Set User Cannot Change Password to true. Setting the password to never expire does not seem to make a difference.

• User is a member of IIS_WPG:
  • http://geekswithblogs.net/EltonStoneman/archive/2008/05/26/the-identity-of-application-pool-esbapppool-is-invalid.aspx
  • http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/f05a7c2b-36b0-4b6e-ac7c-662700081f25.mspx?mfr=true

The AppDomain's identity does not have the correct permissions. Review the IIS permissions documentation for defaults.

There may be problems with the directory permissions for IIS/ASP.NET.

Do the following:

1. Open a command shell (Start > Run > cmd) and navigate to one of the following directories with the {{50727)) varying depending on your OS build:
   • For 64-bit O/S:

     
     C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\
     

2. Run the following command:

   
   aspnet_regiis -ga "NT AUTHORITY\NETWORK SERVICE"
   

3. Run the following command:

   
   aspnet_regiis -ga IUSR_<machinename>
   

aspnet_wp.exe could not be started because the user name and/or password that is supplied in the processModel section of the config file are invalid.

• For more information, see http://support.microsoft.com/kb/315158.

CS0016: Could not write to 
output file 
c:\WINDOWS\Microsoft.NET\
Framework64\v2.0.50727
\Temporary ASP.NET Files
\portal\d71063af\5e3121f8\
App_global.asax.j8jlnnti
.dll-
Access is denied

Verify that TEMP system env. variable:

• The folder exists.
• Network service and maybe the other ASP.NET accounts have full permissions to that folder

No authentication methods were enabled on the Directory Security > Authentication and access control window

See http://support.microsoft.com/kb/248033/en-us.

Re-run:

aspnet_regiis -i

IIS failed. Verify the required user account permissions. If you do not discover a permissions issue, reinstall IIS.

There might be an application pool permissions issue for the Network Service user. For more information, see http://support.microsoft.com/?kbid=842493.

Some NT users get the following 400® message:

If the user is a member of too many NT groups, IIS may have trouble acquiring the user's large request.

• If Integrated Authentication is enabled in IIS and it negotiates Kerberos, it is possible that some users have a large Kerberos ticket that hit request header limits.

It may be a problem with a cookie.

• Run SimpleTest.aspx to verify that cookies are working.
• If cookies are working, verify that the date on the client machine is correct.
  • If the date is too far off, it might think the Portal's cookie already expired, which results in the user remaining on the Login page.

Disable the Recycle worker processing (in minutes) setting in the Portal's Application Pool's Recycling settings tab.

ASP.NET is not functioning properly.

Re-execute the following command:

aspnet_regiis -i

Verify the following:

• The user's machine and the Portal machine must both be in the same domain.
• In Internet Explorer, select Tools > Internet Options > Advanced > Security. Select the Enable Integrated Windows™ Authentication check box
• In Internet Explorer, select Tools > Internet Options > Security zones. Verify that either:
  • User Authentication > Logon is configured properly
  • The Portal is in the correct trusted zone.
• If web.config debug=true does not work, verify that the machine.config deployment retail=true.
• If right after installation, you receive a 500 compilation error, set customErrors=Off in the Web.config file in /Portal/WebApp. This setting disables the custom errors page and helps to narrow in on the problem. If the problem is in the Web.config file, you may be running the Portal against ASP.NET 1.1 and not 2.0:
  1. Verify .NET 2.0 is installed.
  2. Verify ASP.NET 2.0 was registered (Execute: aspnet_regiis.exe /i).
  3. Verify ASP.NET 2.0 is selected under the ASP.NET tab in the Portal virtual directory properties.
     • If no ASP.NET tab exists, you may need to manually register that virtual directory with aspnet_regiis.

Microsoft™ Visual C++ 2005 Redistributable Package (x86) is missing or corrupted.

To the locale specification for the Portal:

<system.web>
        <globalization fileEncoding="utf-8" 
          requestEncoding="utf-8"
             responseEncoding="utf-8" 
          culture="en-US" uiCulture="en-US" />
</system.web>

System.Configuration.ConfigurationErrorsException:
Error creating the Web
Proxy specified in the 'system.net/defaultProxy' 
configuration section. --->
System.DllNotFoundException: Unable to load DLL 
'rasapi32.dll': 
A dynamic link
library (DLL) initialization routine failed. 
(Exception from HRESULT:
0x8007045A) 
atSystem.Net.UnsafeNclNativeMethods.RasHelper.
RasEnumConnections(RASCONN[]
lprasconn, UInt32& lpcb, UInt32& lpcConnections) 
atSystem.Net.
UnsafeNclNativeMethods.RasHelper.GetCurrentConnectoid() 
atSystem.
Net.AutoWebProxyScriptEngine.AutoDetector.Initialize() 
atSystem.
Net.AutoWebProxyScriptEngine.AutoDetector.get
_CurrentAutoDetector() 
at System.Net.AutoWebProxyScriptEngine..ctor
(WebProxy proxy,Boolean useRegistry)
at System.Net.WebProxy.UnsafeUpdateFromRegistry() 
at System.Net.WebProxy..ctor(Boolean 
enableAutoproxy) at
System.Net.Configuration.
DefaultProxySectionInternal..ctor DefaultProxySection
section)
at System.Net.Configuration.
DefaultProxySectionInternal.GetSection()
--- End of inner exception stack trace --- 
atSystem.
Net.Configuration.DefaultProxySectionInternal
.GetSection() 
atSystem.
Net.WebRequest.get_InternalDefaultWebProxy() at
System.Net.HttpWebRequest..ctor(Uri uri, 
ServicePoint servicePoint) at
System.Net.HttpRequestCreator.Create(Uri Uri)at
System.Net.WebRequest.Create(Uri requestUri, 
Boolean useUriBase) 
atSystem.Net.WebRequest.Create
(String requestUriString) at
TeaLeaf.SearchServer.RealSearchServer.RealCommunicate
(String command,
ArrayList args, Int32 timeout)

Web.Config needs the following:

<system.net>
        <defaultProxy>
            <proxy usesystemdefault="false"/>
        </defaultProxy>
    </system.net>

If you are seeing 401.2 errors, verify that Anonymous and Forms authentications are enabled. Verify account for anonymous is IUSR or some other account that has the proper permissions.