View Full Version : DCOM IWAM error repaeatedly


JBM
08-09-2006, 11:27 PM
Hi All:
I have reset password for IWAM user many times and reatedly get following
errors.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10004
Date: 8/9/2006
Time: 3:08:17 AM
User: N/A
Computer: FS001
Description:
DCOM got error "Logon failure: unknown user name or bad password. " and was
unable to logon .\IWAM_FS001 in order to run the server:
{3D14228D-FBE1-11D0-995D-00C04FD919C1}

Our Exchange server is being used for relay. Could this acount be doing it.

What should I do. Please advice in detail. Besides ASp.net what other
services use IWAM user.

Could this be the reason the server is being abused.

Many Thanks
JBM

Adrian Grigorof
08-14-2006, 09:51 PM
Did you try running Synciwam.vbs? See also:

http://www.eventid.net/display.asp?eventid=10004&eventno=11&source=DCOM&phase=1

--
Adrian Grigorof
www.eventid.net


"JBM" <JBM@nowhere.com> wrote in message
news:12dko952ff9f0aa@corp.supernews.com...
> Hi All:
> I have reset password for IWAM user many times and reatedly get following
> errors.
>
>
> Event Type: Error
> Event Source: DCOM
> Event Category: None
> Event ID: 10004
> Date: 8/9/2006
> Time: 3:08:17 AM
> User: N/A
> Computer: FS001
> Description:
> DCOM got error "Logon failure: unknown user name or bad password. " and
> was
> unable to logon .\IWAM_FS001 in order to run the server:
> {3D14228D-FBE1-11D0-995D-00C04FD919C1}
>
> Our Exchange server is being used for relay. Could this acount be doing
> it.
>
> What should I do. Please advice in detail. Besides ASp.net what other
> services use IWAM user.
>
> Could this be the reason the server is being abused.
>
> Many Thanks
> JBM
>
>