IIS Server Audit Event: 1005

1005: IIS WMSvc startup unable to read settings

The IIS Web Management Service (WMSvc) facilitates remote and delegated management of web servers and the web sites and applications in it. 

Event 1005 is generated when an error is encountered while attempting to retrieve WMSvc configuration from the registry. This would result in the Web Management Service startup to fail. 

How could you resolve this situation?

Ensure that the WMSvc identity user has access to the HKLM\SOFTWARE\Microsoft\WebManagement key and all of its subkeys.

IIS Server Log Analysis Tool

EventLog Analyzer is a comprehensive log management software with which you can centrally collect, analyze, and manage logs from all the different log sources in your network. You also get reports and alerts on your network security, making it a power-packed IT security tool.