SharePoint adding, then removing Network Service to local groups

After upgrading our two server farm to SharePoint 2010, SP2, April 2014 CU, we've noticed activity in our event log when the Timer Service restarts daily and when FIM syncs run. It looks like SharePoint is adding the Network Service account to
the local groups IIS_IUSRS and WSS_WPG, then removing it a little later on.
Does anyone know why this happens? Is it expected activity or a bug with the version we are running?
Thanks in advance for your time- Rob

Hi Rob,
According to your description, my understanding is that you want to know why SharePoint adds and removes the Network Service account to local groups.
Per the thread below, it seems like it is an internal SharePoint process and SharePoint adds this user as a test to validate whether it has the rights necessary to add users to local groups.
More reference:
http://social.technet.microsoft.com/Forums/en-US/1d451db9-fc73-4b1a-a532-7e89be2888ee/sharepoint-automatically-adding-network-service-account-to-the-iisusers-group?forum=sharepointadminprevious
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Similar Messages

Adding previously removed person back to a group ...

I removed a person from a group chat but now wish to put them back in. However when I try to add them to that specific group their name doesn't show up. I can add them to any other group chat besides the one I removed them from before. How do I go about adding a previously removed person back to the chat that I removed them from?

Use the Move tool and drag a corner. Be sure Constrain Proportions is turned in the options bar, or else hold down Shift while you drag if it isn't.

Is there a Short cut Key for adding or removing contacts to or from Groups in Address Book

I'm just curious if there happens to be a Short-cut for either adding contacts to a Group and/or removing them from Groups as well? Seems extremely inefficient to not have this options available. Any help or suggestions would be greatly appreciated.

You can look at these extensions:
*Show Parent Folder: https://addons.mozilla.org/firefox/addon/7372
*Go Parent Folder: https://addons.mozilla.org/firefox/addon/7377

Errer message while adding a computer account to a local group in Group Policy Preferences...

Hi all;
Suppose I want to add a computer account to Event Log Reader on local computers by using Group Policy Preferences. Look at the following figure:
But after selecting the desired computer account and clicking OK, the following error message appears:
Any ideas?
Thanks
Please VOTE as HELPFUL if the post helps you and remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

> But after selecting the desired computer account and clicking OK, the
> following error message appears:
Couldn't repro - worked in my domain for both a builtin group and a new one.
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-:

A member was added or deleted to a security-enabled local group. (4732 and 4733)

Hi Team,
We are getting below alerts continuously. it is specifying that user is adding and removing from security group. But it is happening automatically and we've checked no one is performing such operation. And we read on some site it happened on domain controller
but also our share point farm server is not on domain controller. Please find the alert below and suggest what we should do so that we'll not get this alert again. Thanks in advance.
A member was added to a security-enabled local group.
Subject:
Security ID:
POSTEN\s-sharep_farm
Account Name:
S-ShareP_Farm
Account Domain:
POSTEN
Logon ID:
0x8a121
Member:
Security ID:
NETWORK SERVICE
Account Name:
Group:
Security ID:
BUILTIN\IIS_IUSRS
Group Name:
IIS_IUSRS
Group Domain:
Builtin
Additional Information:
Privileges

Hi Kamal,
Per my knowledge, SharePoint does not have the function to audit the changes in domain groups.
What is “From” email address of the alerts?
Please check if you have configured Windows System Resource Manager to send e-mail notifications when an event is logged firstly.
https://technet.microsoft.com/en-us/library/cc732728.aspx
And it seems that the System Center Operations Manager(SCOM) can set the alert for auditing the changes to the local group membership.
Please also check if you have installed SCOM and set rule to send the alerts in SCOM.
http://blogs.technet.com/b/nzdse/archive/2009/11/10/audit-alert-scenarios-system-center-operations-manager-opsmgr-2007-r2.aspx
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Error 5: Access Denied can not start the DHCP Client service on Local Computer.

Ran into this error problem with both the DHCP and BFE service. Neither will start and both give me the same error code 5 access denied.
Found this little nugget below:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp
Right click and choose Permissions. There should be the following:
System = Full Control
Local Service = Read
Network Service = Read
Local Admin = Full Control
Local Users = Read
Dhcp = Read with special permissions
No problem adding the missing Local Service and Network Service. How does one add Dhcp? Is there a way to create this because under permissions there is no way to add this or search it up. Is there a NetSH reset command that will add this in for me?
The Netlogon service was not running and to get the Netlogon service going I ran NetSH int ip reset and it started to work. The other services were not running either and I was hoping they would after resetting IP
Any ideas on to fix this problem? Also, the user turned off the laptop when it was doing updates. Still I do not think it would have created this headache.
TIA
Spammer Hammer

Hi,
Was your issue resolved?
If no, please reply and tell us the current situation in order to provide further help.
Karen Hu
TechNet Community Support

Service Host : Local System ( No Network ) is it infected?

so i was wondering if anyone else has that in their task manger under processes.
currently i asked my friend and he said he has Service Host : Local System. but it didn't not had ( No Network ) on it, also i have
Service Host : Local System ( No Restricted ) and Service Host : Local System ( No Impersonation ). do you guys have it ? is this normal?
so i reinstalled windows 8 then i checked if it gone but it is still there, so i was worried and i came here for help.
what i think caused these problems is program called Ultrasurf.
+ i also checked event viewer and i got these warnings.
Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x70188B2DEAC1. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the
network address (DHCP) server.
The DSM service was delayed by 22 seconds for a driver query/download/install on device 'USB\VID_045E&PID_0745\5&37BFF9DD&0&1'
A connection to the Windows Update service could not be established.
A connection to the Windows Metadata and Internet Services (WMIS) could not be established.
+ i also got these errors
The system cannot find the file specified. (Exception from HRESULT: 0x80070002) at TaskScheduler.ITaskFolder.DeleteTask(String Name, Int32 flags)
at HPMetrics.ScheduleTask.DeleteTask(String TaskName)
A problem prevented Customer Experience Improvement Program data from being sent to Microsoft, (Error 80070005).
Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x70188B2DEAC8. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the
network address (DHCP) server.
Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x70188B2DEAC1. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the
network address (DHCP) server.
Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0xA0481C09AAC1. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the
network address (DHCP) server.
EVERYONE IS UNIQUE

Hi,
According to your description, in my opinion, all the events in your task manager were works properly. I coudn't find anything unormal through your screenshot. Serivce host works to manage system service, while there is different type of service. Therefore,
you could find multiple Service Host with different suffixes.
However, account to your event log error, you may suffering network connection problem, isn't it? Your computer seems couldn't achieve IP adress from DHCP server. Please contact with your network admin for further assistance with your network problem.
Roger Lu
TechNet Community Support

When starting the AMDS it just says "the apple mobile device service on local computer started then stopped. Some services stop automatically if they are not in use by other services or programs."... help?

when trying to fix the ipod syncing/recognition by starting the AMD (apple mobile device) in admin tools section on my computer it came up with the message in the question aboce (the apple mobile device service on local computer started then stopped. Some services stop automatically if they are not in use by other services or programs.)
i have restarted my comp etc and reinstalled itunes... recurrent issue.
note - i wiped my ipod before this issue occurred, does this affect the problem?

I would start with
Removing and reinstalling iTunes, QuickTime, and other software components for Windows Vista or Windows 7
or
Removing and Reinstalling iTunes, QuickTime, and other software components for Windows XP
Next see the the other actions of the following concerning the AMD
iOS: Device not recognized in iTunes for Windows

Windows could not start the Network Location Awareness service on Local computer

i have a dell inspiron 1501 laptop running windows vista home premium media center edition. i have recently been getting an error when trying to view networked computer saying "connection status: unknown" and "the dependency service or group failed to start". i started by disabling and re-enabling the driver and that did not help. i then brought up the services.msc thing and started looking at the networking services. i noticed that the Network Location Awareness service was not started so i tried to start it. i got a popup message saying "Windows could not start the Netwrok Location Awareness service on Local Computer. Error 0xc000096: 0xc0000096".
i also get an error popup when i try to start the Network List service saying "Windows could not start the Network List Service service on Local Computer. Error 1068: The dependency service or group failed to start".
what might i have done to make this happen and what can i do to try to fix it?
haus

Hi,
Thank you for the post.
I fully understand the inconvenience the issue has been caused and the current situation can be frustrating. Please try the following steps for troubleshooting.
1. Please start the computer in Safe Mode with Network and check the result. If the issue disappears, please perform a clean boot.
For the detailed steps, please refer to the step 1 and 2 in the KB article 936214 (http://support.microsoft.com/kb/936214).
2. If the issue persists, please check the system file by using the command SFC /scannow.
For more information, please refer to the KB article 929833 (http://support.microsoft.com/kb/929833).
If the above suggestions do not resolve the issue that service fails to start up, please understand that debug and dump analysis may be required for further troubleshooting. Also, in most cases, it is necessary to check the source codes. However, debugging is out of our forum’s support boundary. A support call to our product service team is needed for the debugging service. In this case, I’d like to suggest contacting Microsoft Customer Support Service (CSS) for assistance so that this issue can be resolved efficiently.
To obtain the phone numbers for specific technology request, please check the website listed below:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS
Thank you for your understanding.
Sincerely,
Joson Zhou
Microsoft Online Community Support

The OracleXETNSListener service on Local Computer started and then stopped.

Hi,
I practiced with APEX till yesterday.
Today I'm not able to start OracleXETNSListener, thus not able to open APEX workspace.
Whenever I tried to start the listener I got the message below:
"The OracleXETNSListener service on Local Computer started and then stopped. Some services stop automatically if they have no work to do, for example, the Performance Logs and Alerts service."
FYS, I have very limited knowledge about database.
I read about the solutions posted in this forum but couldn't understand.
Below are the files in ..\NETWORK\ADMIN\.
Would appreciate your help.
C:\OraXe\app\oracle\product\10.2.0\server\NETWORK\ADMIN\listener.ora
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = C:\OraXe\app\oracle\product\10.2.0\server)
(PROGRAM = extproc)
(SID_DESC =
(SID_NAME = CLRExtProc)
(ORACLE_HOME = C:\OraXe\app\oracle\product\10.2.0\server)
(PROGRAM = extproc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC_FOR_XE))
(ADDRESS = (PROTOCOL = TCP)(HOST = GYEON)(PORT = 1521))
DEFAULT_SERVICE_LISTENER = (XE)
..\sqlnet.ora
SQLNET.AUTHENTICATION_SERVICES = (NTS)
(I changed (NTS) into (NONE) after reading one article but did not work out. So I changed back to the original setting.)
..\tnsnames.ora
XE =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = GYEON)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = XE)
EXTPROC_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC_FOR_XE))
(CONNECT_DATA =
(SID = PLSExtProc)
(PRESENTATION = RO)
ORACLR_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC_FOR_XE))
(CONNECT_DATA =
(SID = CLRExtProc)
(PRESENTATION = RO)
Thanks,
Guy
Message was edited by:
GUY
Message was edited by:
GUY

Hi,
Thank you for your advice.
-) the name of your machine is GYEON? YES
-) have you started a firewall? Don't know but I have Norton Anti virus program running.
-) have you changed your IP-address? Time to time it gets changed automatically.
Followed your steps and got the messages below.
Would appreciate your further help.
While stopping,
TNS-12541: TNS:no listener
TNS-12560: TNS:protocol adapter error
TNS-00511: No listener
32-bit Windows Error: 2: No such file or directory
TNS-12541: TNS:no listener
TNS-12560: TNS:protocol adapter error
TNS-00511: No listener
32-bit Windows Error: 61: Unknown error
While starting,
TNS-12542: TNS:address already in use
TNS-12560: TNS:protocol adapter error
TNS-00512: Address already in us
32-bit Windows Error: 48: Unknown error
When tnsping XE,
TNS-12541: TNS:no listener
Thanks,
Guy
Message was edited by:
GUY

The visual Studio Test controller service on local computer started and then stopped. Some services stop automatically if they are not in use by other services or programs

We are using VS2013 Premium. i have installed vs2013 Test controller in my dev environment. While i am configuring (https://msdn.microsoft.com/en-us/library/hh546459.aspx) getting error message in
the Configuration summary dialog box displaying following error's : 1. Failed to Configure TFS Team Project Collection, 2. Could not complete operation as the time out expired. ''
I have checked the "visual Studio Test controller " in the
Services --> Administrative. Its automatically stopped the service. When i started the manually its showing message like as 'The visual Studio Test controller
service on local computer started and then stopped. Some services stop automatically if they are not in use by other services or programs'
Please guide me how to resolve this problem.
Thanks in Advance...

Hi Divakar,
What’s the version of your TFS?
How do you configure the test control?
Please make sure you are specify the team collection instead of team project.
On the other hand, you may enable test controller logs. (You could share the log file on the OneDrive)
# How to enable test controller logs
http://blogs.msdn.com/b/aseemb/archive/2009/11/28/how-to-enable-test-controller-logs.aspx
Regards
Starain
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Network Service Order Causing Conflict with Private DNS on Local Network

I'm currently working on deploying a Snow Leopard Server-based setup for a university student-run television station, using a Mac mini Server. Because our university's own networking infrastructure is somewhat wonky and restrictive, I have recently networked our station's six other computers and the Mac mini Server together through wired Ethernet, using an AirPort Base Station as a router along with some D-Link Ethernet switches.
As a result, our computers are networked together on their own network completely independently from our university's network, but because this wired network has no internet access, all of our computers connect to our university's wi-fi network over AirPort for internet access.
I've set up Snow Leopard Server with a private DNS name "atvserver.private" and am intending to use this server internally for file sharing, directory services, and Wiki Server (and possibly Podcast Server). However, because of the service order in Network Preferences, if our client computers are set to give AirPort priority, then they can connect to the internet, but cannot connect to the server's private DNS. On the other hand, if our client computers are set to give Ethernet priority, they can connect to the server, but lose their internet connection.
The only solutions that I can think of are:
1) Bridge the university's internet connection on our private wired network (but the university will not allow us to do this because it violates their security policies), or
2) Come up with some way to bypass the networking service order so that "atvserver.private" goes to the Ethernet network, while everything else goes to the public internet over AirPort.
Any ideas on how to solve this problem?

What's the ip range an subnet for the university network
The issue has nothing to do with the IP addresses/subnets in use. It's about DNS resolution.
Fortunately the solution is simple.
Configure the DNS server on the SLS with the zone(s) for your private LAN.
Enable DNS forwarders with the IP addresses of your university's DNS servers.
Point your clients to your SLS for DNS service.
Now all DNS requests from these clients will go to your server. For zones this server is responsible for (i.e. your private LAN) the server will reply, for all other lookups it will refer to your university's DNS servers for resolution.
In this way your clients can resolve your private zones, the university's zones and public DNS hostnames. Problem solved

"Waiting for network services..." forever! Then, wont' accept WEP password!

Anyone having this issue. One of my two new Apple TV 2s is doing this...was working fine for weeks and then bang!

I had the same problem. I just wanted to stream content from Netflix for starters, no bothering with iTunes on a PC, but the aTV2 would be stuck "Waiting for network services". Checking my settings and my router reflected a good WiFi connection, DHCP address assigned, etc. Internet radio worked fine, as did photo screen saver from FlickR.
Attempting to log in to iTunes gave an incorrect password error -- a lamentably bad error since the password was correct.
No joy on Netflix login.
No joy on YouTube. Which is puzzling since port 80 is open. (I wonder if the aTV2 is calling home to Apple even if you are just using Netflix or YouTube.)
All of this is a major annoyance as you have to keep entering your accounts and passwords from scratch over and over with the silly remote control and alphanumeric entry control.
I suspected AppleTV was trying to connect to its services on the internet on some ports my router firewall was blocking, but there is no discoverable, comprehensive, or accurate Apple documentation to indicate what ports those are. I tried opening TCP:3689 with no improvement.
As a last try, I opened every outbound port for the aTV2. (That is not going to be acceptable in the long term. We run a tight network security ship here.) It still didn't work. "Waiting for network services...". Hmph! I powered cycled the aTV2. After it rebooted, it works fine with Netflix and Youtube. No "Waiting..."
It is lamentable that aTV2 setup and/or network test doesn't report what ports it is failing to connect on. Bad bad OOBE Apple! XBOX 360 for example gives much more useful network config assistance.

Once i go to a place wherein there is no network, my phone says no network, but after i recover my network, its still saying that it still has no service. I try to put to airplane mode then put back to normal. I restart, then the network recovers.

Once i go to a place wherein there is no network, my phone says no network, but after i recover my network, its still saying that it still has no service. I try to put to airplane mode then put back to normal. I restart, then the network recovers. Do you experience this kind of problem? Any solutions? It seems that upgrades are not a good idea. I have an iphone4s, but with updated 6.0.1...

try to enter a gift card to cover your previous balance. Once covered it probably will allow you to change payment.

"Sharepoint 2013" is giving error that prevents local domain users authentication for "Team Foundation Server"

I am getting 2 errors through the event viewer that prevents TFS 2013 authentication for local domain users, also this error started appearing after having TFS upgraded to [ 12.0.30723.0 (Tfs2013.Update3) ].
1st Error (from administrative events):
The Execute method of job definition Microsoft.SharePoint.Administration.SPUsageImportJobDefinition (ID a51a0244-765d-433b-8502-0bb0540ad1fd) threw an exception. More information is included below.
Access to the path 'C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\15\LOGS' is denied.
Tried so far:-
- changed the path to another folder from "Diagnostic Logging" in another drive, but still getting the same error.
2nd Error (from application server):
DistributedCOM error
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{000C101C-0000-0000-C000-000000000046}
and APPID
{000C101C-0000-0000-C000-000000000046}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
Which I already got fixed using the following steps on a thread I opened before (but still getting the same error).
https://social.technet.microsoft.com/Forums/windows/en-US/3896e35c-b99a-4d30-b662-f92d337c8d6f/windows-servers-components-services-and-regedit-permissions-are-grayed-out-for-my-admin-account?forum=winservergen
Other Fixes I tried
- Found on another topic that it is not sharepoint that is causing the problem, but it is the generated ASP.NET web pages used for testing is causing the memory to fill up due to cashing on RAM, the fix suggested to change IIS cashing from RAM to HD to prevent
loading up using w3wp.exe from processes.
Concern
- by checking other topics for people having the same problem, it was mentioned that this error appeared after the lastest TFS update, is there is a fix for it ?

Hi Kpdn,
Thanks for your post.
All your participation and support are very important to build such harmonious/ pleasant / learning environment for MSDN community.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

SharePoint adding, then removing Network Service to local groups

Similar Messages

Maybe you are looking for