Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. [SDP 3][9bb9e9b3-63d2-45cf-b3e7-e801239ef3d8]IIS Kerberos Authentication Diagnostic

[SDP 3][9bb9e9b3-63d2-45cf-b3e7-e801239ef3d8]IIS Kerberos Authentication Diagnostic

View products that this article applies to.

Summary

The IIS Kerberos Authentication Diagnostic collects information related to troubleshooting Windows Authentication issues in IIS.

↑ Back to the top

More Information

The IIS Kerberos Authentication Diagnostic will check for valid Service Principal Names for a configured web site or application. It also checks for known issues with Kerberos delegation. The rest of this article describes the information that may be collected from a computer when you run the IIS Kerberos Authentication Diagnostic.

Information collected

Operating System
Description
Machine Name:

OS Name:

Last Reboot/Uptime:

AntiMalware:

User Account Control:

Username:

Computer System
Description
Computer Model:

Processor(s):

Machine Domain:

Role:

Event Log Files
DescriptionFile Name
Application Event Log{Computername}_evt_Application.evtx
System Event Log{Computername}_evt_System.evtx
Security Event Log{Computername}_evt_Security.evtx
IIS Configuration Administrative Event Log{Computername}_evt_IISConfiguration-Administrative.evtx
IIS Configuration Operational Event Log{Computername}_evt_IISConfiguration-Administrative.evtx

IIS Configuration
DescriptionFile Name
IIS/ASP.NET Configuration Files{Computername}_IISConfiguration.zip
IIS Machine Key InformationIISMachineKeyInfo.txt
Kerberos Configuration InformationIISKerberosReport.htm

IIS Log Files
DescriptionFile Name
Http Error Logs{Computername}_HttpErrorLogs.zip
IIS Log Files{Computername}_IISLogs.zip

Additional information

The IIS Kerberos Authentication Diagnostic will also verify Service Principal names for the application pool account that the web site or application is running as. For more information on configuring a Service Principal Name(SPN) for your web site or application, click the following article number to go to the article in the Microsoft Knowledge Base:
929650 How to use SPNs when you configure Web applications that are hosted on Internet Information Services

↑ Back to the top

References

For more information about the diagnostic tool, click the following article number to go to the article in the Microsoft Knowledge Base:
973559 Frequently asked questions about the Microsoft Support Diagnostic Tool (MSDT) when it is used with Windows 7 or Windows Server 2008 R2

↑ Back to the top

Keywords: kb

↑ Back to the top

Article Info
Article ID : 2890772
Revision : 1
Created on : 1/7/2017
Published on : 9/18/2013
Exists online : False
Views : 780