IIS AnonymousUserName Accounts Are Not Created on New Application Center Cluster Members (300932)



The information in this article applies to:

  • Microsoft Application Center 2000

This article was previously published under Q300932

SYMPTOMS

The Internet Guest Account of a cluster controller may not be created on new cluster members when Application Center 2000 is installed on a cluster controller that uses a locally defined Internet Guest Account. If you try to browse to content on a newly added cluster member that does not have the cluster controller's Internet Guest Account in its local accounts database, you receive the following error message:
HTTP 401.1 - Unauthorized: Logon Failed Internet Information Services.

CAUSE

Application Center 2000 does not automatically deploy the cluster controller's Internet Guest Account if it is not named in the expected IUSR_[server name] format. However, Application Center 2000 always deploys the /w3svc/AnonymousUserName value in the metabase. As a result, if a cluster controller uses a locally defined Internet Guest Account that is not named in the expected IUSR_[server name] format, new cluster members fail to create the account, and the client receives the HTTP 401.1 error.

RESOLUTION

Use one of the following methods to work around this problem:
  • Use a domain account as the Internet Guest Account for all Microsoft Internet Information Server (IIS) sites on the cluster controller so that you do not have to create local accounts on the cluster members.
  • Restart the IIS Admin service on all newly created cluster members. The IIS Admin service automatically creates missing AnonymousUserName accounts on startup.For additional information on restarting IIS, click the article number below to view the article in the Microsoft Knowledge Base:

    202013 Internet Information Services 5.0 Command-Line Syntax for Iisreset.exe

STATUS

This behavior is by design.

Modification Type:MajorLast Reviewed:10/22/2002
Keywords:kbprb KB300932