Hello,
I have two IIS server using shared configuration. Shared config file is located on network share.
To connect to the share IIS uses domain account: mydomain\myshareaccount.
The account is not locked/disabled, password is valid.
Everything worked for quite long time until a reboot of both web servers.
After reboot I couldn’t start IIS anymore, because of the error message:
“The Windows Process Activation Service service terminated with the following error:
Access is denied.”
I tried to run Windows Process Activation Service separately, but the same error message.
I run Process Monitor and I see following issue:
High Resolution Date & Time: 2/21/2017 11:35:50.1655989 PM
Event Class: File System
Operation: CreateFile
Result: NAME NOT FOUND
Path: C:\inetpub\temp\appPools\noq1qehh.oli
TID: 8332
Duration: 0.0000103
Desired Access: Read Attributes
Disposition: Open
Options: Open Reparse Point
Attributes: n/a
ShareMode: Read, Write, Delete
AllocationSize: n/a
Impersonating: mydomain\myshareaccount
About 15 errors message that kind appear when I filtered the output in process monitor.
What I don’t understand, why WAS service wants to write in the C:\inetpub\temp\appPools\noq1qehh.oliwith mydomain\myshareaccount? WAS service is running as Local Account. In my case WAS service tries to write tmp files to C:\inetpub\temp\appPools\ with account which is used in IIS for connection to UNC location. Is this correct?
When I go to ACL of C:\inetpub\temp\appPools\noq1qehh.oli only SYSTEM andLocal Administrators group have permission for that file.
Permission for only that file is not inherited from C:\inetpub\temp\appPools wheremydomain\myshareaccount has access. I guess WAS service creates the file and set ACL so onlySYSTEM and Local Administrators have access to.
When I switch both of IIS server to use local configuration everything works just fine, IIS and WAS service are up and running. No Access Denied for C:\inetpub\temp\appPools directory. Temp files are created with the same ACLSYSTEM and Local Administrators.
Does anybody have idea what could be cause of this issue?
Thank you and Regards,
Lukasz