Unexpected Error and HTTP error code 404 in the IIS logs

Products

• Endpoint Protection

Issue/Introduction

When accessing the SEPM Reporting site through a browser it displays "Unexpected Error"

Symptoms
1. Logging into the SEPM Console shows "Unable to communicate with Reporting Component".

2. Php logging does not show any errors
3. http log shows 404 error when log visits is enabled in IIS

 

Cause

The Symantec Web Server in IIS is using the Default Application Pool which runs under the Network Service account. The Network Service account does not have permission for the following security policies - Adjust memory Quotas for a Process and Replace a process-level token.

Resolution

1. Click Start> Run.
2. Type gpedit.msc.
3. Expand Computer Configuration> Windows Settings> Security Settings> Local Policies.
4. Select User Rights Assignment.
5. Double-click on Adjust memory Quotas for a Process and Replace a process-level token and verify that the "NETWORK SERVICE" is listed.
   Note: If the "Add User or Group..." option is disabled, it is possible that this policy is locked by a domain GPO (group policy object) which will require an assessment of domain GPOs.
    
6. Restart the "IIS Admin" service to update any changes.