Windows Server 2012 R2 / IIS 8.5 / net.tcp
Trying to replace 2008 R2 in my environment by setting up 2012 R2 servers and copying app folder to new server, create IIS site and create each WCF app under the site. Once ready, test and replace server by renaming hosts.
The WCF time for a single function goes from ~2 seconds to load to ~10 seconds or more after only renaming the host.
Using localsystem for each pool being used. Renaming the 2008 R2 server doesn't show to be effected by a rename. I tried other built-in users with no change.
IIS console shows correct hostname, searched registry for any cached (lsa has cached value that shows correct hostname).
I have 30+ 2012 R2 servers running the same, only difference is they were not renamed after setup.
Try to increase worker process for the designated application pool. Following is an example for your DefaultAppPool. But you might need to change it for your own app pool which isolate your wcf service.
Related
I've set up a Windows Server 2019 box with IIS, PHP 8 and SQL Drivers, and SQL Server 2019 Express. I created a test PHP application and corresponding application pool, then set up a test database. When trying to connect using sqlsrv_connect, I get the following error:
Login failed for user 'NT AUTHORITY\IUSR'.
(There is more there in the SQL error but it's just the raw error array output and Stack Overflow doesn't like it.)
Now, I believe I have everything configured correctly to use the application pool identity instead of NT AUTHORITY\IUSR. I copied the setup from another older (Server 2012) web server. Screenshots of my setup:
Anonymous Authentication using App pool identity in IIS
App pool identity added on database in SQL Server
Am I missing a setting somewhere, or does Server 2019 handle application pool identities differently than server 2012? I've tried following instructions like on this excellent SO page:
IIS AppPool to SQL Server permissions (adding NT AUTHORITY\IUSR)
But it's like the server doesn't care that I've told it to use the application pool.
UPDATE EDIT: MYSTERY SOLVED
Apologies all, this was a case of extreme user error. I put the "test" directory under wwwroot, ala c:\inetpub\wwwroot\test. I was accessing it as www.domain.com/test, when what I needed to do was set it to run as test.domain.com. It was running under the wwwroot app pool (which in this case was using IUSR) because that is how I was accessing it. Thank you everyone who helped me troubleshoot this!
Apologies all; this was a case of extreme user error.
I put the test directory under wwwroot, i.e., c:\inetpub\wwwroot\test. I was accessing it as www.domain.com/test, when what I needed to do was set it to run as test.domain.com. It was running under the wwwroot application pool (which, in this case, was using IUSR) because that is how I was accessing it.
Thank you everyone who helped me troubleshoot this!
I have a SQL server that belongs to a domain and an application server that is stand alone. Of course it has the right ROUTES to reach the sql server.
when I use a test.udl file to test the connection, a sql login would work right away. But if we try a windows integrated account (servername\username) it takes about 25 seconds to connect.
Unfortunately I have MSMQ running on that server and application that has to take these messages and send it to the SQL server. Because of the delay (I think) MSMQ keeps all its messages.
Do you know what could be the reason for this delay only on WIndows integrated logins?
Note that, I have windows firewall disabled on these servers, No Antivirus.
SQL Server 2008 R2.
Application Server - Windows 2008 R2
Thanks for your time,
RM
I am running through the procedure to create a Windows 2012 Server, and I need Remote Access enabled. However, when I run through the installation process, it tells me I need to install IIS. Well I don't want IIS because I will have an Apache server running, but I have no choice. In Windows Server 2008 there was no need to install IIS when configuring Remote Access ( which used to be a part of Network Policy and Access Services ).
What can I do if I need Remote Access, need Apache, and don't want IIS?
To solve this I simply deleted the default website created with IIS, restarted Apache and it works fine.
I'm trying to test a migration of moving a BizTalk SQL Server from one server to another. Here are the details.
Currently it was all on a single server in a dev environment, BizTalk SQL, SSO and BizTalk runtime all on one server. It is a Windows 2008 R2 server with SQL Server 2008 R2.
What I want to do is split out the SSO Master secret server and BizTalk databases to a Windows Server 2012/SQL Server 2012 setup. So far I got SSO all setup on the new SQL server. I configured just the SSO portion on that server and all went well.
I then unconfigured the existing BizTalk Runtime and then went to configure again, using the new Windows/SQL Server/SSO in the configuration process.
All goes well up to the point where it tries to configure the BizTalk runtime. That being said all the database are created, SSODB, BizTalkMessageBoxDb, all of them. But when it goes to configure BizTalk Runtime, it hangs for a while and several of the following errors show up in both of the Server's logs:
Could not access the SSO database. If this condition persists, the SSO service will go offline.
Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding..
SQL Error code: 0xFFFFFFFE
It shows up in the SQL/SSO servers logs first, then the Runtime server a few seconds later. Eventually the configuration times out and fails. I believe it's permissions related, but I can't seem to figure out what it would be.
Questions:
what permissions do I need to review?
would the fact that the new server is Windows 2012/SQL 2012 while the runtime server is Windows 2008 be an issue?
is there any way I can get more details on this error?
Edit to add both DTCPing and DTCTester pass with flying colours and I can connect to SQL via SSMS from the server. Firewall has been completely disabled for now in order to eliminate that as well.
How were your service accounts configured in the first environment? Typically a single DEV environment with everything on one box can be done by using a local account on that server. If you now split out your SSO onto another server (it doesn't matter if it's W2K12 instead of W2K8), you are going to have to switch your service account(s) and groups for BizTalk to Domain accounts.
In a multicomputer environment, BizTalk Server supports only domain groups and domain service accounts. Domain groups include Domain Local groups (not recommended), Global groups, and Universal groups. Built-in accounts such as NT AUTHORITY\LOCAL SERVICE, NT AUTHORITY\NETWORK SERVICE, NT AUTHORITY\SERVICE, NT AUTHORITY\SYSTEM, and Everyone are not supported if you want to configure BTS in a multicomputer environment.
Make sure your SSO is running as a domain account, and a member of an SSO Administrators domain group - and ensure this domain account/group combo is configured for the SSO system on the SQL server (instead of local accounts):
After that the SSO system you join from the BizTalk Server before configuring the runtime on BizTalk Server usually needs to be configured with the same domain service account for SSO:
Each time when i start my server , i need to go to IIS and then need to start the each web application manually. i want to start all web application automatic as my server starts. You will wonder why I m shuts down my server again and again. But it is test server. so that only. anyway. which service have to make automatic? It is Windows Server 2003. using IIS V6.0
Check if the iis service is set to start automatically. For this go to the Services MMC and ensure that the World Wide Web Publishing Service is set to start automatically. If there are no problem with the sites, they should start automatically. Also check here: http://www.eggheadcafe.com/software/aspnet/30451499/how-to-set-default-web-s.aspx
IIS(Microsoft web server) server are mostly installed in windows operating system(OS) ,we want to just start a service only,if iis server not installed then easily download and install in windows.
For More Reference