
RESOLUTION
To resolve this issue, use one or more of the following methods, as appropriate for your situation.
Method 1: Make sure that the NETWORK SERVICE account has the correct permissions
The NETWORK SERVICE account may not have Local Activation permissions to the IIS Admin service. This condition can occur if the following conditions are true:
- You add IIS to a server that is running Microsoft Windows Server 2003 Service Pack 1 (SP1).
- You supply the Windows Server 2003 installation source when you are prompted for the Windows Server 2003 Service Pack 1 installation source.
When the NETWORK SERVICE account does not have Local Activation permissions to the IIS Admin service, the following events are logged in the System log:
Event ID: 10016
Type: Error
Source: DCOM
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application CLSID {A9E69610-11D0-B9B9-00A0C922E750} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.
Event ID: 1009
Type: Warning
Source: W3SVC
Description: A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was 'pid'. The process exit code was '0xffffffff'.
Event ID: 1002
Type: Error
Source: W3SVC
Description: Application pool 'DefaultAppPool' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
To make sure that the NETWORK SERVICE account has the correct permissions, follow these steps:
- Click Start, point to All Programs, point to Administrative Tools, and then click Component Services.
- Expand Component Services, expand Computers, expand My Computer, and then expand DCOM Config.
- Right-click IIS Admin Service, and then click Properties.
- Click the Security tab.
- Under Launch and Activation Permissions, click Edit.
- Click Add.
- In the Enter the object names to select box, type NETWORK SERVICE, and then click OK.
- Click NETWORK SERVICE, and then click to select the Local Activation check box in the Allow column.
- Click OK two times.
When the issue that is mentioned in the "Symptoms" section occurs, the IIS DefaultAppPool application pool is stopped. When you try to reconnect with the SoftGrid Management Console, the operation will fail. Additionally, you receive the following error message until the DefaultAppPool application pool is started:
To start the DefaultAppPool application pool, follow these steps:
- Click Start, point to All Programs, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
- Expand
server_name, expand Application Pools, and then click DefaultAppPool. - Right-click DefaultAppPool, and then click Start.
Note If this method does not resolve the issue, you may have to reapply Windows Server 2003 SP1. Alternatively, you may have to uninstall and then reinstall IIS by using the Windows Server 2003 SP1 installation source.
Method 2: Make sure that the ASP.NET worker process account has the correct file permissions
The ASP.NET worker process account on the SoftGrid Management Web Service server must have the file permissions that are described in the following table.
| Location | Permission |
|---|---|
| %SystemRoot%\Temp | Full Control |
| %SystemRoot%\Microsoft.NET\Framework \VERSION\Temporary ASP.NET Files | Full Control |
The issue that is mentioned in the "Symptoms" section can occur when you install the Active Directory directory service on a member server that has IIS installed and then install the SoftGrid Management Web Service on that server. We recommend that you do not install SoftGrid components on a domain controller.
The following table describes which Windows account is the default ASP.NET worker process account, depending on the operating system and on the role of the server on which the Web Service is installed.
| Operating System | Role | ASP.NET work process account |
|---|---|---|
| Windows 2000 Server | Member Server | ASP.NET Machine Account (computer name\ASPNET)
|
| Windows Server 2003 | Member Server | ASP.NET Machine Account (computer name\ASPNET)
|
| Windows 2000 Server | Domain Controller | Launch IIS Process Account (domain name\IWAM_computer name)
|
| Windows Server 2003 | Domain Controller | NETWORK SERVICE |
For more information about ASP.NET worker process account permissions and about Internet Information Services (IIS) 6.0, click the following article number to view the article in the Microsoft Knowledge Base:
812614 Default permissions and user rights for IIS 6.0
Method 3: Change the SoftGridManagement and SoftGridReporting application pool back to the DefaultAppPool application pool
When you install Windows SharePoint Services 2.0, it modifies the SoftGridManagement and SoftGridReporting application pool from "DefaultAppPool" to "StsAppPool1."
To change the application pool back to "DefaultAppPool," follow these steps from the SoftGrid Management Web Service server:
- Click Start, point to All Programs, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
- Expand
server_name, expand Web Sites, and then click Default Web Site. - Right-click SoftGridManagement, and then click Properties.
- Click the Virtual Directory tab.
- Under Application pool, select DefaultAppPool, and then click OK.
- Right-click SoftGridReporting, and then click Properties.
- Click the Virtual Directory tab.
- Under Application pool, select DefaultAppPool, and then click OK.
Method 4: Add the NETWORK SERVICE account to the folder that you want to access and grant the full control permission
Add the NETWORK SERVICE account to the security tab in the folder and grant the full control permission for the NETWORK SERVICE account and then restart IIS.
Method 5: Run the aspnet_regiis tool
- Click Start, click Run, type cmd, and then press ENTER.
- At the command prompt, type
Drive:\WINDOWS\Microsoft.NET\Framework\version, and then press ENTER. - Type aspnet_regiis.exe /R, and then press ENTER.
Method 6: Make sure that Local Path is set to <drive>:\Inetpub\Wwwroot
- Click Start, point to All Programs, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
- Expand
server_name, expand Web Sites, and then click Default Web Site. - Right-click Default Web Site, and then click Properties.
- Click the Home Directory tab.
- Make sure Local Path is set to
drive:\Inetpub\Wwwroot, and then click OK.
Keywords: kbexpertiseinter kbtshoot KB930461
