Voltar
-
Título
Error "HTTP Error 503 The service is unavailable" when launching the Manager console -
Descrição
When trying to launch the KACE Desktop Authority Manager console the error below is displayed:"HTTP Error 503. The service is unavailable" -
Causa
Check on the system:- Open Internet Information Services (IIS) Manager
- Navigate to and highlight Default Web Site
- Under Actions | Browse Web Site | click “Browse *:80 (http)”
- It should show the default IIS screen load. If not, then there is an issue with your Default Web Site that requires further investigation.
- If the IIS screen does load for the Default Web Site then proceed to the next steps.
- Next, try the same test for the “DesktopAuthorityConsole” under the Default Web Site.
- Navigate to and highlight “DesktopAuthorityConsole”
- Under Actions | Browse Web Site | click “Browse *:80 (http)”
- If the HTTP Error 503 displays here, test the settings to see what is causing the error.
- Under Actions click Basic Settings, and then click Test Settings.
You may receive an error similar to:
Authentication: Pass-through authentication (DaAPPPool:……)Authentication: User credentials are invalid (C:\Program Files…..)These errors state that the Desktop Authority Application Pool identity has a bad username or more likely an incorrect password.This can happen if the password was recently changed for the account shown and the Application Pool credentials have not been updated.NOTE: If your environment is running McAfee Anti-Virus check the event log for IIS Error 2280 relating to HipIISEngineStub.dll.
-
Resolução
To update the Application Pool Identity:
- In the Internet Information Services (IIS) Manager, Navigate to and highlight Application Pools.
- On the right select DaAppPool.
- Under Actions | Edit Application Pool | Click on Advanced settings…
- Under Process Model select Identity.
- Click the browse button (…) next to the account name.
- Click Set…
- Set the new/updated credentials (Domain\Username).
- Press OK.
- Press OK again.
- Select DaAppPool.
- Press the Start button under Action | Application Pool Tasks.
- Exit the Internet Information Services (IIS) Manager.
- Launch Desktop Authority Manager.
NOTES:
A. If access is still not available to Desktop Authority Manager, verify that the credentials being used for DaAppPool are listed under the local security policy "Log on as a batch job".On Windows 2008 Server:1. Navigate to Start | All Programs | Administrative Tools |Local Security Policy2. Navigate to |Security Settings | Local Policies | User Rights Assignment3. Make changes to properties of policy "Log on as a batch job"4. Add the DA admin service accountB. If changes can't be made and options are greyed out, it is being set by group policy.
1. You can verify what group policy is setting this by going to a cmd prompt:2. Type: gpresult /v > c:\gpresult.txt3. Navigate to C:\ and open gpresult.txt file4. Perform a search for "batch". This will identify the GPO that has "BatchLogonRight" set.5. Proceed to use GPMC tool to add or modify this GPO.IIS Error 2280 follow the KB from Mcafee.