Error Id 5153
(Русский)ישראל (עברית)المملكة العربية السعودية (العربية)ไทย (ไทย)대한민국 (한국어)中华人民共和国 (中文)台灣 (中文)日本 (日本語) HomeLibraryWikiLearnGalleryDownloadsSupportForumsBlogs Ask a question Quick access Forums home Browse forums users FAQ Search related threads Remove From My Forums Answered by: Windows Process Activation Service Security Permission Windows Server > Windows Server General Forum Question 0 Sign in to vote Hi, I'm running a Win 2008 R2 DC with IIS 7.5. This is a 2008 R2 DC in a 2003 R2 domain. Also I have Backup Exec and Symantec Endpoint Protection 11.07 running on the box. SEP is having problems displaying reports. IISdisplays anerror Event ID 5153: WAS encountered an error attempting to look up the built in IIS_IUSRS group.I checked and could not find an IIS_IUSRS group. Found a link about IIS 7.5 failing to create user and group on a 2008 IIS 7.5 running in a mixed domain. The link provided a script to run, which I did as .bat. Still getting the same error. If I get the IIS fixed I'm pretty sure my SEP problems will go away. Thanks Monday, October 31, 2011 7:20 PM Reply | Quote Answers 0 Sign in to vote Hi Tom, Sorry for the long delay in getting back to you. I never received a notification that there was a reply on this thread. I found a case with an issue like yours, it seems to point to IE9. Are you running IE9 on this system? If so, try this workaround. Open IE9 to any page. Click on Tools--> Compatiblilty Settings. Enter the IP address of the SEP server in Compatibilty View Settings"ADD THIS WEBSITE" and click ADD. Best, Thomas Marked as answer by TomP215 Monday, November 14, 2011 6:05 PM Monday, November 14, 2011 4:58 PM Reply | Quote All replies 0 Sign in to vote Hello, It will be better to ask them here:http://forums.iis.net/ For SEP, contact Symantec Technical Support. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Con
encountered an error attempting to look up the built in IIS_IUSRS group. by Zubair Alexander · July 10, 2010 Today I was installing Exchange Server 2010 Enterprise on a Windows Server 2008 R2 Domain Controller. Although Microsoft recommends that you install Exchange 2010 on a member server if possible, the environment I was working was very small so the Exchange Server 2010 was installed on a Domain Controller. There was an Exchange Server 2007 already in the same forest. After I installed Exchange Server 2007 SP3 (at least SP2 was required in my scenario) to meet the prerequisites, I was unable to install Exchange Server 2010. During the installation I received the https://social.technet.microsoft.com/Forums/en-US/f05e844d-8223-4790-91a9-e9b4286fc1cf/windows-process-activation-service-security-permission?forum=winservergen following error, indicating IIS was not installed on the Windows Server 2008 R2 server. I installed IIS but still received the same error. The event viewer displayed the following warning: Log Name: System Source: Microsoft-Windows-WAS Date: 7/10/2010 8:54:01 AM Event ID: 5153 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: Exchange.SeattlePro.com Description: The Windows Process Activation Service (WAS) encountered an error attempting to look up the built in IIS_IUSRS group. There may https://blog.zubairalexander.com/event-id-5153-the-windows-process-activation-service-was-encountered-an-error-attempting-to-look-up-the-built-in-iis_iusrs-group/ be problems in viewing and setting security permissions with the IIS_IUSRS group. This happens if the machine has been joined and promoted to be a Domain Controller in a legacy domain. Please see the online help for more information and solutions to this problem. The data field contains the error number. Upon further investigation, I discovered that according to Microsoft KB article 946139, this is by design. Translation: This is a FEATURE, not a BUG. Symptoms You have a Windows Server 2008-based server that is running Internet Information Services (IIS) 7.0. You set the Windows Server 2008-based server as a domain controller of a Windows 2000-based domain or of a Windows Server 2003-based domain. In this scenario, you cannot resolve the built-in IIS accounts, such as the IIS_IUSRS group or the IUSR guest user account. You can see only the raw security identifier (SID) of the built-in IIS accounts. Note: This problem does not occur if you set the Windows Server 2008-based server as a domain controller of a Windows Server 2008-based domain. Reason This problem occurs because the IIS 7.0 built-in accounts specification for Windows Server 2008 does not exist in earlier domains, such as Windows 2000-based domains and Windows Server 2003-based domains. When the IIS 7.0 server is set as a Windows 2000-based domain controller or a Windows Server 200
Web Platform Installer Get Help: Ask a Question in our Forums More Help Resources Blogs Forums Home IIS.NET Forums IIS 7 and Above https://forums.iis.net/t/prev/1182871 Troubleshooting Windows Process Activation Service Security Permissions Windows Process Activation Service http://www.eventid.net/display-eventid-5153-source-WAS-eventno-10595-phase-1.htm Security Permissions [Answered]RSS 5 replies Last post Nov 02, 2011 10:37 AM by tomp215 ‹ Previous Thread|Next Thread › Print Share Twitter Facebook Email Shortcuts Active Threads Unanswered Threads Unresolved Threads Advanced Search Reply tomp215 8 Posts Windows Process Activation Service Security Permissions Oct 31, error id 2011 04:22 PM|tomp215|LINK Hi, I'm running a Win 2008 R2 DC with IIS 7.5. This is a 2008 R2 DC in a 2003 R2 domain. Also I have Backup Exec and Symantec Endpoint Protection 11.07 running on the box. SEP is having problems displaying reports. IIS displays an error Event ID 5153: WAS encountered an error error id 5153 attempting to look up the built in IIS_IUSRS group. I checked and could not find an IIS_IUSRS group. Found a link about IIS 7.5 failing to create user and group on a 2008 IIS 7.5 running in a mixed domain. The link provided a script to run, which I did as .bat. Still getting the same error. If I get the IIS fixed I'm pretty sure my SEP problems will go away. Thanks Reply tomp215 8 Posts Re: Windows Process Activation Service Security Permissions Nov 01, 2011 11:36 AM|tomp215|LINK I'm trying to run the SamUpgradeTask.js script with cscript. Having a little trouble, any suggestions?? Reply Leo Tang - M... 4142 Posts Re: Windows Process Activation Service Security Permissions Nov 01, 2011 10:54 PM|Leo Tang - MSFT|LINK Hi, What is theerror message returned when you run the SamUpgradeTask.js script? Please note: The script must be run on the DC while it is connected to its Primary Domain Controller (PDC). Event ID 5153 — IIS WAS Availability http://techn
Monitor an unlimited number of servers with $49/year With the current low prices for servers and the need for processing power, even a small company may end up with quite a few of them. If ten years ago it was still common to see an entire company using just one server, these days that's no longer the case. New computers are added to the network with the understanding that they will be taken care of by the admins. Keeping an eye on these servers is a tedious, time-consuming process. Even with 5 minutes per server (to check the logs and other parameters), it may take an hour to make sure that everything is ok and no "red lights" are blinking on any of the servers. read more... Event ID: 5153 Source: WAS Source: WAS Type: Warning Description:The Windows Process Activation Service (WAS) encountered an error attempting to look up the built in IIS_IUSRS group. There may be problems in viewing and setting security permissions with the IIS_IUSRS group. This happens if the machine has been joined and promoted to be a Domain Controller in a legacy domain. Please see the online help for more information and solutions to this problem. The data field contains the error number. English: Request a translation of the event description in plain English. Comments: E. Nettekoven T735184 explains the error while ME946139 provides a solution. The latter provides a script to resolve te problem a reboot of the server is required. x 5 Private comment: Subscribers only. See example of private comment Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (1) - More links... Custom search for *****: Google - Bing - Microsoft - Yahoo Feedback: Send comments or solutions - Notify me when updated Printer friendly Subscribe Subscribe to EventID.Net now!Already a subscriber? Login here! Recommend Us Quick Tip Connect to EventID.Net directly from the Microsoft Event Viewer!Instructions Customer services Contact usSupportTerms of Use Help & FAQ Sales FAQEventID.Net FAQ Advertise with us Articles Managing logsRecommended booksNewsle