Discussion:
IUSR_<servername> user missing
(too old to reply)
John
2009-02-23 17:09:28 UTC
Permalink
Hi

sbs 2003 premium. Looking through the list of users in AD for the
IUSR_<servername> user I find that it is missing however I see a user
IUSR_A99AA9A where A99AA9A is not the server name. Is this the correct user?
Does this show a problem with server configuration?

This is a dell server which comes partially installed with sbs 2003.

Thanks

Regards
SuperGumby [SBS MVP]
2009-02-24 04:20:38 UTC
Permalink
normal for OEM install. The OEM image has the server name A99AA9A (in this
case) and the OEM out of box experience changes it.

Normally this is not a problem. We had an SBS patch that barfed but SBS Dev
quickly became aware of such and modified the patch.

Mind you, I and most others would flatten an OEM install and do it ourself.
Post by John
Hi
sbs 2003 premium. Looking through the list of users in AD for the
IUSR_<servername> user I find that it is missing however I see a user
IUSR_A99AA9A where A99AA9A is not the server name. Is this the correct
user? Does this show a problem with server configuration?
This is a dell server which comes partially installed with sbs 2003.
Thanks
Regards
Miles Li [MSFT]
2009-02-24 10:51:32 UTC
Permalink
Hello John,

Thank you for posting here.

According to your description, I understand that:

The IUSR account in your domain doesn't have the suffix with the computer
name.

If I have misunderstood the problem, please don't hesitate to let me know.

Suggestions:
=======================
Actually, the IUSR and IWAM accounts may be different from the current
server name. For example, if you rename a server, the IUSR and IWAM
accounts will still be the old server name. It will not cause any problems.
You do not need to worry about it. If you wanted to, you could still rename
the IWAM and IUSR accounts in the Metabase. When IIS is restarted, the
users would be recreated based on the Metabase data. However, the steps are
rather complex and problem-prone. If it is not necessary, we do not
recommend you renaming them.

1. For this issue, let's first check whether the current IUSR and IWAM
accounts are working properly. To verify whether the IUSR account works
well, you may check whether you can access the default web site on the SBS
server. BY default, the default web site enables anonymous access with the
IUSR account. You may check whether the IUSR_A99AA9A is set for
IUSR_A99AA9A.

1) Open IIS Manager and go to the Default web site and get properties
2) Go to directory security\Edit.
3) Is the IUSR_A99AA9A account set for anonymous access? If not, what is
the name of the account?
4) If the IUSR_A99AA9A account is set properly and you can access default
web site without any problem, it indicates that the IUSR account works well
and you can ignore this issue safely.
5) If there is issues when you try to access the default web site, you may
manually delete the IUSR account in the Active Directory Users and
Computers and restart the IIS to check how it works.

Moreover, what is the name of the IWAM account? Is it named IWAM_A99AA9A
too?

2. If you really need to change the name, you may rename the account in
Active Directory Users and Computers. However, the IUSR account is also
stored in the IIS metabase. You should ran the following set of commands to
remove/reset the IUSR and the IWAM accounts. The steps are very complex. We
do not recommend that you perform it if IIS is working properly now.

C:\inetpub\adminscripts>cscript adsutil.vbs find anonymoususername
C:\inetpub\adminscripts>cscript adsutil.vbs get W3svc/anonymoususername
C:\inetpub\adminscripts>cscript adsutil.vbs set W3svc/anonymoususername
"Actual IUSR account name here"

C:\inetpub\adminscripts>cscript adsutil.vbs find W3svc/ Wamusername
C:\inetpub\adminscripts>cscript adsutil.vbs get W3svc/Wamusername
C:\inetpub\adminscripts>cscript adsutil.vbs set W3svc/Wamusername "Actual
IWam account name here"

Similarly we can set the password at these nodes

C:\inetpub\adminscripts>cscript adsutil.vbs set W3svc/anonymoususerpass
"Actual IUSR password here"
C:\inetpub\adminscripts>cscript adsutil.vbs set W3svc/Wamuserpass "Actual
IWam password here"

More Information
--------------------
822165 IUSR and IWAM Accounts Are Re-created When the IIS Admin Service Is
Restarted
http://support.microsoft.com/default.aspx?scid=kb;EN-US;822165

PRB: Configured Identity Is Incorrect for IWAM Account
http://support.microsoft.com/?id=297989

Thread: IUSR account name differnt than actual machine name
http://forums.iis.net/t/1090676.aspx

Renaming the IUSR Account
http://technet.microsoft.com/en-us/library/bb878101.aspx


Hope it helps. If you have any questions or concerns, please do not
hesitate to let me know.


Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
John
2009-03-03 09:16:25 UTC
Permalink
Hi Miles

Many thnaks. Very useful.

Thanks again.

Regrads
Post by Miles Li [MSFT]
Hello John,
Thank you for posting here.
The IUSR account in your domain doesn't have the suffix with the computer
name.
If I have misunderstood the problem, please don't hesitate to let me know.
=======================
Actually, the IUSR and IWAM accounts may be different from the current
server name. For example, if you rename a server, the IUSR and IWAM
accounts will still be the old server name. It will not cause any problems.
You do not need to worry about it. If you wanted to, you could still rename
the IWAM and IUSR accounts in the Metabase. When IIS is restarted, the
users would be recreated based on the Metabase data. However, the steps are
rather complex and problem-prone. If it is not necessary, we do not
recommend you renaming them.
1. For this issue, let's first check whether the current IUSR and IWAM
accounts are working properly. To verify whether the IUSR account works
well, you may check whether you can access the default web site on the SBS
server. BY default, the default web site enables anonymous access with the
IUSR account. You may check whether the IUSR_A99AA9A is set for
IUSR_A99AA9A.
1) Open IIS Manager and go to the Default web site and get properties
2) Go to directory security\Edit.
3) Is the IUSR_A99AA9A account set for anonymous access? If not, what is
the name of the account?
4) If the IUSR_A99AA9A account is set properly and you can access default
web site without any problem, it indicates that the IUSR account works well
and you can ignore this issue safely.
5) If there is issues when you try to access the default web site, you may
manually delete the IUSR account in the Active Directory Users and
Computers and restart the IIS to check how it works.
Moreover, what is the name of the IWAM account? Is it named IWAM_A99AA9A
too?
2. If you really need to change the name, you may rename the account in
Active Directory Users and Computers. However, the IUSR account is also
stored in the IIS metabase. You should ran the following set of commands to
remove/reset the IUSR and the IWAM accounts. The steps are very complex. We
do not recommend that you perform it if IIS is working properly now.
C:\inetpub\adminscripts>cscript adsutil.vbs find anonymoususername
C:\inetpub\adminscripts>cscript adsutil.vbs get W3svc/anonymoususername
C:\inetpub\adminscripts>cscript adsutil.vbs set W3svc/anonymoususername
"Actual IUSR account name here"
C:\inetpub\adminscripts>cscript adsutil.vbs find W3svc/ Wamusername
C:\inetpub\adminscripts>cscript adsutil.vbs get W3svc/Wamusername
C:\inetpub\adminscripts>cscript adsutil.vbs set W3svc/Wamusername "Actual
IWam account name here"
Similarly we can set the password at these nodes
C:\inetpub\adminscripts>cscript adsutil.vbs set W3svc/anonymoususerpass
"Actual IUSR password here"
C:\inetpub\adminscripts>cscript adsutil.vbs set W3svc/Wamuserpass "Actual
IWam password here"
More Information
--------------------
822165 IUSR and IWAM Accounts Are Re-created When the IIS Admin Service Is
Restarted
http://support.microsoft.com/default.aspx?scid=kb;EN-US;822165
PRB: Configured Identity Is Incorrect for IWAM Account
http://support.microsoft.com/?id=297989
Thread: IUSR account name differnt than actual machine name
http://forums.iis.net/t/1090676.aspx
Renaming the IUSR Account
http://technet.microsoft.com/en-us/library/bb878101.aspx
Hope it helps. If you have any questions or concerns, please do not
hesitate to let me know.
Best regards,
Miles Li
Microsoft Online Partner Support
Microsoft Global Technical Support Center
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Miles Li [MSFT]
2009-03-04 10:05:43 UTC
Permalink
Hello John,

Thanks for the update.

I'm glad to hear that my post helps you on this issue. Please do not
hesitate to post in SBS newsgroup if you need any assistance in the future.
I will follow up as soon as possible. Thanks.


Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Loading...