Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Domain Controller Demotion Causes Out-of-Process Applications to Fail


View products that this article applies to.

Symptoms

When you demote a domain controller that is being used as an Internet Information Services (IIS) 5.0 computer, all applications marked with Application Protection: High (isolated) will fail. The following is an example of an error message that may occur in the Event Viewer's application log:
DCOM got error "Logon failure: the user has not been granted the requested logon type at this computer. " and was unable to logon .\IWAM_servername in order to run the server:
{3D14228D-FBE1-11D0-995D-00C04FD919C1}

↑ Back to the top


Cause

The IWAM_servername is removed and recreated when the server's demotion occurs. The passwords for the COM+ packages are no longer synchronized with the password for the IWAM_server account.

↑ Back to the top


Resolution

To resolve this issue, open a command prompt and go to the \Inetpub\Adminscripts directory. Run the Synciwam.vbs script.

Example:

cscript synciwam.vbs

↑ Back to the top


Status

Microsoft has confirmed that this is a problem in Microsoft Internet Information Services version 5.0.

↑ Back to the top


Properties

Retired KB Content Disclaimer
This article was written about products for which Microsoft no longer offers support. Therefore, this article is offered "as is" and will no longer be updated.

↑ Back to the top


Keywords: kbbug, kbpending, KB236007

↑ Back to the top

Article Info
Article ID : 236007
Revision : 3
Created on : 11/21/2006
Published on : 11/21/2006
Exists online : False
Views : 455