Stop 0x0000007e in HTTP.SYS when using kernel mode authentication and you set appPoolCredentials=”true”

We’ve now published the KB article for a recent hotfix that I was involved in.

I’m not going to write much about it here as a lot of my words have already gone into the KB article:

FIX: You receive a Stop 0x0000007e error message on a blue screen when the AppPoolCredentials attribute is set to true and you use a domain account as the application pool identity in IIS 7.0

The main points are however:

  • This problem does not occur “out of the box” – a number of factors have to come into play before you hit this issue.
  • Kernel mode authentication (new in Windows Server 2008) has to be enabled.
  • appPoolCredentials has to be set to ”true”. A reason for doing this is if your application pool is set to run under a domain account and you are configuring your site to use Kerberos authentication
  • we’ve only seen this issue so far in relation to Microsoft Office SharePoint Server 2007, but it is not a problem with that product. it is just that the way that product sometimes requires IIS to be configured leads it to fall victim to the bug in HTTP.SYS