IIS Anonymous access. Unknown user name or bad password

[norbert.ranjith]

#143749

I donno whether this will fit into this topic or not. But i faced this issue yesterday and my boss needs an explanation. I am already trying :google: . But may use the expertise of you guys in this forum.

LOG:

Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 100
Date: 8/10/2009
Time: 9:13:19 AM
User: N/A
Computer: ABC
Description:
The server was unable to logon the Windows NT account ‘DomainUSER’ due to the following error: Logon failure: unknown user name or bad password. The data is the error code.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2e 05 00 00 ….

ISSUE:

IIS Anonymous access for a Virtual directory in the server ABC has configured under the “DomainUSER” to run.

I was going thru the IIS settings to fix another security scan result. Maybe i clicked “OK” button at some point in the IIS Config box after checking the Integrated Windows Authentication Check box.

This Virtual directory settings has not been changed ever since i remember. But suddenly it said the Password provided is wrong and started to Lock the DomainUSER account. When i changed the ID in the IIS Virtual Directory to another Domain ID, it started working fine.

Log:

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 8/10/2009
Time: 9:13:19 AM
User: NT AUTHORITYSYSTEM
Computer: ABC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: USER
Domain: Domain
Logon Type: 2
Logon Process: IIS
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: ABC
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Question:

How can the password be wrong if it has been there for a long time?

Norbert

[Author]

Posts