Solved

IIS search causes 529/680 errors with advapi

Posted on 2009-07-07
2
1,097 Views
Last Modified: 2012-05-07
Whenever users who aren't admins perform a search upon a given subweb, they get a FrontPage error, and the server gets 529/680 errors in the event log.  The errors look like this:
ogon Failure:
       Reason:            Unknown user name or bad password
       User Name:      IUSR_LATINTRA30006
       Domain:            LATHSQL01
       Logon Type:      8
       Logon Process:      Advapi  
       Authentication Package:      Negotiate
       Workstation Name:      LATHSQL01
       Caller User Name:      LATHSQL01$
       Caller Domain:      LSSC
       Caller Logon ID:      (0x0,0x3E7)
       Caller Process ID:      11440
       Transited Services:      -
       Source Network Address:      -
       Source Port:      -


Logon attempt by:      MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 Logon account:      IUSR_LATINTRA30006
 Source Workstation:      LATHSQL01
 Error Code:      0xC000006A


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I have seen postings about similar errors, but not as they relate to the search in IIS.  I have enabled anonymous access, and I also have Windows authentication enabled.  Changing permissions doesn't solve the issue.  I also reset the anonymous userid's password and provided the new password in the IIS properties page for this subweb.  How do I fix this?  Thanks.
0
Comment
Question by:thomsone
2 Comments
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 500 total points
ID: 24807376
Check this page at EventID.net: http://www.eventid.net/display.asp?eventid=529&eventno=1&source=Security&phase=1
Here's a quote from that page, the post is about 1/2 way down:
<<Anonymous (Last update 2/26/2008):

This error was seen on a Windows 2003 standard server running IIS 6.0 when attempting to browse to a new website on the server. The new website was asking for a Windows user ID and password. The error in the event log appeared before a user/password was given or Cancel was clicked.
The anonymous authentication user (IUSR_somename) was already in use by another website on the server, so it did not make sense that it was not working.
MS Article M909887 listed possible causes, one of which was "The wrong user name or password is specified in the IIS Metabase. The IIS metabase is (normally) located at C:\Windows\System32\inetsrv\MetaBase.xml. I compared the AnonymousUserPass string of the existing (working) site and the new (not working) site and they were different.
To modify the MetaBase.xml file the IIS services must be stopped or the "Enable Direct Metabase Edit" option must be enabled in IIS Manager/<server name>/Properties. First, make a copy of the MetaBase.xml file (ex: MetaBase.xml.old), then edit it. Copy the AnonymousUserPass string from the working site to the non-working site. Save the changes and start the IIS services.  >>
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question