SecureAuth IdP Version affected: All

Description:

A realm stops functioning and may give the following error: 

Server Error in '/' Application.

The debug log will also contain the following entry:
"Illegal operation attempted on a registry key that has been marked for deletion".

Cause:

The registry for the application pool identity has been unloaded by Windows due to a user logoff event and thus is no longer available to the IIS application.

Resolution:

Prevent Windows from forcibly unloading registry hives during user logoff events by configuring the following Group Policy setting:

Computer Configuration | Administrative Templates | System | User Profiles | "Do not forcefully unload the user registry at user logoff"

Change the setting to "Enabled"

For more information see the following Microsoft KB article: https://support.microsoft.com/en-gb/help/2287297/a-com-application-may-stop-working-on-windows-server-2008-when-a-user

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.