| Event Id | 1005 |
| Source | Microsoft-Windows-IIS-IISManager |
| Description | Encountered an error while attempting to retrieve Web Management Service configuration from the registry; Web Management Service startup failed. Please ensure that the registry ACL's for the following registry key, and all subkeys, permit read/write access for the {0} user: "HKLM\Microsoft\SOFTWARE\WebManagement". |
| Event Information | According to Microsoft : Resolution : Check the registry access permissions for the service account The Web Management Service may fail to start if it does not have appropriate registry permissions. To resolve this issue, ensure that the WMSvc identity user has access to the HKLM\SOFTWARE\Microsoft\WebManagement key and all of its subkeys. To see which identity the Web Management Service is running under, follow these steps: Note: To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority. 1.Click Start , click Control Panel , and then click Administrative Tools . 2. Right-click Services and select Run as administrator . 3.Double click Web Management Service . 4. Click the Log On tab. Under Log on as , the service account that WMSvc is using will be displayed. Verify : To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority. To verify that the Web Management service is running: 1.Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator . 2.Type sc query wmsvc , and press ENTER. The Web Management service is running if the state reported for the service is 4 RUNNING . |
| Reference Links | Event ID 1005 from Source Microsoft-Windows-IIS-IISManager |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.