| Event Id | 5163 |
| Source | Microsoft-Windows-WAS |
| Description | Windows Process Activation Service (WAS) was unable to determine the security identifier (SID) for the worker process identity in application pool %1. WAS will be unable to provide the correct identity to listener adapters, which may prevent the worker process or processes in the application pool from processing requests for this protocol. To resolve this issue, change the worker process identity to a new identity and then change it back to the previous identity. The data field contains the error number. |
| Event Information | According to Microsoft : Cause : This event is logged when Windows Process Activation Service (WAS) was unable to determine the security identifier (SID) for the worker process identity in application pool. Resolution : Reset the application pool identity The Windows Process Activation Service (WAS) requires a valid security identifier (SID) for each application pool worker process so that it can communicate it to the listener adapters. Without the correct SID, the worker process will be unable to process requests. To reset the worker process identity, perform these steps. To perform these procedures, you must have membership in Administrators , or you must have been delegated the appropriate authority. Note the current identity type 1.Click Start , click Control Panel , and then click Administrative Tools . 2.Right-click Internet Information Services (IIS) Manager and select Run as administrator . 3.Highlight the Application Pools folder located underneath the computer name in the navigation pane. 4.Right-click the application pool and select Advanced Settings... 5.Under Process Model , note the Identity . 6.Click … to the right of the identity name to verify the identity type. Note : There are two types of identity for application pools: Built-in and Custom . The built-in accounts are NetworkService, LocalService , and LocalSystem . The default (recommended) is NetworkService . Temporarily change the identity type 1.Temporarily change the identity type to a value different from the current one. 2.Click OK to accept the changes. 3.Click OK to close the Advanced Settings dialog box. Stop and restart the application pool 1.Right-click the application pool and select Stop . 2.Right-click the application pool and select Start . Restore the original identity 1.Right-click the application pool and select Advanced Settings... 2.Set the identity back to the original identity, and make sure username and password are correct if you are using a custom identity. 3.Click OK to accept the changes. Stop and restart the application pool 1.Right-click the application pool and select Stop . 2.Right-click the application pool and select Start . Verify : To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority. To verify that an application pool has started: 1.Click Start , click Control Panel , and then click Administrative Tools . 2.Right-click Internet Information Services (IIS) Manager and select Run as administrator . 3.In the Connections pane, expand the server node and select Application Pools . 4.In Features View , the Status column for the application pool will indicate Started if the application pool has started. |
| Reference Links | Event ID 5163 from Microsoft-Windows-WAS |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.