DCPROMO does not retain permissions on some IIS folders

Article translations Article translations
Article ID: 332097 - View products that this article applies to.
This article was previously published under Q332097
Expand all | Collapse all

SYMPTOMS

When you promote a Microsoft Windows Server 2003 member server to a domain controller, if Internet Information Services (IIS) is installed on the server, you may see the following symptoms:
  • No compressed files are stored in the temporary folder (also known as the cache directory), even though a client that supports HTTP compression has requested them.
  • No files are cached in the ASP Compiled Templates folder.
For security reasons, IIS should not be installed on domain controllers.

CAUSE

The operation that promotes a member server to a domain controller (DCPromo.exe) resets permissions on some folders. The Access Control Lists (ACLs) for three folders are not set correctly during this operation.

MORE INFORMATION

You may also see the following in your application event log:

Source : Active Server Pages

Event ID: 5

Error: The Template Persistent Cache initialization failed for Application Pool" AppPoolName: because of the following error: Could not create a Disk Cache Sub-directory for the Application Pool. The data may have additional error codes:

If you view permissions on the following folders, you will see that the IIS_WPG and the NT AUTHORITY\NETWORK SERVICE groups do not have permissions on these folders:
  • systemroot\Help\IISHelp\Common
  • systemroot\System32\Inetsrv\ASP Compiled Templates
  • systemroot\IIS Temporary Compressed Files

RESOLUTION

Manually set permissions on the folders

  1. Click Start, click Windows Explorer, double-click My Computer, double-click the system drive (this is typically drive C), and then double-click WINDOWS or WINNT.
  2. Double-click Help, double-click iisHelp, right-click common, and then click Sharing and Security.
  3. Click Security, click Add, type IIS_WPG, and then click OK.
  4. With IIS_WPG selected, click to select the following check boxes, and then click OK:
    • Read and Execute
    • List Folder Contents
    • Read
  5. Open the Sharing and Security dialog box for the systemroot\system32\inetsrv\ASP Compiled Templates folder, and then grant Full Control to the IIS_WPG group.
  6. Repeat step 5 for the systemroot\IIS Temporary Compressed Files folder.
To manually set the permission for NT AUTHORITY\NETWORK SERVICE, follow these steps:
  1. Click Start, click Run, type %systemroot%\Help\iisHelp, and then click OK.
  2. Right-click the Common folder, and then click Sharing and Security.
  3. On the Security tab, click Add, type NETWORK SERVICE, and then click OK.
  4. Click NETWORK SERVICE, click to select the following check boxes under Allow, and then click OK:
    • Read and Execute
    • List Folder Contents
    • Read
  5. Click Start, click Run, type %systemroot%\system32\inetsrv, and then click OK.
  6. Right-click the ASP Compiled Templates folder, and then click Sharing and Security.
  7. On the Security tab, click Add, type NETWORK SERVICE, and then click OK.
  8. Click NETWORK SERVICE, click to select the Full Control check box under Allow, and then click OK
  9. Click Start, click Run, type %systemroot%, and then click OK.
  10. Right-click the IIS Temporary Compressed folder, and then click Sharing and Security.
  11. On the Security tab, click Add, type NETWORK SERVICE, and then click OK.
  12. Click NETWORK SERVICE, click to select the Full Control check box under Allow, and then click OK
After you have completed these steps, restart the IIS Admin Service. To do this, follow these steps:
  1. Click Start, click Run, type Services.msc, and then click OK.
  2. Right-click IIS Admin, and then click Restart.

STATUS

Microsoft has confirmed that this is a problem in Microsoft Windows Server 2003.

REFERENCES

For more information about HTTP Compression and ASP Template caching, see the product documentation. To view this documentation, visit the following Microsoft Web sites:
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/5bce429d-c4a7-4f9e-a619-5972497b932a.mspx
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/a9171159-c801-4705-b8a9-9eecf58a892f.mspx
You can also access the product documentation through IIS Manager. For more information about how to access this Help feature, click the following article number to view the article in the Microsoft Knowledge Base:
815127 How to access IIS 6.0 Help documentation

Properties

Article ID: 332097 - Last Review: December 3, 2007 - Revision: 7.4
APPLIES TO
  • Microsoft Internet Information Server 1.01
  • Microsoft Internet Information Services 6.0
Keywords: 
kbprb kbpending KB332097

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com