You are currently offline, waiting for your internet to reconnect

Events 4505 and 4506 are logged in the Security log when you turn on the metabase auditing feature in Internet Information Services 6.0

SYMPTOMS
When you turn on the metabase auditing feature in Internet Information Services (IIS) 6.0, the following events are intermittently logged in the Security log.

Event 4505

Event Type: Success Audit
Event Source: IIS-METABASE
Event Category: Object Access
Event ID: 4505
Date: date
Time: time
User: domain_name\user_name
Computer: computer_name
Description:
Metabase Set Data.

Primary User Name: user_name
Primary User Domain: domain_name
Primary Logon ID: (0x0,0x73DA0)
Path: /LM
Property ID: 6269
Property Name:
Old Value:
New Value: 4660
Caller PID: 2432
Caller Image Path: \Device\HarddiskVolume7\WINDOWS\system32\mmc.exe
Result: 0x0

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event 4506

Event Type: Success Audit
Event Source: IIS-METABASE
Event Category: Object Access
Event ID: 4506
Date: date
Time: time
User: domain_name\user_name
Computer: computer_name
Description:
Metabase Delete Data.

Primary User Name: user_name
Primary User Domain: domain_name
Primary Logon ID: (0x0,0x73DA0)
Path: /LM
Property ID: 6269
Property Name:
Old Value: 4660
Caller PID: 2432
Caller Image Path: \Device\HarddiskVolume7\WINDOWS\system32\mmc.exe
Result: 0x0

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Even though it seems that some data is set instead of deleted, you do not see any changes in IIS 6.0.
RESOLUTION
You can safely ignore these events. These events are logged when you view item properties in IIS Manager.
MORE INFORMATION
For more information about how to turn on the metabase auditing feature in IIS 6.0, click the following article number to view the article in the Microsoft Knowledge Base:
936696 How to enable the metabase auditing feature in IIS 6.0 on a computer that is running Windows Server 2003 Service Pack 1
event log by design
Properties

Article ID: 954839 - Last Review: 06/30/2008 16:39:42 - Revision: 1.0

Microsoft Internet Information Services 6.0

  • kbexpertiseinter kbtshoot KB954839
Feedback
m.content='true';document.getElementsByTagName('head')[0].appendChild(m);" onload="var m=document.createElement('meta');m.name='ms.dqp0';m.content='false';document.getElementsByTagName('head')[0].appendChild(m);" src="http://c1.microsoft.com/c.gif?">