DCOM IWAM error repaeatedly

[JBM]

Hi All:
I have reset password for IWAM user many times and reatedly get following
errors.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10004
Date: 8/9/2006
Time: 3:08:17 AM
User: N/A
Computer: FS001
Description:
DCOM got error "Logon failure: unknown user name or bad password. " and was
unable to logon .\IWAM_FS001 in order to run the server:
{3D14228D-FBE1-11D0-995D-00C04FD919C1}

Our Exchange server is being used for relay. Could this acount be doing it.

What should I do. Please advice in detail. Besides ASp.net what other
services use IWAM user.

Could this be the reason the server is being abused.

Many Thanks
JBM

 

[Adrian Grigorof]

Did you try running Synciwam.vbs? See also:

http://www.eventid.net/display.asp?eventid=10004&eventno=11&source=DCOM&phase=1