So, I have three servers in my moss farm. A database server and two front-end servers...
On server 1 I am able to access my web application just fine and the services are running fine. However, on server 2 I am unable to start the Web Application service; I receive a error message on the screen stating "Check the server event logs for additional error information"...
When I check the event logs on server I see this error...
Error executing service instance (un)provisioning job. Service instance: "Windows SharePoint Services Web Application" (id "2d8886db-4b63-4841-bf48-4bd48d9a0c89) "1387""
Any thoughts..?
I would guess that either you have something up with IIS on Server 2 or that there's a deeper MOSS problem on Server 2. First thing is to figure out which web application is causing the problem.
Under Central Administration > Application Management > Web Application List. When you click on a web application name you'll see the ID for it in the query string. (i.e. /applications.aspx?WebApplicationId=ID-here)
Find the matching ID and you know that's the web application having issues. Check to make sure there's nothing wrong with that web application in IIS on Server 2.
If everything looks fine, I would remove server 2 from the farm and re-add to provision. If that doesn't work, remove server 2 from farm, reinstall MOSS, and then add back to farm.
I would check that the service account used for the web application has got the nessecary rights.
Go to central administration
then open "operations" > "service accounts"
click web application
Select the web application or check what users are used for the different web applications. Then check if they have the nessecary rights. I cant remember if it is nessecary for them to be local administrators on the server, but at least i would try making them local administrators. Then check if they have the nessecary rights on the SQL server. I think that db creator and writer is the only nessecary roles.
But i generally up the rights until it works, then remove what i think is unnessecary rights afterwards.
Related
The problem is that I cannot create new web app on SharePoint 2016, it takes a too long time, loading infinitely with hours until I end it, and the central admin gives 404 not found
First I restarted and made sure the SQL server is started and the farm admin account has correct roles all passes, but with no luck. Finally, I decided to start the configuration wizard but I found this error
WEBCONFIG.ACCSRV.XML, does not have element "configuration/configSections/sectionGroup[#name='SharePoint']" or it is invalid.
I have compared this file with its pair on one server, which it works found they are the same content. Any help, please.
The solution is as follows:
1-Delete All unused Web Apps
2-Delete Some unused IIS sites which are used the ports of SharePoint (port 80,...)
3-clear SharePoint recycle bin
4-confirm all SharePoint service and IIs App pools are running " as I found Service Application App Pool was stopped"
5-Delete the additional trust provider
The main reason is the user was trying to install SharePoint add-in so he changes the trust and changes the port of default site of SharePoint and central admin seeking to change them to HTTPS and then try to create many web apps which have been created with the corrupted web. configs and those changes make all this hassle
I hope this Question may help others
In our current Production Setup, we have setup SSRS and have been able to successfully use the SSRS reports in our .NET Web Application since years. We have used Impersonation in Web.Config (there might be other solutions available, we had to go with this) as shown below.
<identity impersonate="true" userName="domainname/username" password="password"></identity>
This solution worked well becuase our Active Di
rectory and SSRS server are located in the same Network / domain.
Now, as part of our Azure migration, we have migrated our SSRS server to an Azure VM. and we are able to view the reports using Report Server Manager within the VM. Now, when we access the Web Application (App Service - Web App), we are getting the following error. Below is the updated impersonation attribute that we have used.
<identity impersonate="true" userName="username#ouremailaddressdomainname.onmicrosoft.com" password="password"></identity>
"Could not create Windows user token from the credentials specified in the config file. Error from the operating system 'The user name or password is incorrect"
Obviously, this is because of the fact that we don't have a Active Directory domain setup in Azure. Below are my questions.
Can we utilize the users available in the default Directory that gets created on Azure?
If yes, how do I specify the impersonization?
Thanks,
Prawin
With your planned setup you cannot use identity impersonation. This is because the AppService Web Apps do run in an isolated sand-boxed environment which cannot be part of a Windows Domain.
You have couple of options:
Change the reporting server to use mixed mode Authentication and create local for the SQL Server login and user with appropriate permissions. Then configure your reporting application to provide these SQL Server credentials
Move your Web Application to same VM (will not require Domain environment) as your Reporting Server (or just the part which deals with the reports)
Move your application to a separate VM and utilize the Azure Active Directory Domain Services to make the VMs part of same domain (an overkill IMO)
I would vote for the first option, as it requires least changes and leverages PaaS services (App Service). Everything else is overkill or just an abuse of the cloud platform.
We are running into an issue when we try and setup a new SSRS Application within Central Administration.
I am able to set the Name, App Pool, Configurable App Pool Account, Database Server, Database Authentication, but unable to set the Web Application Association.
The first time I setup the Application it allows me to select the Service Application Sites. When I return back to the Properties, Above the Web Application Association I get this message:
"There are no web applications available to associate with this sql server reporting services server application."
I am suck and cant seem to get this resolved. Has anyone came across this issue before?
You have to approach this in a different way; instead of configuring the associated Web Applications within the Service App. Config, you change the Service Application Associations (Central Admin > Application management > Service Applications > Configure Service Application Associations)
Once there, click on the Application Proxy Group that you're using - in my case, this was 'default'.
That will then pop open a window - "Configure Service Application Associations". Simply untick your old SSRS Service Application and tick the new one.
While it doesn't solve your exact issue... A combination of this and another proxy group might do what you want.
I have the following configuration for a web site:
Two Web front-ends (e.g. machine names: WFE1 & WFE2) 1 SQ
One SQL Server Database cluster (e.g. machine name: DBCluster)
All machines are in the same domain (e.g. MyDomain) running Windows 2008 R2 Enterprise and SQL Server 2008 R2.
I am in the process of deploying a web application that uses the Application Pool Identity. I have named the pool MyWebApp, which translates to the name, [IIS APPPOOL\MyWebApp]. When I try adding this user to SQL Server I get an error:
Windows NT user or group 'IIS APPPOOL\MyWebApp' not found. Check the name again.
The script that I have used to create the account in SQL Server is:
CREATE LOGIN [IIS APPPOOL\MyWebApp]
FROM WINDOWS WITH DEFAULT_DATABASE=[MyDatabase], DEFAULT_LANGUAGE=[us_english]
GO
I imagine the problem is occuring because the IIS account is a local account which is not visible to the SQL Server box.
Can someone please shed some light on how this problem can be resolved? Is using a domain account my only option or can I still get the application pool accounts to work?
I imagine the problem is occuring because the IIS account is a local account which is not visible to the SQL Server box.
That's exactly the problem. The IIS AppPool account only exists on the web server. If you were able to add this account to SQL Server, you would be authorizing an IIS AppPool that is running on the same machine as SQL Server. (I suspect it might still fail.)
The most secure solution would probably be to do as you say - create an account on the domain, give that account appropriate permissions on the database, and run the AppPool using that account's credentials.
However, if you'd still like to do it, you need to authorize the computer that the AppPool is running on - ie, DOMAINNAME\ComputerName$ (note the $ at the end).
Take a look at this article for more information (specifically, the section titled Accessing the Network).
I think that's a bad idea, however, because it authorizes any program running as NetworkService to access the database - not just your web applications.
I'm trying to deploy from a teamcity server to my iis server but I get unauthorized when I use an IIS Manager user set up in IIS. If I use a Windows account it works just fine. Am I missing something?
I thought it was enough to create an IIS Manager User in ISS, or do I have to add that user to the domain or server I'm trying to deploy to?
In the Management Service Delegation I have added two rules, it could probably be combined into one. The first rule is for contentPath and iisApp and the second is for createApp. Both rules are run as an administrator user. I have added that all users (*) are allowed to execute the rule.
Is it something else I need to enable on the target server for it to work with IIS Manager Users?
I get the following message in my event viewer:
IISWMSVC_AUTHORIZATION_SERVER_NOT_ALLOWED
Only Windows Administrators are allowed to connect using a server connection.
Other users should use the 'Connect To Site or Application' task to be able to connect.
Process:WMSvc
Ok, I've been looking for an answer for some time and couldn't find it... but of course I figure it out myself as soon as I post the question here. The answer to my problem was that I have to add the IIS Manager User to the site which I want to deploy to. So if I selected the sites and then opened up the "IIS Manager Permissions" and added my user it all started working just as expected.