Website shows 503 Service Unavailable and application pool crashing: An account failed to log on

Created:

2016-11-16 12:59:54 UTC

Modified:

2017-08-16 17:37:11 UTC

5

Was this article helpful?


Have more questions?

Submit a request

Website shows 503 Service Unavailable and application pool crashing: An account failed to log on

Applicable to:

  • Plesk for Windows

Symptoms

The application pool serving the domain crashes each time you try to access the domain after that site shows 503 Service Unavailable . In the Event Viewer, you see the following errors:

Application pool domain.tld(domain)(4.0)(pool) has been disabled. Windows Process Activation Service (WAS) encountered a failure when it started a worker process to serve the application pool.

The identity of application pool domain.tld(domain)(4.0)(pool) is invalid. The user name or password that is specified for the identity may be incorrect, or the user may not have batch logon rights. If the identity is not corrected, the application pool will be disabled when the application pool receives its first request. If batch logon rights are causing the problem, the identity in the IIS configuration store must be changed after rights have been granted before Windows Process Activation Service (WAS) can retry the logon. If the identity remains invalid after the first request for the application pool is processed, the application pool will be disabled. The data field contains the error number.

Application pool domain.tld(domain)(4.0)(pool) has been disabled. Windows Process Activation Service (WAS) did not create a worker process to serve the application pool because the application pool identity is invalid.

In the Event Viewer > Security log following Audit Failure can be found:

An account failed to log on.
Subject:
Security ID: SYSTEM
Account Name: WIN3$
Account Domain: WORKGROUP
Logon ID: 0x3e7
Logon Type: 4
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: IWAM_plesk(default)
Account Domain:
Failure Information:
Failure Reason: Unknown user name or bad password.

Resolution

To resolve the issue execute the following command:

"%plesk_cli%\\repair.exe" --regenerate-web-server-users-password

If that doesn't help, perform the following steps:

  1. Check which application pool serves the reported domain:

    Go to IIS > Sites > domain.tld > Basic settings

  2. Check the Identity that runs that application pool:

    IIS > Application Pools > <name of the application pool> > Advanced settings > Process model: Identity

  3. Reset the password for the account that runs the required application pool:

    Open the Server management console > Configuration > Local Users and groups Right-click <username> > Set password

  4. Synchronize the new settings for the Identity of the application pool:

    IIS > Application Pools > <name of the application pool> > Advanced settings > Process model: Identity > "Browse" button (...) > "Set" button > Enter Identity account and set the same password from step #3.

  5. Recycle the application pool.

  6. Execute %plesk_cli%\\repair.exe --syncronize-impersonation-storage .

Have more questions? Submit a request
Please sign in to leave a comment.