Event Type: Warning
Event Source: W3SVC-WP
Event Category: None
Event ID: 2266
Description:
The account that the current worker process is running under does not have SeTcbPrivilege privilege, the anonymous password sync feature and the Digest authentication feature are disabled.
From a newsgroup post: "SeTcbPrivilege is equivalent to "Act as part of the operation system". This error means that one of your application pools is running as an account that does not have this right. On Exchange, the DefaultAppPool and the ExchangeMobileBrowseApplicationPool both run under the well known account Network Service, while the ExchangeApplicationPool runs under Local System. Both accounts should have this right by default. It is likely that the identity that an application pool is running under is not one of these two. To check, open Internet Services Manager, and browse until you see Application Pools. Pull up properties of each of these listed and check the account on the identity tab. If it’s not the ones listed above then change it".
From a newsgroup post: "The account that the current worker process is running under, does not have the “SeTcbPrivilege” privilege; the anonymous password sync feature and the Digest authentication feature are disabled. This can be caused by some entries in the metabase that are incorrect or by an incorrect identity setting.
1. First, check to make sure the Default Application pool in IIS is using the correct Security Account to logon by following these steps:
A. Go to Start, Programs, Administrative Tools and double click on Internet Information Services Manager.
B. Expand your server name.
C. Expand Application Pools.
D. Right click on the DefaultAppPool and go to Properties.
E. Click on the Identity tab and make sure the radio button "Predefined" is marked and the account listed in the drop down box is "Network Service". If it is not, change it and stop and start IIS, then check the event logs for the error. If it is, go to step 2.
2. Go to the “C:\Windows\System32\Inetsrv” directory. Right click on the “metabase.xml” file and click on Edit. This will open the file in Notepad.
A. Search for "AnonymousPasswordSync". Set any instance you find of this to “False”.
B. Search for "UseDigestSSP". For any instance you find of this set it to “True”. Save the event logs and clear them, then reboot the server and check to see if the Event ID 2266 error reappears.
Note: To be able to open the “metabase.xml” in notepad and be able to save the changes, you will need to open Start/Administrative Tools/Internet Information Services (IIS) Manager then right click on the server name and select Properties. Check the box for Enable Direct Metabase Edit and then click on OK. After you are finished making any changes to the metabase I would recommend that you go back and uncheck the setting. Also, I would suggest before making any changes to the metabase that while you are in the IIS MMC that you right click on the server and select All Task/Backup/Restore Configuration and make a backup of the metabase before opening it in Notepad".