Solved

IIS search causes 529/680 errors with advapi

Posted on 2009-07-07
2
1,100 Views
Last Modified: 2012-05-07
Whenever users who aren't admins perform a search upon a given subweb, they get a FrontPage error, and the server gets 529/680 errors in the event log.  The errors look like this:
ogon Failure:
       Reason:            Unknown user name or bad password
       User Name:      IUSR_LATINTRA30006
       Domain:            LATHSQL01
       Logon Type:      8
       Logon Process:      Advapi  
       Authentication Package:      Negotiate
       Workstation Name:      LATHSQL01
       Caller User Name:      LATHSQL01$
       Caller Domain:      LSSC
       Caller Logon ID:      (0x0,0x3E7)
       Caller Process ID:      11440
       Transited Services:      -
       Source Network Address:      -
       Source Port:      -


Logon attempt by:      MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 Logon account:      IUSR_LATINTRA30006
 Source Workstation:      LATHSQL01
 Error Code:      0xC000006A


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I have seen postings about similar errors, but not as they relate to the search in IIS.  I have enabled anonymous access, and I also have Windows authentication enabled.  Changing permissions doesn't solve the issue.  I also reset the anonymous userid's password and provided the new password in the IIS properties page for this subweb.  How do I fix this?  Thanks.
0
Comment
Question by:thomsone
2 Comments
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 500 total points
ID: 24807376
Check this page at EventID.net: http://www.eventid.net/display.asp?eventid=529&eventno=1&source=Security&phase=1
Here's a quote from that page, the post is about 1/2 way down:
<<Anonymous (Last update 2/26/2008):

This error was seen on a Windows 2003 standard server running IIS 6.0 when attempting to browse to a new website on the server. The new website was asking for a Windows user ID and password. The error in the event log appeared before a user/password was given or Cancel was clicked.
The anonymous authentication user (IUSR_somename) was already in use by another website on the server, so it did not make sense that it was not working.
MS Article M909887 listed possible causes, one of which was "The wrong user name or password is specified in the IIS Metabase. The IIS metabase is (normally) located at C:\Windows\System32\inetsrv\MetaBase.xml. I compared the AnonymousUserPass string of the existing (working) site and the new (not working) site and they were different.
To modify the MetaBase.xml file the IIS services must be stopped or the "Enable Direct Metabase Edit" option must be enabled in IIS Manager/<server name>/Properties. First, make a copy of the MetaBase.xml file (ex: MetaBase.xml.old), then edit it. Copy the AnonymousUserPass string from the working site to the non-working site. Save the changes and start the IIS services.  >>
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question