• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 290
  • Last Modified:

IIS6 logging to an other Server in a Workgroup?

In our new Webfarm that Im working on we currently have the following.

1 Windows 2003 Standard Server setup with a share called Weblogs

3x Windows 2003 Web Servers in a NLB cluster.

What I want to be able to do is dump the logs onto the log server but with the servrs not being in a domain im having problems with accessing the share on the log server.

Originally I created an account on all 4 servers that was identical and gave that full access to the share on the log server, then on the servers I added a startup script in gpedit to launch the following batch file at startup.

@echo off
net use \\server_name\share_name /USER:Test test /PERSISTENT:YES
exit


This does not work though, so how else could I do this? Could I run IIS Service using this account that is identical on all the servers and the log server so that it will have access? or is it not recommended to change the account the IIS service run's with?

Any idea's would be greating appreciated.

King regards.

Darren Bolton
Systems Administrator
0
DarrenBolton
Asked:
DarrenBolton
1 Solution
 
belatucadCommented:
alternatively you could give the account IIS runs with access to the share ;\

you could just schedule a job to copy the files over nightly or something also, and run it as whatever user you want, without modifying IIS at all
0
 
DarrenBoltonAuthor Commented:
Disk space is an issue thats why im wanting the log to another server, i won't be able to grant the account that IIS is running under because the servers arn't in a domain
0
 
dmoxCommented:
IIS can't log to anything but it's local hard drive.  

http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/standard/proddocs/en-us/log_savinglogfiles.asp?sd=gn&ln=en-ca&gssnb=1

Explains very briefly that you can't, but there is a doc out there that explains fully why I just can't find it at the moment.

We ran into this issue and we are currently hosting 8 Web Servers.  To work around this we've scheduled a batch file to copy the logs once a week to a network share then delete the logs out of the directory.  You lose approx 1 minute tops of log file information, but it's the cleanest way of doing it.
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 
belatucadCommented:
Darren - as dmox and I said, schedule a copy(move) of the log files nightly(or as often as you want)

0
 
Dave_DietzCommented:
With IIS 6 this is very easy to do.

(IIS 5 doesn't support remote logging, IIS 6 does....)

On the target machine you will need to create a Null share:

Create a new share, for example, public.

Make sure Everyone has Full Control in the NTFS permissions for the target directory.

From the Start menu, click Run.

In the Open box, type Regedit.exe, and click OK.

Navigate to and double-click the following key in the registry:
   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters\NullSessionShares.
   Note that NullSessionShares is a REG_MULTI_SZ value.

On a new line in the NullSessionShares key, type the name of the share that you want to access with a null session, for example, public.

Navigate to and click the following key in the registry:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA.

From the Edit menu, point to Add, click DWORD Value and then add the following registry value:
   Name: RestrictAnonymous
   Type: REG_DWORD
   Data: 0

Quit Registry Editor.

Restart the server.

Finally, point the logging directory for the site to the new Nul session share via UNC path.

You should be set to go.....

Dave Dietz
0
 
DarrenBoltonAuthor Commented:
I've tried the method that you have given me and it does not appear to work, when I try and connect to the share I get "Bad username or password"
0
 
DarrenBoltonAuthor Commented:
Finally got it working!

Had to enable the "Let Everyone Permissions apply to anonymous users" for it to work.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now