| Event Id | 101 |
| Source | IISADMIN |
| Description | IISADMIN service recreated an account IWAM_<Machine>. For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp. |
| Event Information | It is reported that, if you renamed your IIS servers computer name, then this event will occur. The main reason for this problem is related with IIS user accounts IUSR and IWAM.Here a solution for solving this issue.you need to edit the IIS metabase if you really want them to reflect your machine name. After searching multiple sources (including this one!) I found the best workaround: - Rename the IUSR & IWAM accounts to match your machine name (i.e. "IUSR_NewMachineName") - From a command prompt go to the \Inetpub\Adminscripts folder - Type cscript adsutil.vbs set w3svc/anonymoususername "IUSR_NewMachineName" - Type cscript adsutil.vbs set w3svc/wamusername "IWAM_NewMachineName" - Follow MS Q297989 to get the passwords for IUSR & IWAM. - Enter the new IWAM user name and the password in the Identity tab of the IIS Out-Of-Process Pooled Applications under Component Services\Computers\My Computer\COM+ Applications. - Type IISRESET to restart IIS services. |
| Reference Links | PRB: Configured Identity Is Incorrect for IWAM Account How to set required NTFS permissions and user rights for an IIS 5.0 Web server |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.