|
|
Question : Musy resync Iwam account every day to access .asp pages
|
|
I must resync the IWAM account every morning so two sections of our intranet site are available to users. Once I resync all is fine. The access settings are set to low. Should I give this account local admin rights? Thanks!
|
Answer : Musy resync Iwam account every day to access .asp pages
|
|
NO NO NO NO :-) Bad for security.
Best guess is you have a policy that is removing the "Log on as batch job" right for the IWAM account. Running synciwam makes COM+ reset the password for COM+ packages when this happens COM+ temporarily adds the 'Log on as batch job' right for accounts that are set as an identity for COM+ packages. This lasts until the next policy update.....
Check for a domain or group policy that removes the IWAM account from that policy right and change the policy to 'not defined'.
Although in retrospect, are the sections that can't be accessed running in Low Isolation (In process?) If so replace IWAM with System in my statements above.... :-)
Dave Dietz
|
|
|
|