SOS! IIS Stopped working completely!

[Patrick]

Environment- Windows 2000 SP4, IIS5.0, domain controller, .NET Framework
1.1, High Security Template for Domain Controller applied

Running- Microsoft Content Management Server 2002 SP1A (ASP.NET
application), ASP Application, SQL Server

What I have been doing
1) Testing with ASP.NET process Model, etc. to get ASP.NET to write to the
Event Viewer
2) Deploying a new COM+ which is used by a seperate ASP application (it
involves
2.1) removing serveral classes from COM+, restarting server, deleting old
DLL, copying over new DLL, installing new DLL
2.2) Changing Domain Security Policy to lock out accounts after 4 invalid
logons, secedit /refreshpolicy machine_policy

Now, everything have stopped working!
In System Log:
Event Type: Error
Event Source: DCOM
Event Category: None
User: N/A
Description:
DCOM got error "Overlapped I/O operation is in progress. " and was unable to
logon .\IWAM_YJBWEBLIVE in order to run the server:
{3D14228D-FBE1-11D0-995D-00C04FD919C1}

In Application Log:
Event Type: Error
Event Source: ASP.NET 1.1.4322.0
Event Category: None
Event ID: 1007
User: N/A
Description:
aspnet_wp.exe could not be launched because the username and/or password
supplied in the processModel section of the config file are invalid.

Event Type: Error
Event Source: ASP.NET 1.1.4322.0
Event Category: None
Event ID: 1084
User: N/A
Description:
aspnet_wp.exe could not be started. The error code for the failure is
80004005. This error can be caused when the worker process account has
insufficient rights to read the .NET Framework files. Please ensure that the
..NET Framework is correctly installed and that the ACLs on the installation
directory allow access to the configured account.

Research revealed that this could be caused by IWAM_machinename passwords
getting out of sync, I have reviewed:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q296851
http://support.microsoft.com/?kbid=297989

I have reset password in AD for IWAM_MachineName, used adsutil.vbs to set
password of IWAM_MachineName to the password I set manually in AD

I tried to run cscript synciwam.vbs -v, but I get
Updating Applications:
Name: IIS-{www.youth-justice-board.gov.uk//ROOT/cgi-bin} Key:
{CB75A528-444A-484
A-83AF-4DA3849146A8}
Name: IIS-{Administration Web Site//ROOT/cgi-bin} Key:
{F7FF5789-0853-4BC8-BE09-
8057B84C15A3}
Name: IIS Out-Of-Process Pooled Applications Key:
{3D14228D-FBE1-11D0-995D-00C04
FD919C1}
Error: 80110414:

Also tried making IUSR_MachineName and IWAM_MachineName temporarily member
of Administrators group first, but still that does not allow the script to
run without error!

Now, I can't even run a simple test.asp or test.aspx with no code in it!
when I try to load test.asp, I get the DCOM error in system log. when I try
to load the test.aspx, I get the 2 asp.net error in the Applicaiton log

At present, machine.config is set to
1) no impersonation settings
2) processModel set to run as "machine" user

I could get ASP.NET pages running if I change processModel to run as
"SYSTEM" user, but this is not the settings I have on the live system.
Also, IWAM_MachineUser does have full control to the "Temporary ASP.NET
Files" folder!

SOS !

 

[Vilmar]

Hey,
by what I know, you need IIS 5.1 or version above to run .net applications.

 

[Patrick]

Also tried to set under COM+ the username and password for the IIS
Out-of-Process Application as per
http://support.microsoft.com/default.aspx?scid=kb;EN-US;255770

It would only let me OK the dialog if I just enter IWAM_MachineName, if I
1) enter MyDomain\IWAM_MachineName or
2) enter a password
I get error saying user account or password is invalid.

 

[Consultant]

you need to recheck your facts before giving advice

 

[Patrick]

IIS problem resolved, IWAM_MachineName account was locked out.

However, ASP.NET still can't write to EventViewer!!

 

[Kristofer Gafvert]

Hello,

That is not true, please see:

http://www.microsoft.com/downloads/...E3-F589-4842-8157-034D1E7CF3A3&displaylang=en

for system requirements.

 

[Aaron Bertrand - MVP]

by what I know, you need IIS 5.1 or version above to run .net
applications.

No, this is not true! Where do people get this "advice"?

 

[Aaron Bertrand - MVP]

However, ASP.NET still can't write to EventViewer!!

What does "can't write" mean? Do you get an error message? If so, what is
it? Have you fixed the permissions for the IWAM and IUSR accounts? Have
you considered using Windows authentication (it's odd you would want
anonymous users to be able to write to the event log).

 

[Vilmar]

Hey guys,
I am so sorry by my mistake, but a friend of mine who works with .net said
that to me.
thanks by correction guys,