Symantec ICT Console Access Error

Situation; 

While trying to reach ICT console(http(s)://hostname/ICT/Administration) "HTTP Error 503. The service is unavailable." message received.

Cause;

- Check  IIS ICT App Pool, probably you will see that it is stopped like below.

- One of the two possible reason is Application Pool Identity is not valid.

- Secondly, the ICT service user not included into the "Log on as batch job right" local security policy. In the windows event viewer warning related to that issue can be seen.

Resolution;

- In case of the identity problem in the IIS Manager > [IIS-Server-Name] > Application Pools > [ICT-AppPool] > Advanced Settings > Identity , you have to enter      the valid credentials for ICT service user.

- For the second subject, 

1. Type in secpol.msc /s
2. Select "Local Policies" in MSC snap in
3.  Select "User Rights Assignment"
4. Right click on "Log on as batch job" and select Properties
5. Click "Add User or Group", and include the relevant user.