Event ID 3: IISLOG Unable to Create File (236127)
The information in this article applies to:
- Microsoft Internet Information Server 4.0
This article was previously published under Q236127 We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site: SYMPTOMS
Internet Information Server (IIS) generates the following event log message intermittently in Event Viewer:
Event ID: 3
Source : IISLOG
Description: IIS Logging was unable to create the file C:\WINNT\System32\LogFiles\W3SVC1\ex990628.log. The data is the error.
NOTE: The data in the event message is 5, Access Denied. The file noted in the event message is being created and the log entries are written.
CAUSE
IIS attempted to flush its log cache using the credentials of a user who does not have write access to the log file location.
RESOLUTION
To resolve this problem, see the following Knowledge Base article for hotfix information:
275032 IISLog Event Can't Create Directory Occurs at Startup
WORKAROUND
In order to avoid receiving the errors in the event log, you must give the special group Everyone either Change or Full Control permissions to the log file folder.
MORE INFORMATION
IIS flushes its log cache periodically and when it does, it uses the security context of the currently running thread. If that fails, IIS will generate the event log shown above, and then attempt to write the log using the System account.
| Modification Type: | Minor | Last Reviewed: | 6/22/2005 |
|---|
| Keywords: | kbpending kbprb KB236127 |
|---|
|