You receive a "Service Unavailable" error message when you browse an IIS 6.0 Web page on a Windows Server 2003-based domain controller

To resolve this problem, manually set permissions on the folders for the IIS_WPG group, and then set permissions on the folders for the NT Authority\Network Service account.



To have us fix this problem for you, go to the "Fix it for me" section. If you prefer to fix this problem yourself, go to the "Let me fix it myself" section.

Fix it for me

To fix this problem automatically, click the Fix itbutton or link. Click Runin the File Download dialog box, and follow the steps in the Fix it wizard.

Notes

• This wizard may be in English only. However, the automatic fix also works for other language versions of Windows.
• If you are not on the computer that has the problem, save the Fix it solution to a flash drive or a CD and then run it on the computer that has the problem.

Then, go to the "Did this fix the problem?" section.

Let me fix it myself

To set permissions on the folders for the IIS_WPG group, follow these steps:

1. Start Windows Explorer, and then open the following folder:
   %systemroot%\Help\iisHelp
2. In the right pane, right-click the Common folder, and then click Sharing and Security.
3. Click the Security tab, click Add, type IIS_WPG, and then click OK.
4. With IIS_WPG selected, click to select the following check boxes under the Allow column, and then click OK:
   • Read and Execute
   • List Folder Contents
   • Read
5. Open the following folder:
   %systemroot%\system32\inetsrv
6. In the right pane, right-click the ASP Compiled Templates folder, and then click Sharing and Security.
7. Click the Security tab, click the IIS_WPG group, and then click to select the Full Control check box under the Allow column. Click OK.
8. Open the following folder:
   %systemroot%
9. In the right pane, right-click the IIS Temporary Compressed folder, and then click Sharing and Security.
10. Click the Security tab, click the IIS_WPG group, and then click to select the Full Control check box under the Allow column. Click OK.

To set permissions on the folders for the NT Authority\Network Service account, follow these steps:

1. Start Windows Explorer, and then open the following folder:
   %systemroot%\Help\iisHelp
2. In the right pane, right-click the Common folder, and then click Sharing and Security.
3. Click the Security tab, click Add, type NETWORK SERVICE, and then click OK.
4. With NETWORK SERVICE selected, click to select the following check boxes under the Allow column, and then click OK:
   • Read and Execute
   • List Folder Contents
   • Read
5. Open the following folder:
   %systemroot%\system32\inetsrv
6. In the right pane, right-click the ASP Compiled Templates folder, and then click Sharing and Security.
7. Click the Security tab, click Add, type NETWORK SERVICE, and then click OK.
8. With the NETWORK SERVICE group selected, click to select the Full Control check box under the Allow column, and then click OK.
9. Open the following folder:
   %systemroot%
10. In the right pane, right-click the IIS Temporary Compressed folder, and then click Sharing and Security.
11. Click the Security tab, click Add, type NETWORK SERVICE, and then click OK.
12. With the NETWORK SERVICE group selected, click to select the Full Control check box under the Allow column, and then click OK.

After you have completed these steps, restart the IIS Admin service from the Services snap-in or from the Computer Management snap-in.