Event 5021- The Identity of Application Pool LSGroupExpAppPool is Invalid

by Jamie Schwinn on June 8, 2009

I ran across an issue deploying an OCS 2007 R2 Standard Edition Server today. Web Component validation failed and attempts to browse to the GroupExpansion or Abs virtual directories results in a HTTP Error 503. The service is unavailable. Upon further investigation, the LSGroupExpAppPool application pool in IIS was disabled. The application pool would become disabled as soon as IIS received a request for any application running under the pool. When this occured, the following event was logged:

Event ID: 5021

Source: Windows Process Activation Service (WAS)

The identity of application pool LSGroupExpAppPool is invalid. The user name or password that is specified for the identity may be incorrect, or the user may not have batch logon rights. If the identity is not corrected, the application pool will be disabled when the application pool receives its first request. If batch logon rights are causing the problem, the identity in the IIS configuration store must be changed after rights have been granted before Windows Process Activation Service (WAS) can retry the logon. If the identity remains invalid after the first request for the application pool is processed, the application pool will be disabled. The data field contains the error number.

Turned out that the issue was caused by a Group Policy that was conflicting with the rights applied by the OCS installation to the ‘Log on as a batch job’ and ‘Log on as a service’ user rights in the Local Security Policy on the OCS server.

The fix is to ensure that the RTC Service and RTCComponentService accounts have the ‘Log on as a batch job’ and ‘Log on as a service’ user rights on the OCS server. This right can be found in Local Security Policy > Computer Configuration > Windows Settings > Local Policies > User Rights Assignment. Either remove the conflicting Group Policy and fix the Local Policy or add the rights to the Group Policy.

Be Sociable, Share!

{ 3 comments }

DrRez June 9, 2009 at 7:22 pm

Thanks for documenting this!

Garry Williams October 14, 2009 at 12:48 pm

Thank you thank you thank you!

vaditch March 4, 2010 at 4:06 pm

Jamie, you saved me from being completely mad about this issue :)
Thanks a lot!

Comments on this entry are closed.

Previous post:

Next post: