Hello, I have the first FTP installed on a Windows 2008 server IIS 7 and each night I am getting an error: Alert Description Source: EFTP02.domain Event Description: Insufficient privileges doing IIS ftp site Discovery. Module needs to have Administrator privileges Error: 0x80070005 Details: Access is denied. One or more workflows were affected by this. Workflow name: Microsoft.Windows.InternetInformationServices.2008.DiscoverAllFTPSites Instance name: IIS FTP Server Instance ID: {11C07EFD-7981-7516-B332-F28071FD2CFC} Management group: SCOM-MED Any change from Windows Server 2003? and/or IIS 6.0? Any additional permissions ro add??? Thanks,DomSystem Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Please read the guide for the IIS management pack. You will need to associate grouped run-as-accounts to the servers based on the credentials that will work on each server.Microsoft Corporation

Hello, The RunAs account for the "Privileged Monitoring Account" is set by default to "Local System" which is part of the Local Administrators, isn't it ? Page 9: === Privileged Monitoring Run As profile, configured by default to use the Local System account. The following tables identify the management pack elements that are configured to use the Privileged Monitoring Run As profile. These management pack tasks cannot be run using a low-privilege account === Is it this "These management pack tasks cannot be run using a low-privilege account" which is blocking the process? as the Local System used in the RunAs account is not sufficient anymore to proceed and I will need to add the svcMOMAction in the "Privileged Monitoring Run As profile" and also on all servers...???? The Class in error is "IIS FTP Site Discovery" which is listed on the same page as "Discoveries Configured to Use the Privileged Monitoring Account Run As Profile" Is the Group Run-As-Account the "Connected Management Group Account"? which will be in this case the SVCMOMAction account defined as the Default Action Account. If it is this account effectively it is not on all servers yet... as it was needed previously to IIS 7 apparently.!!! === "This profile determines which credentials are used to test connectivity between tiered management groups. If no credentials are provided for a given system, then the Default Action Account is used." === I am very confused between the two document OM2007_MP_IIS.doc and IIS 7 Management Pack Guide.doc joined on the link http://www.microsoft.com/downloads/en/details.aspx?FamilyID=d351bca8-182b-4223-8c9e-627e184ba02b&displaylang=en So from you said I will need to create groups of IIS 7 Servers (or use the "IIS 7 Computer Group" or IIS 7 Server Role Instance group" ??? ) to use the svcMOMAction instead of the Local System... but I could not find this clearly define in the documentation except the comment "These management pack tasks cannot be run using a low-privilege account"... which group "IIS 7 Computer Group" or "IIS 7 Server Role Instance group" should be use in the "Priviledged Monitoring" Run As Profile? Both groups are available in the drop dwon list on the "Priviledged Monitoring" Run As Profile. Also the svcMOMAction defined as Action Account is not listed in the drop down on the "Priviledged Monitoring" Run As Profile???? So I need to create a new account for this Monitoring? Also why this is showing up only on 1 and only server using II7 ... I have 145 servers in IIS 7 ... what is the other factor creating the issue...? Thanks, Dom System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Hi, Regarding this error, I also think you need to check the action account, please also refer to: Failed to perform Web Site disovery http://social.technet.microsoft.com/Forums/en-US/operationsmanagergeneral/thread/1ea438e4-cde6-4609-b96a-dd3f85caef0f/ Hope this helps. Thanks. Nicholas Li - MSFT Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.