An event ID 15006 error occurs and logging fails while IIS 6.0 is logging (832980)

SYMPTOMS

While Microsoft Internet Information Services (IIS) 6.0 is logging, the following event message is logged in the system log: Event Type: Error
Event Source: HTTP
Event Category: None
Event ID: 15006
Description: Owner of the log file or directory FileName or DirectoryName is invalid. This could be because another user has already created the log file or the directory. When this problem occurs, no data is logged.

CAUSE

This problem occurs because ownership of the file or of the directory that is identified in the system event message has been changed from the default group. By default, the group is the Administrators group.

RESOLUTION

To resolve this problem, apply the correct permissions to the log file that is mentioned in the event log message:

In Microsoft Windows Explorer, locate the directory that is referenced in the event log message. By default, the location is %SystemRoot%\System32\LogFiles\.
Right-click the directory, and then click Properties.
Click the Security tab, and then click Advanced.
Click the Owner tab.
In the Change owner to list, select the Administrators group.

If you do not see the Administrators group, click Other Users or Groups, type ComputerName\administrators, and then click OK.

Note ComputerName is a placeholder for the name of your computer.
Click to select the Replace owner on subcontainers and objects check box, and then click OK two times.

MORE INFORMATION

For additional information about IIS logging, click the following article number to view the article in the Microsoft Knowledge Base:

814870 IIS 6.0 log management documentation

For additional information about custom HTTP error messages, click the following article number to view the article in the Microsoft Knowledge Base:

814869 Custom error messages in IIS 6.0