Internet Information Services 6.0 may not function correctly after installing KB973917

 

We received some information from our IIS colleagues that the above mentioned hotfix KB 973917 which is part of the security update for December will break your IIS 6.0 functionality. This affects web-based products such as CRM, SharePoint, …

 

After you applied the hotfix KB 973917 the IIS 6.0 application pools cannot startup anymore. A similar error might occur:

Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date:  12/9/2009
Time:  10:55:01 AM
User:  N/A
Computer: WEBSERVER01
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '1234'.
The process exit code was '0xffffffff'.

 

How to repro

The root cause of the problems is caused by a version mismatch of the IIS files. You can get into this situation if you install IIS6 after SP2

1.    Install Windows 2003
2.    Install SP2
3.    Add the IIS components – at this point you will be asked for the Windows 2003 SP2 CD. If you now insert a RTM or SP1 Windows CD you will get old versions
4.    Now install KB 973917 and IIS worker process will no longer start because they call a routine in IISUTIL.DLL that only exists in the SP2 version of the file.

 

How to resolve the issue

Reinstall Windows 2003 SP2  (no need to remove or reinstall KB 973917)

How to verify the version of the IISUTIL.dll
Verify that the version of %windir%\system32\inetsrv\IISUTIL.dll is at least 6.0.3790.3959

 

More information

Internet Information Services 6.0 may not function correctly after installing KB973917
https://support.microsoft.com/?kbid=2009746

 

Description of the update that implements Extended Protection for Authentication in Internet Information Services (IIS)
https://support.microsoft.com/default.aspx?scid=kb;EN-US;973917

 

Greetings from the CRM team