After using the AutoSPInstaller to create a 2 new sites they were getting Internal Error 500 issues when trying to access the site.
Turns out that in the windows local security policy adding service accounts to the 'Impersonate a client after authentication' had not been done. The root cause of this was that a Group Policy was locking down anyone from adding to that group.
After removing the Group Policy I was able to added the Farm service and IISuser accounts into that group perform a n IISreset and then sites started working.
I know this is primarily a group policy issue so perhaps not in the realm of this installer. I though other might find it useful or a check could be added to the AutoSPInstaller to verify that the correct users have been added to 'Impersonate a client after authentication' group in the local security policy editor.
SP 2013 SP1 on 2012 R2
Turns out that in the windows local security policy adding service accounts to the 'Impersonate a client after authentication' had not been done. The root cause of this was that a Group Policy was locking down anyone from adding to that group.
After removing the Group Policy I was able to added the Farm service and IISuser accounts into that group perform a n IISreset and then sites started working.
I know this is primarily a group policy issue so perhaps not in the realm of this installer. I though other might find it useful or a check could be added to the AutoSPInstaller to verify that the correct users have been added to 'Impersonate a client after authentication' group in the local security policy editor.
SP 2013 SP1 on 2012 R2