Event ID 9000 and Event ID 9006 are logged when you restart the Application Host Helper Service on Windows Server 2008


When you enable an Internet Information Services (IIS) shared configuration on a server that is running Windows Server 2008, and then you restart the computer or the Application Host Helper Service, the following events are written to the event log:


This problem occurs because the Application Host Helper Service is not assigned the SeImpersonatePrivilege user right by default in Windows Server 2008.


To have us work around this problem for you, go to the "Fix it for me" section. If you prefer to work around this problem yourself, go to the "Let me fix it myself" section.

Fix it for me

To work around this problem automatically, click the Fix it button or link. Then click Run in the File Download dialog box, and follow the steps in the Fix it wizard.

  • This wizard may be in English only. However, the automatic fix also works for other language versions of Windows.
  • If you are not on the computer that has the problem, save the Fix it solution to a flash drive or a CD and then run it on the computer that has the problem.

Then, go to the "Did this fix the problem?" section.

Let me fix it myself

To work around this problem, follow these steps:
  1. Open an administrative command prompt.
  2. At the command prompt, run the following commands.
    net stop apphostsvc
    sc privs apphostsvc SeChangeNotifyPrivilege/SeTcbPrivilege/SeImpersonatePrivilege
    net start apphostsvc

Did this fix the problem?

  • Check whether the problem is fixed. If the problem is fixed, you are finished with this section. If the problem is not fixed, you can contact support.
  • We would appreciate your feedback. To provide feedback or to report any issues with this solution, please leave a comment on the "Fix it for me" blog or send us an email message.


This problem is fixed in Internet Information Services 7.5. IIS 7.5 is included in Windows Server 2008 R2.

More Information

Steps to reproduce the problem

  1. Create a user who can access the share that will be used for the IIS shared configuration.
  2. Create the file share. This share will be used to store the IIS shared configuration.
  3. Set the permissions on the share that you created in step 2. Grant the following permissions to the user who you created in step 1:
    • NTFS permissions
    • Full Control permissions to the file share
  4. Locate Administrative Tools, and then click Internet Information Services (IIS) Manager.

  5. In the navigation pane, click the server name node.
  6. Double-click the Shared Configuration icon.

  7. On the Shared Configuration page, click Export Configuration in the Actions pane.

    • The Export Configuration dialog box appears.
    • This action exports the configuration files from the local computer to another location.

  8. In the Physical path box, type the path of the file share that you created in step 2.

  9. Click Connect As.
  10. Type the user name and the password for the appropriate user account. This is the account that has access to the share that hosts the shared configuration that was created in step 1.
    Note This account will be used to access the share. You should use a restricted Active Directory account that is not the domain administrator.
  11. Click OK.

  12. In the Export Configuration dialog box, type a password that will be used to protect the encryption keys, and then click OK.

  13. On the Shared Configuration page, click to select the Enable shared configuration check box.

  14. Type the physical path, the user account, and the password that you entered previously.
  15. In the Actions pane, click Apply.

  16. In the Encryption Keys Password dialog box, type the encryption key password that you set earlier, and then click OK.

  17. In the Shared Configuration dialog box, click OK.

  18. Click OK.
  19. Type the following commands at a command prompt to restart Application Host Helper Service.

    net stop apphostsvc
    net start apphostsvc
  20. View the event log.