cancel
Showing results for 
Search instead for 
Did you mean: 

Event ID 22, ASP

ANDREY_FYODOROV
Level 6
One more event that keeps on showing in our logs (App log this time)
 
Event Type: Error
Event Source: Active Server Pages
Event Category: None
Event ID: 22
Date:  10/17/2007
Time:  2:56:40 PM
User:  N/A
Computer: TOR1MSEV01
Description:
Failed to impersonate the Anonymous User for ASP Application /LM/W3SVC/1/ROOT/EnterpriseVault.  Global.ASA OnEnd routines will not be executed.
 
 
Is this something I could ignore?
 
Thanks!
4 REPLIES 4

Ian_McShane
Level 3
Hi Andrey,
 
That's an interesting event, the EnterpriseVault virtual directory should not be set to allow anonymous access as it uses IWA to restrict access to the web application.
Has that been turned on at some point by mistake? (Right click the Virtual Directory, choose properties, choose the Directory Security tab, click Edit under Authentication and Access Control)
 
What version of Windows, IIS and Enterprise Vault are you using?
You could also try matching up the time of the event log entry with the corresponding IIS log entry to see which user(s) are causing this event.
 
Cheers,
 
Ian

ANDREY_FYODOROV
Level 6
Thanks, will try to correlate with IIS log.
 
We haven't made any changes. The event appeared on May 28, 2007. That's when we installed this EV server.
 
We are running EV 7 SP1 on W2003 Ent Server SP1.

ANDREY_FYODOROV
Level 6
Just compared against the IIS log. Various users accessing their archived mail using Outlook and Self-installing Extensions are triggering the ASP Event 22.

ANDREY_FYODOROV
Level 6
could this be......
 
we built the OS for EV servers using Sysprep. The IUSR and IWAM user accounts still bear the pre-Sysprep machine name.