| Event Id | 2602 |
| Source | MCMS |
| Description | An unrecognized request was received by the CMS ISAPI Filter. The request was mapped to the CMS read-only resource cache virtual directory but the URL format did not correspond to a CMS Resource. The CMS ISAPI Filter did not process the request and allowed IIS to handle it instead. The requested URL was /NR/rdonlyres/.... |
| Event Information | According To Microsoft This event is written whenever a request arrives that seems to address an MCMS managed resource that cannot be found in the MCMS repository. All requests going to /NR/rdonlyres are assumed to be MCMS managed objects. This event is created for all URLs with this format that do not identify MCMS managed objects. This can be caused by: 1. Requests to SiteDeployment Reports which are located in the MCMS disk cache but are not managed objects. 2. Requests to static objects placed in this location 3. Requests to deleted resources. This can be caused if the posting containing such resources are cached somewhere and requested. Even if the posting is deleted on the MCMS server such cached instances can still be in some Proxy or search engine caches. If background processing already removed the resource then MCMS does not know that these have existed before and if such a cached item is requested in the browser the embedded images are requested from MCMS. Because these items no longer exist, the 2602 event is written. Resolution: This event is written whenever a request arrives that seems to address an MCMS managed resource that cannot be found in the MCMS repository. All requests going to /NR/rdonlyres are assumed to be MCMS managed objects. This event is created for all URLs with this format that do not identify MCMS managed objects. |
| Reference Links | Event Id: 2602 Event Source: MCMS |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.