Sharepoint -- "Service Unavaliable"

Hello.

Having what I assume to be a permissions problem with sharepoint and IIS. I used one of the knowledge base article http://support.microsoft.com/default.aspx?scid=kb;EN-US;823552 and a very similar one under technet - followed it to the letter and still having the same issue.

What DOES seem to work is switching the appl pool to use the local system account but due to security reasons I'd rather not use that service. I was using the network service up until a few days ago but for whatever reason, stopped working. I've checked the IIS_WPG group and the STS_WPG group -- they both have network service and the two necessary IIS accounts within.

Any ideas?

yonlinemanghn
Tue Dec 30 14:32:07 CST 2003

Hello
You are getting the Service Unavailable error because the sharepoint
application pool cannot be started/run under the Network service account.
The reason why that app pool needs to be run under Local system is because
of the fact that the Microsoft SharePoint Administration site needs to run
as someone with permissions to create and modify registry keys as well as
run system commands. The Network Service account doesn't have that kind of
authority.
There is an article on this issue, but it is not made public yet. Check for
http://support.microsoft.com/default.aspx?scid=kb;en-us;833699 in a few
days/weeks.

Thanks,
Yogita Manghnani
Microsoft Developer Support
Internet Information Server

*********************************************************************
>>Please do not send email directly to this alias. This is an online
account name for newsgroup participation only.<<

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

© 2003 Microsoft Corporation. All rights reserved.
*********************************************************************

jriley
Tue Dec 30 14:56:13 CST 2003

Which accounts should I use (which would you recommend / best practice)? IWAM_<machine name> or some other? I'm guessing I'll have to restart all the services associated with it (iisreset and cycle the sql engine) -- am I wrong?

Ultimately, this will serve as a central point for our users for things like phone lists, common templates, etc and we are on a larger network (10 domains I beleive) so I plan on restricting it to just us with no annoymous access what so ever, just has to be reliable :-)

yonlinemanghn
Tue Dec 30 17:20:36 CST 2003

Hello
Unfortunately, the Sharepoint app pool will run properly only under the
Local System account. I realize that you may have concerns regd running a
process under this identity, but as of now, this is the only option. For
any other application pool you can use any local or domain account as the
identity as long as it is also a member of the IIS_WPG group. When you
change the identity of an application pool, IIS will automatically restart.

Thanks,
Yogita Manghnani
Microsoft Developer Support
Internet Information Server

*********************************************************************
>>Please do not send email directly to this alias. This is an online
account name for newsgroup participation only.<<

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

© 2003 Microsoft Corporation. All rights reserved.
*********************************************************************

jriley
Wed Dec 31 07:36:09 CST 2003

Thank you, I really appreciate the info. I shall switch them over.