Solved

IIS search causes 529/680 errors with advapi

Posted on 2009-07-07
2
1,101 Views
Last Modified: 2012-05-07
Whenever users who aren't admins perform a search upon a given subweb, they get a FrontPage error, and the server gets 529/680 errors in the event log.  The errors look like this:
ogon Failure:
       Reason:            Unknown user name or bad password
       User Name:      IUSR_LATINTRA30006
       Domain:            LATHSQL01
       Logon Type:      8
       Logon Process:      Advapi  
       Authentication Package:      Negotiate
       Workstation Name:      LATHSQL01
       Caller User Name:      LATHSQL01$
       Caller Domain:      LSSC
       Caller Logon ID:      (0x0,0x3E7)
       Caller Process ID:      11440
       Transited Services:      -
       Source Network Address:      -
       Source Port:      -


Logon attempt by:      MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 Logon account:      IUSR_LATINTRA30006
 Source Workstation:      LATHSQL01
 Error Code:      0xC000006A


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I have seen postings about similar errors, but not as they relate to the search in IIS.  I have enabled anonymous access, and I also have Windows authentication enabled.  Changing permissions doesn't solve the issue.  I also reset the anonymous userid's password and provided the new password in the IIS properties page for this subweb.  How do I fix this?  Thanks.
0
Comment
Question by:thomsone
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 500 total points
ID: 24807376
Check this page at EventID.net: http://www.eventid.net/display.asp?eventid=529&eventno=1&source=Security&phase=1
Here's a quote from that page, the post is about 1/2 way down:
<<Anonymous (Last update 2/26/2008):

This error was seen on a Windows 2003 standard server running IIS 6.0 when attempting to browse to a new website on the server. The new website was asking for a Windows user ID and password. The error in the event log appeared before a user/password was given or Cancel was clicked.
The anonymous authentication user (IUSR_somename) was already in use by another website on the server, so it did not make sense that it was not working.
MS Article M909887 listed possible causes, one of which was "The wrong user name or password is specified in the IIS Metabase. The IIS metabase is (normally) located at C:\Windows\System32\inetsrv\MetaBase.xml. I compared the AnonymousUserPass string of the existing (working) site and the new (not working) site and they were different.
To modify the MetaBase.xml file the IIS services must be stopped or the "Enable Direct Metabase Edit" option must be enabled in IIS Manager/<server name>/Properties. First, make a copy of the MetaBase.xml file (ex: MetaBase.xml.old), then edit it. Copy the AnonymousUserPass string from the working site to the non-working site. Save the changes and start the IIS services.  >>
0

Featured Post

Comparison of Amazon Drive, Google Drive, OneDrive

What is Best for Backup: Amazon Drive, Google Drive or MS OneDrive? In this free whitepaper we look at their performance, pricing, and platform availability to help you decide which cloud drive is right for your situation. Download and read the results of our testing for free!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
This article summaries thoughts and ideas from two years of sustained use. It provides good reasoning to make the jump to Windows 10.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question