IIS6 Problem, "Please wait while your changes are processed."
My Windows 2003 server seems to have problems with server extensions.
When ever I try to configure server extensions it pops up the rotating cog and says "Please wait while your changes are processed."
But nothing happens.
It doesn't finish, I even left it running overnight, thinking it was just being slow.
I need to urgently change the mail server for a web site, but this page is also not working. The button doesn't seem to do anything.
The server is rack mounted in a data centre, so its not easy going down to the box to re-install bits.
This is fairly urgent, so I would be very grateful for any help.
Thanks
Andy
When ever I try to configure server extensions it pops up the rotating cog and says "Please wait while your changes are processed."
But nothing happens.
It doesn't finish, I even left it running overnight, thinking it was just being slow.
I need to urgently change the mail server for a web site, but this page is also not working. The button doesn't seem to do anything.
The server is rack mounted in a data centre, so its not easy going down to the box to re-install bits.
This is fairly urgent, so I would be very grateful for any help.
Thanks
Andy
ASKER
Hi AJ,
I tried your suggestion.
When I go to the URL it prompts me for the username and password. I am using the administrator account, but it doesn't seem to take the password even though it is correct.
Maybe its all permission based?
I tried your suggestion.
When I go to the URL it prompts me for the username and password. I am using the administrator account, but it doesn't seem to take the password even though it is correct.
Maybe its all permission based?
possible - do you have integrated or at least basic permission enabled on the websites (sharepoint administration and the extended websites)?
what should happen then is that you'll get prompted for anything anonymous won't let you get at.
if you're using local admin account use COMPUTERNAME\Administrator
If you look at your IIS log, you should see 401 errors coming up where it's denying you access, you should be able to check here whether requests are coming through with the correct credentials (nothing means it's trying to use anonymous).
what should happen then is that you'll get prompted for anything anonymous won't let you get at.
if you're using local admin account use COMPUTERNAME\Administrator
If you look at your IIS log, you should see 401 errors coming up where it's denying you access, you should be able to check here whether requests are coming through with the correct credentials (nothing means it's trying to use anonymous).
ASKER
AJ, can you tell me where I would find the IIS log please?
ok, *if* it's turned on and you haven't shifted it anywhere, it should be in c:\windows\system32\logfil
if logging isn't on,
Open IIS Manager,
Right click on your website--> properties
On the Home Directory tab check logging's turned on, going into logging properties will also show you which w3svc directory this site will log into.
need any more help with this bit, just let me know.
if logging isn't on,
Open IIS Manager,
Right click on your website--> properties
On the Home Directory tab check logging's turned on, going into logging properties will also show you which w3svc directory this site will log into.
need any more help with this bit, just let me know.
ASKER
Hi AJ,
Sorry for the delay, things going a bit mad here atm.
I found the files, was being daft, I knew they were there becuase I use them on another server to check stats.
Is this the sort of log entry you needed to know about?
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2005-05-08 10:11:00
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2005-05-08 10:11:00 212.58.145.186 GET /fpadmdll.dll page=newsrvr.htm&port=/LM/
2005-05-08 10:11:14 212.58.145.186 GET /fpadmdll.dll page=newsrvr.htm&port=/LM/
2005-05-08 10:11:14 212.58.145.186 GET /fpadmdll.dll page=newsrvr.htm&port=/LM/
2005-05-08 10:11:14 212.58.145.186 GET /fpadmdll.dll page=webadmin.css 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:27 212.58.145.186 GET /Images/offlogo.gif - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:27 212.58.145.186 GET /Images/settings.gif - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:27 212.58.145.186 GET /Images/bluedot.gif - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:27 212.58.145.186 GET /Images/blank.gif - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:31 212.58.145.186 POST /fpadmdll.dll - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:32 212.58.145.186 POST /fpadmdll.dll - 3424 winwebs2\administrator 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:32 212.58.145.186 GET /Images/gears_an.gif - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
Does that mean anything to you?
Sorry for the delay, things going a bit mad here atm.
I found the files, was being daft, I knew they were there becuase I use them on another server to check stats.
Is this the sort of log entry you needed to know about?
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2005-05-08 10:11:00
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2005-05-08 10:11:00 212.58.145.186 GET /fpadmdll.dll page=newsrvr.htm&port=/LM/
2005-05-08 10:11:14 212.58.145.186 GET /fpadmdll.dll page=newsrvr.htm&port=/LM/
2005-05-08 10:11:14 212.58.145.186 GET /fpadmdll.dll page=newsrvr.htm&port=/LM/
2005-05-08 10:11:14 212.58.145.186 GET /fpadmdll.dll page=webadmin.css 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:27 212.58.145.186 GET /Images/offlogo.gif - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:27 212.58.145.186 GET /Images/settings.gif - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:27 212.58.145.186 GET /Images/bluedot.gif - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:27 212.58.145.186 GET /Images/blank.gif - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:31 212.58.145.186 POST /fpadmdll.dll - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:32 212.58.145.186 POST /fpadmdll.dll - 3424 winwebs2\administrator 212.58.145.186 Mozilla/4.0+(compatible;+M
2005-05-08 10:11:32 212.58.145.186 GET /Images/gears_an.gif - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
Does that mean anything to you?
It looks like everything coming through with credentials is successful (200 code)
The only 401 was this one: 2005-05-08 10:11:31 212.58.145.186 POST /fpadmdll.dll - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
(no credentials attached)
which was followed immediately by a successful request that had credentials attached.
-Is winwebs2\administrator a domain account or local account on the server?
-The port number showing for the site is 3424... so are these logs from the "Microsoft Sharepoint Administration" web site? (if this wasn't the site you were having trouble getting into, they're not the right set of logs)
-Did you check in IIS Manager that at least Basic and/or Integrated Authentication is enabled?
The only 401 was this one: 2005-05-08 10:11:31 212.58.145.186 POST /fpadmdll.dll - 3424 - 212.58.145.186 Mozilla/4.0+(compatible;+M
(no credentials attached)
which was followed immediately by a successful request that had credentials attached.
-Is winwebs2\administrator a domain account or local account on the server?
-The port number showing for the site is 3424... so are these logs from the "Microsoft Sharepoint Administration" web site? (if this wasn't the site you were having trouble getting into, they're not the right set of logs)
-Did you check in IIS Manager that at least Basic and/or Integrated Authentication is enabled?
ASKER
winwebs2 is the machine name, so I am loggin on with local administrator.
-Did you check in IIS Manager that at least Basic and/or Integrated Authentication is enabled?
Cant find this, if you could point me to it, thanks.
-Did you check in IIS Manager that at least Basic and/or Integrated Authentication is enabled?
Cant find this, if you could point me to it, thanks.
ok Start-->Programs-->Adminis
traverse down to your website, right-click it and select "properties"
Go to the "directory security" tab.
Under "Authentication and Anonymous Access Control" Select "Edit".
here you'll see the five different types of authentication you can turn on and off for IIS.
If you're doing all this from the server, integrated will work fine (picks up logged on credentials) and will prompt you if your logged on credentials don't have enough access. To get into frontpage administration you need a minimum of either integrated or basic authentication turned on (or both if you want). Basic is usually used where you're hitting the site from an internet location and you're not logged onto the domain.
Do the same thing for your Microsoft Sharepoint Administration web site as this contains the top level server-wide administration console. (I think that's the one you sent through the logs on)>
Let me know if you need more clarification with this..
traverse down to your website, right-click it and select "properties"
Go to the "directory security" tab.
Under "Authentication and Anonymous Access Control" Select "Edit".
here you'll see the five different types of authentication you can turn on and off for IIS.
If you're doing all this from the server, integrated will work fine (picks up logged on credentials) and will prompt you if your logged on credentials don't have enough access. To get into frontpage administration you need a minimum of either integrated or basic authentication turned on (or both if you want). Basic is usually used where you're hitting the site from an internet location and you're not logged onto the domain.
Do the same thing for your Microsoft Sharepoint Administration web site as this contains the top level server-wide administration console. (I think that's the one you sent through the logs on)>
Let me know if you need more clarification with this..
ASKER
OK, integrated security is ticked on both.
When configuring FPSE I log on as the local administrator.
But it always prompts me for user name and password when I use FPSE.
The machine name is Winwebs2
If I try to recalc the FPSE, it asks for me to logon and then fails authentication. Surely the account I am using has all permissions already?
When configuring FPSE I log on as the local administrator.
But it always prompts me for user name and password when I use FPSE.
The machine name is Winwebs2
If I try to recalc the FPSE, it asks for me to logon and then fails authentication. Surely the account I am using has all permissions already?
I'm trying to think of things that might cause this...
I'm going to dump a few things to try here because I don't want you sitting on your hands while I'm in a different time zone :)
I doubt this is the problem because you've successfully installed the extensions, but if you go into IIS Manager, Web Service Extensions,
are "Frontpage Server Extensions 2002" showing as allowed?
Is this a recent problem or has it always been like this?
Are the extensions actually heavily configured and in use? (wondering if a reinstall is an option / whether it will disrupt your services)
Do you have security logging turned on if you go into event viewer? is anything showing there? (this can be switched on in local security policy-->Local Policy-->Audit Policy - sorry if location's a little out, all I've got in front of me right now's xp but should be pretty close and called the same thing - we primarily want to look at failure auditing on these).
There's a tool called filemon from http://sysinternals.com that you can download and run up while you try to access the site. This will show you any access denied's you're getting that aren't showing up in the IIS logs. From there you can go and check that the administrator account you are using (and the iwam_computername account) have modify rights to these directories and/or files. From memory you need the web directories, c:\Program files\Common Files\Microsoft Shared\web server extensions subdirectories, c:\windows\system32 directory.
I know it's a long list, but let me know how you go or if you get stuck on any of them...
I'm going to dump a few things to try here because I don't want you sitting on your hands while I'm in a different time zone :)
I doubt this is the problem because you've successfully installed the extensions, but if you go into IIS Manager, Web Service Extensions,
are "Frontpage Server Extensions 2002" showing as allowed?
Is this a recent problem or has it always been like this?
Are the extensions actually heavily configured and in use? (wondering if a reinstall is an option / whether it will disrupt your services)
Do you have security logging turned on if you go into event viewer? is anything showing there? (this can be switched on in local security policy-->Local Policy-->Audit Policy - sorry if location's a little out, all I've got in front of me right now's xp but should be pretty close and called the same thing - we primarily want to look at failure auditing on these).
There's a tool called filemon from http://sysinternals.com that you can download and run up while you try to access the site. This will show you any access denied's you're getting that aren't showing up in the IIS logs. From there you can go and check that the administrator account you are using (and the iwam_computername account) have modify rights to these directories and/or files. From memory you need the web directories, c:\Program files\Common Files\Microsoft Shared\web server extensions subdirectories, c:\windows\system32 directory.
I know it's a long list, but let me know how you go or if you get stuck on any of them...
ASKER
I will try them tonight AJ, thanks.
The strange thing is I thought as I had some spare time at the weekend, I would format the box and re-install 2003. So I did this, installed SP1 again and straight away it started doing the same thing.
Therefore I have to assume either I am doing something daft or SP1 is messing up my IIS.
I don't have much 2003 experience, but I have been doing this stuff for ages on 2000 and never had all these problems before.
The strange thing is I thought as I had some spare time at the weekend, I would format the box and re-install 2003. So I did this, installed SP1 again and straight away it started doing the same thing.
Therefore I have to assume either I am doing something daft or SP1 is messing up my IIS.
I don't have much 2003 experience, but I have been doing this stuff for ages on 2000 and never had all these problems before.
if you've performed any security lockdown style stuff on this server that would be helpful to know as well... gives me a few more ideas to work with (running out of ideas fast :) )
SP1 for windows 2003 you mean? if that's what you mean, it's been causing a few people grief - will look into anything sharepoint/frontpage specific for you..
SP1 for windows 2003 you mean? if that's what you mean, it's been causing a few people grief - will look into anything sharepoint/frontpage specific for you..
ASKER
I haven't run lockdown tool or anything like that.
Do you think un-installing the SP1 will fix my problem?
Do you think un-installing the SP1 will fix my problem?
not necessarily - if SP1's the problem uninstalling it might leave whatever broke in a broken state.. I haven't had a chance yet to look into that as a possibility, too busy today *sorry*
how did you go with the troubleshooting list - anything show up?
ASKER
Ok, maybe a little further along.
if I click on administration of the website I get the error below. I am logging on to the server extensions via local administrator.
You are not authorized to view this page
You do not have permission to view this directory or page using the credentials that you supplied.
--------------------------
Please try the following:
Contact the Web site administrator if you believe you should be able to view this directory or page.
Click the Refresh button to try again with different credentials.
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials.
Internet Information Services (IIS)
if I click on administration of the website I get the error below. I am logging on to the server extensions via local administrator.
You are not authorized to view this page
You do not have permission to view this directory or page using the credentials that you supplied.
--------------------------
Please try the following:
Contact the Web site administrator if you believe you should be able to view this directory or page.
Click the Refresh button to try again with different credentials.
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials.
Internet Information Services (IIS)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thankyou so much for your help alimu.
It all seems to be working now on the website thats on the server.
I will try publishing the big web later, but my errors seem to have stopped.
I can not explain how happy I am :)
Thanks again
Regards
Andy
It all seems to be working now on the website thats on the server.
I will try publishing the big web later, but my errors seem to have stopped.
I can not explain how happy I am :)
Thanks again
Regards
Andy
so what fixed it? this was driving me probably as nuts as you!
ASKER
The regfix from here http://support.microsoft.com/default.aspx?scid=kb;en-us;896861 did it.
Still dont really understand why it did, but it did and I am not complaining :)
Still dont really understand why it did, but it did and I am not complaining :)
the more I see.. the more I don't want service pack 1 on my 2003 servers...
glad I found something that finally worked! only took 2 weeks (think this almost qualifies as the most extended bout of troubleshooting ever... so much for Sharepoint being simple :o) )
cheers and thanks for the points!
AJ.
glad I found something that finally worked! only took 2 weeks (think this almost qualifies as the most extended bout of troubleshooting ever... so much for Sharepoint being simple :o) )
cheers and thanks for the points!
AJ.
ran the health check for my site: http://mysitename/_vti_bin/_vti_adm/fpadmdll.dll?page=health.htm
only ran one set of detect and repairs at a time starting from the "check anonymous access" and working upwards.
somewhere in there it corrected whatever was corrupt and was ok.
let me know if you have any luck with this,
AJ.