SEI: 24.0.12.10015
SEI on standalone server and is under AD.
Local service account is: NecBIAccount (as requested by SEI during SEI install)
After a server restart due to forced Windows Server 2025 update, when I visit the SEI website, I get Service Unavailable:
```
HTTP Error 503. The service is unavailable.
```
When I open Microsoft IIS and check the Application Pools:
When I manually turn it on, it got turned off after I swap screen.
Checking Microsoft Event Viewer:
```
The identity of application pool WebServer.SEI is invalid. The user name or password that is specified for the identity may be incorrect, or the user may not have batch logon rights. If the identity is not corrected, the application pool will be disabled when the application pool receives its first request. If batch logon rights are causing the problem, the identity in the IIS configuration store must be changed after rights have been granted before Windows Process Activation Service (WAS) can retry the logon. If the identity remains invalid after the first request for the application pool is processed, the application pool will be disabled. The data field contains the error number.
```
Checking the Local Security Policy:
The IIS accounts are gone and caused by Microsoft AD's GPO.
Solution:
Fix the Microsoft AD's GPO setup.
Windows Server 2025 defaults with Microsoft IIS:
```
Log on as a batch job:
- Administrators
- Backup Operators
- IIS_IUSRS
- Performance Log Users
Log on as a service:
- IIS APPPOOL\.NET v4.5
- IIS APPPOOL\.NET v4.5 Classic
- NT SERVICE\ALL SERVICES
- RESTRICTED SERVICES\ALL RESTRICTED SERVICES
```
