Unable to provision / unprovision Web Application on a server : Access to the path 'Global\Microsoft.SharePoint.SPIis ProvisioningLock' is denied.


I'm currently facing an issue with the provisionning of web application in a farm : SharePoint 2013 SP1 With September 2014 CU - Windows Server 2012 R2.

My farm is made of 3 servers :

  • A SQL server
  • An application server hosting the central administration
  • A front end server

When I create a new web application (with standard parameters in Central Administration), everything seems to work fine.

However, IIS site and application pool are only created on the application server.

Looking in ULS logs on Front End Server, I found this error :

The Execute method of job definition Microsoft.SharePoint.Administration.SPWebApplicationProvisioningJobDefinition (ID {GUID}) threw an exception. More information is included below.  Access to the path 'Global\Microsoft.SharePoint.SPIisProvisioningLock' is denied.

In the timer jobs history, I found the same error on the timer job "Provisioning Web Application (Name of web application)"...

Creating the web application using PowerShell does the same, IIS site and application pool are only created on the server where command is executed.

I already try to restart servers, make IISReset, and try to detach front end server from the farm and attach it again. Running the config wizard create missing IIS site and application pool on servers but it still don't work for new web application.

Can you help me find out the missing permission ?


November 13th, 2014 1:29pm

login with the account that created the web app, Then try to delete

Also try 


Do you face this issue with just 1 web application?

How many servers in farm and how many accounts used(service accounts)

what is permission of current account on SP servers and DB servers

Free Windows Admin Tool Kit Click here and download it now
November 13th, 2014 1:31pm

I face the issue with all web applications.

I described the servers in farm on my first post.

Right now, i'm using 4 service accounts :

  • SP_ADMIN : installation account (i'm logged with it)

dbo on Config DB

dbo on admin DB

  • SP_FARM : farm account

public/ SharePoint_Shell_Access/ SPDataAccess/ WSSContent application Pools on central admin DB

db_accessadmin / public/ SharePoint_Shell_Access/ SPDataAccess/ WSS Content application Pools on config DB

  • SP_POOL : application services account

public / WSS Content Application Pool on central admin DB

public / WSS Content Application Pool on config DB

  • SP_WPOOL : web application account

November 13th, 2014 1:46pm


Did you find solution for this issue. we are facing the exact same issue and looking for a solution.

Thanks in advance

Free Windows Admin Tool Kit Click here and download it now
September 8th, 2015 1:43am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics