Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 954839 - Last Review: June 30, 2008 - Revision: 1.0
Events 4505 and 4506 are logged in the Security log when you turn on the metabase auditing feature in Internet Information Services 6.0
SYMPTOMS
When you turn on the metabase auditing feature in Internet Information Services (IIS) 6.0, the following events are intermittently logged in the Security log.
Event 4505Event Type: Success Audit
Event Source: IIS-METABASE
Event Category: Object Access
Event ID: 4505
Date: date
Time: time
User: domain_name\user_name
Computer: computer_name
Description:
Metabase Set Data.
Primary User Name: user_name
Primary User Domain: domain_name
Primary Logon ID: (0x0,0x73DA0)
Path: /LM
Property ID: 6269
Property Name:
Old Value:
New Value: 4660
Caller PID: 2432
Caller Image Path: \Device\HarddiskVolume7\WINDOWS\system32\mmc.exe
Result: 0x0
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event 4506Event Type: Success Audit
Event Source: IIS-METABASE
Event Category: Object Access
Event ID: 4506
Date: date
Time: time
User: domain_name\user_name
Computer: computer_name
Description:
Metabase Delete Data.
Primary User Name: user_name
Primary User Domain: domain_name
Primary Logon ID: (0x0,0x73DA0)
Path: /LM
Property ID: 6269
Property Name:
Old Value: 4660
Caller PID: 2432
Caller Image Path: \Device\HarddiskVolume7\WINDOWS\system32\mmc.exe
Result: 0x0
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Even though it seems that some data is set instead of deleted, you do not see any changes in IIS 6.0.
RESOLUTION
You can safely ignore these events. These events are logged when you view item properties in IIS Manager.
MORE INFORMATION
For more information about how to turn on the metabase auditing feature in IIS 6.0, click the following article number to view the article in the Microsoft Knowledge Base:
936696Â
(http://kbalertz.com/Feedback.aspx?kbNumber=936696/
)
How to enable the metabase auditing feature in IIS 6.0 on a computer that is running Windows Server 2003 Service Pack 1
APPLIES TO
- Microsoft Internet Information Services 6.0
| kbexpertiseinter kbtshoot KB954839 |
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate
Be the first to leave feedback, to help others about this knowledge base
article.
(Optional) Name
(Optional)
Public URL Or Email
Comments
No
HTML -- Text Only Please