This may manifest in different ways depending on the exact version and build of Galileo. Some common symptoms:
- An error occurs setting up the Web Service identities in the Web Service Configuration Wizard.
- Buttons are unresponsive and cannot be clicked or selected.
- Unable to add scans or scan targets, or create scan policies.
- Unable to preview reports in the web interface.
- A generic "Callback failed due to an internal server error" message.
While not all of these symptoms are exclusive to this problem, if you experience any of these issues with Galileo, the solution below should be checked and acted on if necessary.
These behaviors may result from the IIS_IUSRS group not having been granted required privileges on the IIS host. (IIS_IUSRS is a service group in Active Directory used to grant permissions to IIS worker threads; see Microsoft's Understanding Built-In User and Group Accounts in IIS 7 document for detailed information.)
- On the Web Service host, open the Local Security Policy MMC snap-in.
- Browse to Local Policies > User Rights Assignment.
- Make certain that the IIS_IUSRS group has been given the "Log on as a batch job" and "Impersonate a client after authentication" privileges.
Note that both of these privileges may be (and often are) controlled by Group Policy in well-managed AD environments. Adjustments to the effective policy applied to the Galileo Web Service host may be necessary, as changes to local policy may be prevented or overridden by Group Policy.