Service unavailable error

Symptoms: When trying to start the Sentinel web page, you get the error: "Service Unavailable”.

Cause: This may occur if the server running Microsoft Internet Information Services (IIS) 6.0 is also a domain controller. The problem occurs because the Application pool is using the NT Authority\Network Service account, and the account does not have permission to access the required folders.

Resolution: Manually set permissions on the folders for the IIS_WPG group, and then set permissions on the folders for the NT Authority\Network Service account, as follows:

  1. Start Windows Explorer, and then open the folder %systemroot%\Help\iisHelp.
  2. In the right pane, right click the Common folder, and click Sharing and Security.
  3. Click the Security tab, click Add, type IIS_WPG, and click OK.
  4. With IIS_WPG selected, select the following checkboxes under the Allow column, and click OK:
  5. Repeat the previous step with NETWORK SERVICE instead of IIS_WPG.
  6. Open the folder %systemroot%\system32\inetsrv. In the right pane, right click the ASP Compiled Templates folder, and click Sharing and Security.
  7. Click the Security tab, click the IIS_WPG group, and select the Full Control checkbox under the Allow column. Click OK.
  8. Repeat the previous step with NETWORK SERVICE instead of IIS_WPG.
  9. Open the folder %systemroot%. In the right pane, right click the IIS Temporary Compressed folder, and click Sharing and Security.
  10. Click the Security tab, click the IIS_WPG group, and select the Full Control checkbox under the Allow column. Click OK.
  11. Repeat the previous step with NETWORK SERVICE instead of IIS_WPG.
  12. Restart the IIS Admin service from the Services snap-in or from the Computer Management snap-in.