Link to home
Start Free TrialLog in
Avatar of phoenix706
phoenix706

asked on

IIS Error 1747: The authentication service is unknown

Whenever I try to start IIS, I get the error: The authentication service is unknown. I've searched Google, but all I can find relates to RPC (which is starting fine and runs using the local service account). I haven't uninstalled Client for Microsoft Networks, so that shouldn't be the issue either. I've checked Windows Updates and installed everything I can find. The only update that won't install is the latest Windows Installer. I've updated my anti-virus defs in the hopes that it might be a virus that I can clean off, but so far the AV scan hasn't turned anything up. I'm running Windows 2000 SP 4 with IIS 5. Any help is greatly appreciated.
Avatar of phoenix706
phoenix706

ASKER

Also, just for the heck of it, I tried setting the IIS-related services to run using the Administrator account instead of the local system account, but I still got the same error. I changed everything back to using the system account and... same error :-)
Hi phoenix706,

Please check, if your RPC locator service is running.
on 'My Computer' -> Manage -> Services and Applications -> Services -> RPC-Locator should be running.


Cheers!
I started the RPC Locator service and set it to run automatically, but IIS is still giving me the same error.

On a side note: I tried to reinstall SP4 hoping that might help correct the issue, but it stops and tells me that it can't find "msi.dll". Could this also be tied in to the problem that I'm having with IIS?
I've tried uninstalling/reinstalling the Client for Microsoft Networks, but still get the same error. Also, I tried running a Windows repair, but to no avail.
ASKER CERTIFIED SOLUTION
Avatar of bastibartel
bastibartel

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I ended up moving everything onto a new server. The server giving me the error was an old Dell 350, so I figured now was as good a time to upgrade as any :-)

At any rate, thanks for the help.
If anyone runs across this post, I ended up with a similar problem later on with another server. After *much* searching, I discovered that the problem was actually a Rootkit worm that made it's way onto the servers. If you encounter the same error that I did, download a program called "UnHackMe" (search for it on Google - there are several free 30-day trials floating around) as well as "BlackLight" (http://www.f-secure.com/exclude/blacklight/index.shtml). These will help you identify and remove the problem and get you up and running again without having to format :-)