Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


IIS 6 intermittent 401.1 errors - Restarting IIS fixes the issue temporarily

Posted on 2013-02-05
Medium Priority
Last Modified: 2013-03-26
IIS 6 on a Windows 2003 Server. Additional components are FastCGI/PHP 5.2. My websites will load perfectly for a time. Usually at least once a day though the websites become unavailable, the error that IIS reports is HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials. I will restart IIS and everything will start working again.

Because it is intermittent I am not sure where to start. Any ideas would be appreciated.

HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials.
Internet Information Services (IIS)
Question by:J C
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
LVL 10

Accepted Solution

gaurav05 earned 2000 total points
ID: 38859009

Please check application pool Identitiy settings

Is it network service or  ApplicationpoolIdentity. ?

Also check IUSER and IIS_IUSR permissions applied to root folder of website.

Let us know.

Author Comment

by:J C
ID: 38859782
Application Pool service is running as "Network Service"

The account used for anonymous access does have read/execute permissions on root level of website.

Author Comment

by:J C
ID: 38859789
I should mention that all websites, there are 4 of them become unavailable and restarting IIS brings them back to life.
Will your db performance match your db growth?

In Percona’s white paper “Performance at Scale: Keeping Your Database on Its Toes,” we take a high-level approach to what you need to think about when planning for database scalability.

LVL 34

Expert Comment

by:Paul MacDonald
ID: 38859957
I would start with the Event logs, both on the IIS server and in AD.  It almost sounds as if an account is being locked out somewhere (or at the very least there's an authentication issue of some sort).

Author Comment

by:J C
ID: 38866804
The event logs do not show anything pertinent. That is where I started. Is there a routine of some sort that runs within a 24 hour period that may be causing this problem? Every morning I check to see if the websites are available they are unavailable, I'll restart IIS and it will stay up for the remained of the day.
LVL 34

Expert Comment

by:Paul MacDonald
ID: 38868361
Do you have to restart IIS or can you just recycle the Application Pool(s) for the problem sites?  
Do the problem sites all use the same AppPool?
Is the IIS Service still running when the problem sites are down?  What about all dependent services?
Do the problem sites have anything else in common (all ASP.Net 2.0, ASP.Net 4.0, database connection, IP address, etc)?

Author Comment

by:J C
ID: 38869509
I've tried just recycling the AppPool but that doesn't resolve the problem, I have to do an iisreset. They do share the same AppPool. IIS and all dependencies are running when the sites become unavailable. I have a php website, a coldufison website. A few .net apps. none of the services crash, they are all in a running state at the time of the problem. Boggles my mind. Maybe I need to rebuilding the web server.

Author Comment

by:J C
ID: 38919371
The problem is only with anonymous access/the anonymous user account. I can switch the type of authentication to integrated windows and login to the site and have it display properly.

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Lease-to-own eliminates the expenditure of hardware replacement and allows you to pay off the server over time. Usually, this is much cheaper than leasing servers. Think of lease-to-own as credit without interest.
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

670 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question