Environment
NetIQ Group Policy Guardian 2.0
Resolution
fact
NetIQ Group Policy Guardian 2.0
symptom
Error: 'An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.'
symptom
Attempts to start GPG reporting fail with a 'Catastrophic Error'
symptom
Error: 'Exception Details: System.Runtime.InteropServices.COMException: Catastrophic failure'
cause
There is a known issue on Windows 2000 SP4 domain controllers where the IWAM account does not have the Impersonate a client after authentication privilege.
fix
note
For more information about this issue, see the following Microsoft KB article 824308. "BUG: IWAM Account Is Not Granted the Impersonate Privilege for ASP.NET 1.1 on a Windows 2000 Domain Controller with SP4" http://support.microsoft.com/kb/824308
NetIQ Group Policy Guardian 2.0
symptom
Error: 'An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.'
symptom
Attempts to start GPG reporting fail with a 'Catastrophic Error'
symptom
Error: 'Exception Details: System.Runtime.InteropServices.COMException: Catastrophic failure'
cause
There is a known issue on Windows 2000 SP4 domain controllers where the IWAM account does not have the Impersonate a client after authentication privilege.
fix
To manually assign Impersonate a client after authentication to the IWAM account:
- Click Start |Programs |Administrative Tools |Domain Controller Security Policy.
- Click Security Settings.
- Click Local Policies, and then click User Rights Assignment.
- In the right pane, double-click Impersonate a client after authentication.
- In the Security Policy Setting window, click Define these policy settings.
- Click Add, and then click Browse.
- In the Select Users or Groups window, select the IWAM account, click Add, and then click OK.
- Click OK, and then click OK.
- If you want to enforce an update of computer policy, at a command prompt, type secedit /refreshpolicy machine_policy /enforce
- At a command prompt, type iisreset.
note
For more information about this issue, see the following Microsoft KB article 824308. "BUG: IWAM Account Is Not Granted the Impersonate Privilege for ASP.NET 1.1 on a Windows 2000 Domain Controller with SP4" http://support.microsoft.com/kb/824308
Additional Information
Formerly known as NETIQKB49596