SYMPTOMS

ASP.NET versions of MailEnable web mail or web administration running on ASP.NET will not function and may report a Service Unavailable error through to the client browser.

The Windows Event Log may indicate that the MailEnableAppPool Application Pool could not be started.

CAUSE

Third party IIS Extensions may conflict with the MailEnableAppPool Application Pool. It is necessary that the identity of the MailEnableAppPool (IME_ADMIN) holds necessary permissions to execute any third party custom ISAPI filters that may be installed under IIS.

If this is not the case, then the MailEnableAppPool worker process may fail, resulting in a "Service Unavailable" message being returned to the requesting client.

RESOLUTION

Firstly, ensure that the IME_ADMIN user is a member of the IIS_WPG group. The MailEnable Diagnostic Report will warn if this is not the case.

Secondly, contact the author of any custom ISAPI extensions and inquire as to any "special permissions" (File System, Registry or Policies) that a worker process identity may need in order to integrate with the custom ISAPI extension.

WORKAROUND

An alternative to the above is to use SysInternals (www.sysinternals.com) tools like FileMon, RegMon and TokenMon to profile the requirements of the ISAPI extension.