Event ID 9005 — IIS Application Host SID Mapping Configuration

Event ID 9005 — IIS Application Host SID Mapping Configuration

Updated: March 24, 2009

Applies To: Windows Server 2008 R2

In Internet Information Services (IIS) 6.0, separate user accounts had to be created for application pools in order to isolate them. In IIS 7.0, mapped application pool SIDs (security identifiers) make this process easier. When a new Web site is created in IIS 7.0, the site receives a new application pool with the same name as the site. The Application Host Helper Service (AppHostSvc) dynamically creates a unique application pool SID based on the application pool name, and the name is mapped to the SID. Web site resources like files and directories can then be granted permissions by using the mapped application pool SID instead of separate user identities. This enables all application pools to run under the same default Network Service account, yet remain isolated.

Event Details

Product: Internet Information Services
ID: 9005
Source: Microsoft-Windows-IIS-APPHOSTSVC
Version: 7.5
Symbolic Name: APPHOSTSVC_SID_ADD_SINGLE_ERROR
Message: The Application Host Helper Service encountered an error while adding the mapping for the application pool name ‘%1’ to its SID. To resolve this issue, please recommit the changes or restart the service. The data field contains the error number.

Resolve
Reapply changes and restart AppHostSvc

When configuration changes do not appear to take effect, possible resolutions include the following:

  • Reapply the changes.
  • Reduce the number of application pools.
  • Stop and restart the Application Host Helper Service (AppHostSvc).

Stop and restart the Application Host Helper Service

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To stop and restart the Application Host Helper Service:

  1. Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. At the command prompt, type net stop apphostsvc.
  3. At the command prompt, type net start apphostsvc.

Verify

If Application Host SID Mapping is not configured correctly, Web sites in the affected application pool will fail to serve pages. For this reason, you can verify the Application Host SID Mapping functionality by performing a test browse.

To perform a test browse:

  1. Choose a Web site or an application that is configured to run in the application pool that you want to verify.
  2. Open up your default browser or required client.
  3. Browse to a page in the Web site or application that you chose in step 1.
  4. The client should display the expected output page. If Application Host SID Mapping is configured correctly, the page will be displayed.

Related Management Information

IIS Application Host SID Mapping Configuration

Internet Information Services (IIS) 7.5

Related:

Event ID 9004 — IIS Application Host SID Mapping Configuration

Event ID 9004 — IIS Application Host SID Mapping Configuration

Updated: March 24, 2009

Applies To: Windows Server 2008 R2

In Internet Information Services (IIS) 6.0, separate user accounts had to be created for application pools in order to isolate them. In IIS 7.0, mapped application pool SIDs (security identifiers) make this process easier. When a new Web site is created in IIS 7.0, the site receives a new application pool with the same name as the site. The Application Host Helper Service (AppHostSvc) dynamically creates a unique application pool SID based on the application pool name, and the name is mapped to the SID. Web site resources like files and directories can then be granted permissions by using the mapped application pool SID instead of separate user identities. This enables all application pools to run under the same default Network Service account, yet remain isolated.

Event Details

Product: Internet Information Services
ID: 9004
Source: Microsoft-Windows-IIS-APPHOSTSVC
Version: 7.5
Symbolic Name: APPHOSTSVC_SID_ADD_BULK_ERROR
Message: The Application Host Helper Service encountered an error while adding multiple mappings for application pool names to their SIDs. To resolve this issue, please recommit the changes and restart the service. The data field contains the error number.

Resolve
Reapply changes and restart AppHostSvc

When configuration changes do not appear to take effect, possible resolutions include the following:

  • Reapply the changes.
  • Reduce the number of application pools.
  • Stop and restart the Application Host Helper Service (AppHostSvc).

Stop and restart the Application Host Helper Service

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To stop and restart the Application Host Helper Service:

  1. Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. At the command prompt, type net stop apphostsvc.
  3. At the command prompt, type net start apphostsvc.

Verify

If Application Host SID Mapping is not configured correctly, Web sites in the affected application pool will fail to serve pages. For this reason, you can verify the Application Host SID Mapping functionality by performing a test browse.

To perform a test browse:

  1. Choose a Web site or an application that is configured to run in the application pool that you want to verify.
  2. Open up your default browser or required client.
  3. Browse to a page in the Web site or application that you chose in step 1.
  4. The client should display the expected output page. If Application Host SID Mapping is configured correctly, the page will be displayed.

Related Management Information

IIS Application Host SID Mapping Configuration

Internet Information Services (IIS) 7.5

Related:

Event ID 9003 — IIS Application Host SID Mapping Configuration

Event ID 9003 — IIS Application Host SID Mapping Configuration

Updated: March 24, 2009

Applies To: Windows Server 2008 R2

In Internet Information Services (IIS) 6.0, separate user accounts had to be created for application pools in order to isolate them. In IIS 7.0, mapped application pool SIDs (security identifiers) make this process easier. When a new Web site is created in IIS 7.0, the site receives a new application pool with the same name as the site. The Application Host Helper Service (AppHostSvc) dynamically creates a unique application pool SID based on the application pool name, and the name is mapped to the SID. Web site resources like files and directories can then be granted permissions by using the mapped application pool SID instead of separate user identities. This enables all application pools to run under the same default Network Service account, yet remain isolated.

Event Details

Product: Internet Information Services
ID: 9003
Source: Microsoft-Windows-IIS-APPHOSTSVC
Version: 7.5
Symbolic Name: APPHOSTSVC_SID_DELETE_ERROR
Message: The Application Host Helper Service encountered an error while removing the mapping for the application pool name ‘%1’ to its SID. To resolve this issue, please recommit the changes or restart the service. The data field contains the error number.

Resolve
Reapply changes and restart AppHostSvc

When configuration changes do not appear to take effect, possible resolutions include the following:

  • Reapply the changes.
  • Reduce the number of application pools.
  • Stop and restart the Application Host Helper Service (AppHostSvc).

Stop and restart the Application Host Helper Service

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To stop and restart the Application Host Helper Service:

  1. Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. At the command prompt, type net stop apphostsvc.
  3. At the command prompt, type net start apphostsvc.

Verify

If Application Host SID Mapping is not configured correctly, Web sites in the affected application pool will fail to serve pages. For this reason, you can verify the Application Host SID Mapping functionality by performing a test browse.

To perform a test browse:

  1. Choose a Web site or an application that is configured to run in the application pool that you want to verify.
  2. Open up your default browser or required client.
  3. Browse to a page in the Web site or application that you chose in step 1.
  4. The client should display the expected output page. If Application Host SID Mapping is configured correctly, the page will be displayed.

Related Management Information

IIS Application Host SID Mapping Configuration

Internet Information Services (IIS) 7.5

Related:

Event ID 9001 — IIS Application Host SID Mapping Configuration

Event ID 9001 — IIS Application Host SID Mapping Configuration

Updated: March 24, 2009

Applies To: Windows Server 2008 R2

In Internet Information Services (IIS) 6.0, separate user accounts had to be created for application pools in order to isolate them. In IIS 7.0, mapped application pool SIDs (security identifiers) make this process easier. When a new Web site is created in IIS 7.0, the site receives a new application pool with the same name as the site. The Application Host Helper Service (AppHostSvc) dynamically creates a unique application pool SID based on the application pool name, and the name is mapped to the SID. Web site resources like files and directories can then be granted permissions by using the mapped application pool SID instead of separate user identities. This enables all application pools to run under the same default Network Service account, yet remain isolated.

Event Details

Product: Internet Information Services
ID: 9001
Source: Microsoft-Windows-IIS-APPHOSTSVC
Version: 7.5
Symbolic Name: APPHOSTSVC_SID_COLLISION
Message: The Application Host Helper Service encountered an error while adding the mapping for the application pool name ‘%1’ to its SID. That particular SID is already mapped to another application pool name, causing a conflict. To resolve this issue, please change the name of this application pool. The data field contains the error number.

Resolve
Change an IIS application pool name

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To change the application pool name:

  1. Click Start, click Control Panel, and then click Administrative Tools.
  2. Right-click Internet Information Services (IIS) Manager and select Run as administrator.
  3. In the Connections pane, expand the server node and click Application Pools.
  4. On the Application Pools page, select the application pool you want to rename.
  5. In the Actions pane, under Edit Application Pool, click Rename, type the new name in the rename text box, and then press ENTER or click outside the rename text box.

Verify

If Application Host SID Mapping is not configured correctly, Web sites in the affected application pool will fail to serve pages. For this reason, you can verify the Application Host SID Mapping functionality by performing a test browse.

To perform a test browse:

  1. Choose a Web site or an application that is configured to run in the application pool that you want to verify.
  2. Open up your default browser or required client.
  3. Browse to a page in the Web site or application that you chose in step 1.
  4. The client should display the expected output page. If Application Host SID Mapping is configured correctly, the page will be displayed.

Related Management Information

IIS Application Host SID Mapping Configuration

Internet Information Services (IIS) 7.5

Related:

Event ID 5194 — IIS Worker Process Dynamic Idle

Event ID 5194 — IIS Worker Process Dynamic Idle

Updated: March 24, 2009

Applies To: Windows Server 2008 R2

The Internet Information Services (IIS) Worker Process Activation Service (WAS) can dynamically adjust the idle time-out of worker processes based on current load. You can specify the maximum number of worker processes that can run concurrently on a Web server. If the maximum number is reached and dynamic idle is enabled, WAS dynamically reduces the idle time-out. This could allow new worker processes to start sooner and prevent the Web server from becoming unresponsive.

Event Details

Product: Internet Information Services
ID: 5194
Source: Microsoft-Windows-WAS
Version: 7.5
Symbolic Name: WAS_LEAVING_DYNAMIC_IDLE_INFO
Message: The dynamic idle load is ‘%1’ percent of the dynamic idle threshold. The Windows Process Activation Service (WAS) will return worker process idle timeouts to their configured settings. Current number of worker processes: ‘%2’, current total commit: ‘%3’ MB, total physical memory: ‘%4’ MB, current physical memory free: ‘%5’ MB.

Resolve

This is a normal condition. No further action is required.

Related Management Information

IIS Worker Process Dynamic Idle

Internet Information Services (IIS) 7.5

Related:

Event ID 5192 — IIS Worker Process Dynamic Idle

Event ID 5192 — IIS Worker Process Dynamic Idle

Updated: March 24, 2009

Applies To: Windows Server 2008 R2

The Internet Information Services (IIS) Worker Process Activation Service (WAS) can dynamically adjust the idle time-out of worker processes based on current load. You can specify the maximum number of worker processes that can run concurrently on a Web server. If the maximum number is reached and dynamic idle is enabled, WAS dynamically reduces the idle time-out. This could allow new worker processes to start sooner and prevent the Web server from becoming unresponsive.

Event Details

Product: Internet Information Services
ID: 5192
Source: Microsoft-Windows-WAS
Version: 7.5
Symbolic Name: WAS_ENTERING_DYNAMIC_IDLE_INFO
Message: The dynamic idle load is ‘%1’ percent of the dynamic idle threshold. The Windows Process Activation Service (WAS) will start to reduce worker process idle timeouts. Current number of worker processes: ‘%2’, current total commit: ‘%3’ MB, total physical memory: ‘%4’ MB, current physical memory free: ‘%5’ MB.

Resolve

This is a normal condition. No further action is required.

Related Management Information

IIS Worker Process Dynamic Idle

Internet Information Services (IIS) 7.5

Related:

Event ID 5185 — IIS Web Site Availability

Event ID 5185 — IIS Web Site Availability

Updated: March 24, 2009

Applies To: Windows Server 2008 R2

Internet Information Services (IIS) Web sites that use HTTP rely on several important IIS components for their availability. The Windows Process Activation Service (WAS), the World Wide Publishing Service (W3SVC), the HTTP service, all must be running correctly. In addition, a properly running application pool must be available for the Web site’s applications. If any of these components is not functioning, the Web site will not be available.

Event Details

Product: Internet Information Services
ID: 5185
Source: Microsoft-Windows-WAS
Version: 7.5
Symbolic Name: WAS_SITE_CREATE_SUCCEEDED
Message: The Windows Process Activation Service recovered from a previous error creating site ‘%1’. See previously logged event(s).

Resolve

This is a normal condition. No further action is required.

Related Management Information

IIS Web Site Availability

Internet Information Services (IIS) 7.5

Related:

Event ID 5183 — IIS HWC Configuration

Event ID 5183 — IIS HWC Configuration

Updated: March 24, 2009

Applies To: Windows Server 2008 R2

Because the Hosted Web Core (HWC) operates independently of the main IIS configuration store, developers must create their own configuration file that follows the design of ApplicationHost.config. HWC configuration requires that there be only one application pool and at least one Web site.

Event Details

Product: Internet Information Services
ID: 5183
Source: Microsoft-Windows-WAS
Version: 7.5
Symbolic Name: WAS_TOO_MANY_APP_POOLS_DEFINED_HOSTABLE_WEB_CORE
Message: Only one application pool is allowed for the hostable web core instance. The data field contains the error number.

Resolve
Define only one application pool

Hosted Web Core (HWC) configuration requires that there be only one application pool. If you have defined more than one application pool in your custom Hosted Web Core configuration file, follow these steps.

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To edit a custom HWC configuration file:

  1. Open your custom configuration file in a text editor.
  2. Find the applicationPools section.
  3. Remove all application pool entries except for one.
  4. Save the file and exit the text editor.

Verify

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To verify that the Hosted Web Core is functioning correctly, follow these steps:

  1. Open Internet Explorer.
  2. Send a request to an application that is running in HWC.
  3. Confirm that the expected page is displayed.
  4. Open the logs for the Web site and make sure 200 OK (request succeeded) is logged for the request that you made. By default, Web site logs are located in the %SystemDrive%\inetpub\logs\LogFiles directory.

Note:  If logging is set to centralized, the log file size will grow over time. The minimum possible (and configurable) log file size is 1 MB.

Related Management Information

IIS HWC Configuration

Internet Information Services (IIS) 7.5

Related: