DOCUMENT:Q268473 04-AUG-2000 [iis] TITLE :Cannot Issue the IISRESET Command with the /timeout:0 Switch PRODUCT :Internet Information Server PROD/VER:winnt:5.0 OPER/SYS: KEYWORDS:kbOSWin2000 ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Internet Information Services version 5.0 ------------------------------------------------------------------------------- SYMPTOMS ======== Internet Information Services (IIS) 5.0 includes a utility named IISRESET that gives you the ability to stop and restart IIS without restarting the server. Issuing this command with the /timeout:0 switch requires not only administrator rights on the Web server, but also the advanced Debug Programs user right. If a user does not have this right, the following error message is returned: Attempting stop... Stop attempt failed. Access denied, you must be an administrator of the remote computer to use this command. Either have your account added to the administrator local group of the remote computer or to the domain administrator global group. CAUSE ===== This behavior is by design. When you issue the /timeout:0 switch effectively, IIS kills the running processes. Killing a process requires the Debug Programs advanced user right. RESOLUTION ========== To add the Debug Programs advanced user right, perform the following steps: 1. In Administrative Tools, open the Local Security Settings Microsoft Management snap-in. 2. Select the Local Policies container, and then select the User Rights Assignment container. In the right window pane, open the Debug Programs user right. 3. Verify that the required user account has the Debug Programs user right. NOTE: As specified in the user interface, if domain-level policy settings are defined, they override local policy settings. If necessary, make this same change to the required user account in the Domain Security Policy snap-in so that it is also in effect at the local server level. Additional query words: iis 5 iisreset /timeout:0 ====================================================================== Keywords : kbOSWin2000 Technology : kbiisSearch kbiis500 Version : winnt:5.0 Issue type : kbprb Solution Type : kbpending ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 2000.