Home | Site Map | How To | Windows Vista | Case Studies | Articles | Forums | Services | Donations | Careers | About Us | Contact Us|

Event ID 529 - Logon Failure

Cannot access OWA with error 401

Symptoms: After changing the IUSR_servername’s password, you may have the following issues.

1. If a visitor tries to browse the site anonymously, he may receive 401.1 message. 
2. OWA Users may not be able to access their emails with 401 errors.
3. The Event Viewer may have the Event ID 529 logged as below:

Logon Failure:
Reason: Unknown user name or bad password
User Name: IUSR_SERVER
Logon Type: 8
Logon Process: OWA
Authentication Package: Negotiate
Workstation Name: Servername
Caller User Name: UserName
Caller Domain: DomainName
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 5768
Transited Services: XXXX
Source Network Address: XXXX
Source Port: XXXX

 

Resolutions:  

1. Reset the IUSR password in the SAM account and in the Security of Web Site.

2. Create a new IUSR and password.

3. If you have multiple sites, you may want to edit the MetaBase. Here is procedure:

1) At a command prompt and change the directory to C:\inetpub\adminscripts directory. 

2) Enter the following command:
cscript adsutil.vbs find anonymoususerpass

3) It display:

Microsoft (R) Windows Script Host Version 5.6

Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.

 Property anonymoususerpass found at:

  W3SVC

  MSFTPSVC

  SmtpSvc

 4) To delete the password entry use the following syntax:
cscript adsutil.vbs delete anonymoususerpass W3SVC\1\root

5) After changing the IUSR password on the SAM. Do

cscript adsutil.vbs set anonymoususerpass W3SVC\passwordgoeshere

6) You may do the same on all scripts.

Related Topics

Event ID 539 - Logon Failure: Account locked out

Windows Logon Types

Event ID 529 - Logon Failure
Symptom: There is similar Event ID 529 logged in the Event Viewer...