W3SVC-WP Error

Does anyone get any errors like this, doesnt show up for all sites only sites created in hc7.

Event Type: Warning
Event Source: W3SVC-WP
Event Category: None
Event ID: 2266
Date: 04/04/2007
Time: 09:43:30
User: N/A
Computer: REMOVED!
Description:
The account that the current worker process is running under does not have SeTcbPrivilege privilege, the anonymous password sync feature and the Digest authentication feature are disabled.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

__________________
Chris Daley
Dwebs Ltd Director :: Company No. 05603664 :: Phone No. (UK) 0870 803 4423
www.Dhosting.co.uk - Web Hosting, Domain Registration
www.Dwebs.ltd.uk - Web Design & Other Services
My views are my own and not those of my company.

Yes Chris we see the exact same warnings in event-aplication log.
I hope HC can explane what this is..

I found this.

quote:

---

From a newsgroup post: "SeTcbPrivilege is equivalent to "Act as part of the operation system". This error means that one of your application pools is running as an account that does not have this right. On Exchange, the DefaultAppPool and the ExchangeMobileBrowseApplicationPool both run under the well known account Network Service, while the ExchangeApplicationPool runs under Local System. Both accounts should have this right by default. It is likely that the identity that an application pool is running under is not one of these two. To check, open Internet Services Manager, and browse until you see Application Pools. Pull up properties of each of these listed and check the account on the identity tab. If it’s not the ones listed above then change it".

From a newsgroup post: "The account that the current worker process is running under, does not have the “SeTcbPrivilege” privilege; the anonymous password sync feature and the Digest authentication feature are disabled. This can be caused by some entries in the metabase that are incorrect or by an incorrect identity setting.

1. First, check to make sure the Default Application pool in IIS is using the correct Security Account to logon by following these steps:
A. Go to Start, Programs, Administrative Tools and double click on Internet Information Services Manager.
B. Expand your server name.
C. Expand Application Pools.
D. Right click on the DefaultAppPool and go to Properties.
E. Click on the Identity tab and make sure the radio button "Predefined" is marked and the account listed in the drop down box is "Network Service". If it is not, change it and stop and start IIS, then check the event logs for the error. If it is, go to step 2.

2. Go to the “C:\Windows\System32\Inetsrv” directory. Right click on the “metabase.xml” file and click on Edit. This will open the file in Notepad.
A. Search for "AnonymousPasswordSync". Set any instance you find of this to “False”.
B. Search for "UseDigestSSP". For any instance you find of this set it to “True”. Save the event logs and clear them, then reboot the server and check to see if the Event ID 2266 error reappears.

Note: To be able to open the “metabase.xml” in notepad and be able to save the changes, you will need to open Start/Administrative Tools/Internet Information Services (IIS) Manager then right click on the server name and select Properties. Check the box for Enable Direct Metabase Edit and then click on OK. After you are finished making any changes to the metabase I would recommend that you go back and uncheck the setting. Also, I would suggest before making any changes to the metabase that while you are in the IIS MMC that you right click on the server and select All Task/Backup/Restore Configuration and make a backup of the metabase before opening it in Notepad".

---

I've also seen it on another hc7 box we have worked on.

HC arent setting the iis settings correctly when they add domains

This can cause some major problem with some sites.

__________________
Chris Daley
Dwebs Ltd Director :: Company No. 05603664 :: Phone No. (UK) 0870 803 4423
www.Dhosting.co.uk - Web Hosting, Domain Registration
www.Dwebs.ltd.uk - Web Design & Other Services
My views are my own and not those of my company.

In metabase.xml i found a litle difference between a site that doesn't generate this warning and one that does.

Site NOT generating warnings
AccessFlags="AccessRead | AccessScript"
AnonymousUserName="removed"
AppFriendlyName="removed"
AppIsolated="2"
AppPoolId="removed"
AppRoot="/LM/W3SVC/2073485549/ROOT"

Site generating warnings
AccessFlags="AccessRead | AccessScript"
AnonymousPasswordSync="TRUE"
AnonymousUserName="removed"
AppFriendlyName="removed"
AppIsolated="2"
AppPoolId="removed"
AppRoot="/LM/W3SVC/2073485551/ROOT"
AspEnableParentPaths="FALSE"
AuthFlags="AuthAnonymous | AuthNTLM"

HC7 is placing the Annonymous user name in the 'AnonymousUserPass' field together with some numbers.. Don't know if this is normal.

AnonymousPasswordSync="TRUE" is the problem if i remember correctly

HC should be able to fix this for build 8 only a small change :)

One less error in the event logs

I will take a look at our metabase shortly and do a find and replace :)

__________________
Chris Daley
Dwebs Ltd Director :: Company No. 05603664 :: Phone No. (UK) 0870 803 4423
www.Dhosting.co.uk - Web Hosting, Domain Registration
www.Dwebs.ltd.uk - Web Design & Other Services
My views are my own and not those of my company.

I have the same problem.

RN

quote:

---

Originally posted by Dhosting.co.uk
[br]Does anyone get any errors like this, doesnt show up for all sites only sites created in hc7.

Event Type: Warning
Event Source: W3SVC-WP
Event Category: None
Event ID: 2266
Date: 04/04/2007
Time: 09:43:30
User: N/A
Computer: REMOVED!
Description:
The account that the current worker process is running under does not have SeTcbPrivilege privilege, the anonymous password sync feature and the Digest authentication feature are disabled.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

__________________
Chris Daley
Dwebs Ltd Director :: Company No. 05603664 :: Phone No. (UK) 0870 803 4423
www.Dhosting.co.uk - Web Hosting, Domain Registration
www.Dwebs.ltd.uk - Web Design & Other Services
My views are my own and not those of my company.

---

I can see also ... But what is this ???

Event Type: Warning
Event Source: W3SVC-WP
Event Category: None
Event ID: 2266
Date: 04/04/2007
Time: 09:43:30
User: N/A
Computer: REMOVED!
Description:
The account that the current worker process is running under does not have SeTcbPrivilege privilege, the anonymous password sync feature and the Digest authentication feature are disabled.

Be carefull with changing 'AnonymousPasswordSync' I played a bit with it but now all the virtual directories of HC are not accessible for ananymous users.. Maybe someone knows how to solve this.. I cant figure out what went wrong.

quote:

---

The virtual directories of HC are not accessible for ananymous users.

---

I figured out how to solve this.. I had to reset the password for user 'HC7Administrator' and 'AdvWebAdmin' what i do not no is if this is interfering with HC7..

I hope HC support can tell if it is safe to change the password for these two users. And how this can be done from HC panel

Please dn't change any password. Issue has been replicated and we will do the implementation accordingly. Here is the detail:

- Set anonymouspasssync = false in case of creating website.

- Set allowanonymous = false in case of creating ip based ftp site.

- Dont set anonymoususername in case of creating ip based ftp site.

- Set anonymouspasssync = false in case of creating ip based ftp site

________________________
HC Support Team
support@hostingcontroller.com
http://hostingcontroller.com
+1-213-341-1419

I had to change passwords to make it work again.. Plying with 'anonymouspasssync' corrupted the passwords. So my question was how can i put passwords in a way it is sure HC7 and IIS knows what they are.

quote:

---

Originally posted by HC Support
[br]Please dn't change any password. Issue has been replicated and we will do the implementation accordingly. Here is the detail:

- Set anonymouspasssync = false in case of creating website.

- Set allowanonymous = false in case of creating ip based ftp site.

- Dont set anonymoususername in case of creating ip based ftp site.

- Set anonymouspasssync = false in case of creating ip based ftp site

________________________
HC Support Team
support@hostingcontroller.com
http://hostingcontroller.com
+1-213-341-1419

---

Where I should put this values?

Thanks!

RN

quote:

---

Originally posted by Albert38
[br]I had to change passwords to make it work again.. Plying with 'anonymouspasssync' corrupted the passwords. So my question was how can i put passwords in a way it is sure HC7 and IIS knows what they are.

---

If you are not sure about any thing then don't play with it. You have to change the password of 'HC7Administrator' anonymous user for all /admin virtual directoriese listed under domain.com in IIS.

________________________
HC Support Team
support@hostingcontroller.com
http://hostingcontroller.com
+1-213-341-1419