MonitorWare Knowledge Base

All,

Applied all of Microsoft's "critical" patches (Security Updates) to my Win2K server a couple of days ago and since then my network has been up and down. The only error message in the event viewer is id 1054 and 1053 which both relate to the "DHCP/BINL service". Unfortunately, I use my router (Cayman 3220-h) as my DHCP server and not the Win2K DHCP server. Actually, I don't think these messages are related to the network problems. Nevertheless, if anyone has any suggestions I would definitely appreciate them. All signs point to the "critical" patches. HELP!!![/b]

Hi,

I have a similar issue with Windows XP Pro. After installing Microsoft critical patches, the IUSR account is locked out of the machine regardless of the IIS and Users & Groups settings. When attempting to access local web pages in IIS:

The browser reports:
Logon failure: user not allowed to log on to this computer.

The System Log reports:
Date: 8/30/2003
Time: 5:16:43 PM
Type: Warning
User: N/A
Computer: <machinename>
Source: W3SVC
Category: None
Event ID: 100
The server was unable to logon the Windows NT account 'IUSR_<machinename>' due to the following error: Logon failure: user not allowed to log on to this computer. The data is the error code.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp...

I have reinstalled the operating system and all windows updates and the same issues arise.

Did the following troubleshooting:

===============================================
Troubleshooting checklist:
v = correct/success
x = error/failure

===============================================

#Verify TCP/IP Settings
v Ping localhost
v Ping 127.0.0.1
v Ping <machinename>

-------------------------------------------------------------------------------------

#Check Hosts file
v Use default hosts file

-------------------------------------------------------------------------------------

#Create Simple HTML page
v Create simple Default.htm root default page in IIS wwwroot.

-------------------------------------------------------------------------------------

#Check Local Security Policy Settings Troubleshooting

##User Rights Assignments

v Verify that IUSR_<machinename> is not listed in deny access this computer from the network
v Verify that IUSR_<machinename> is not listed in deny log on locally
v Verify that IUSR_<machinename> is listed in access this computer from the network
v Verify that IUSR_<machinename> is listed in log on locally
x Check that default.htm page is viewable. (error/failure)

##Security Options
v Check the setting "Network Access: Let Everyone permissions apply to anonymous users" is disabled (default).
v Enable the above setting for troubleshooting purposes, reboot computer.
x Check that default.htm page is viewable. (error/failure)
v Disable the above setting (default), reboot computer.
Also:
v Check the setting "Network Access: Shares that can be accessed anonymously
v Verify as correct/recommended the current anonymous Shares settings: COMCFG,DFS$

-----------------------------------------------------------------------------------

#IIS Troubleshooting
v Check that anonymous access is enabled. (correct/success)
v Check that IIS is managing password. (correct/success)
x Check that default.htm page is viewable. (error/failure)
v Disable Anonymous access. (correct/success)
v Check that default.htm page is viewable. (correct/success)
v Enable anonymous access. (correct/success)
x Check that default.htm is viewable. (error/failure)
v Disable anonymous access. (correct/success)
v Check that default.htm page is viewable. (correct/success)
v Rename Default.htm to Default.asp (correct/success)
x Check that default.asp is viewable (error/failure)
v Check event logs

-----------------------------------------------------------------------------------

At another's recommendation, deleted the IUSR account in Users & Groups and rebooted the computer so IIS would recreate the account. Rechecked above settings then attempted to access local web pages in IIS - no luck.

Interested to hear what others have done to resolve this...

Regards,

Ken

This is caused by RIS.
After applying an update from MS, it will cause windows2000 server to be seen as small buisness server, and cannot have 2 DHCP servers on the same subnet. So, If the router is acting as DHCP, then the server sees it, and shuts down.
MS has been asked why this is, but no reply has been forthcoming as of yet.
The thing to do here, is disable RIS< and this will in turn, disable the BINL service, causing shutdowns to stop.
Hope this helps ...