I installed the Management Service and successful set everything up. I connected from a Windows Vista machine and life was good.
All of a sudden, after stopping it and changing to port 8173 for testing purposes and then trying to start the service again, I was unable to start the service. I reversed everything but that didn't help. After trying for a bit, I through I would try using
Local System. Using Local System the service started up, but I'm unable to connect to anything remotely. (this is 10 minutes after everything worked perfectly)
The error I get is:
---------------------------
Connect to Site
---------------------------
Could not connect to the specified computer.
Details: The underlying connection was closed: An unexpected error occurred on a send.
---------------------------
OK
---------------------------
Event viewer doesn't offer any suggestions except that the WMSVC service keeps failing and starting again and that it has done this 1 time unexpectantly.
The logs only show logs exactly like this, except for the date:
For one, how do I switch back to Local Service when I don't know the password? And, what else can I do to troubleshoot? I tried with my administrator account but it does the same thing as Local System.
Note, this error is when testing on the local server too, and I've tested with windows firewall turned off. Also note that it worked 10 minutes before and I changed virtually nothing in the meantime, so I do know that everything was configured correctly.
Further on this. I do see this entry in Event Viewer, but only if I log in using Window auth. If I use IIS Manager auth, it doesn't record anything except that the service failed and started up again.
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: -
Account Domain: -
Failure Information:
Failure Reason: An Error occured during Logon.
Status: 0xc0000022
Sub Status: 0xc0000022
Process Information:
Caller Process ID: 0xbc0
Caller Process Name: C:\Windows\System32\inetsrv\WMSvc.exe
---
Just prior to this are some successful connections for the same administrator user. Also, when the service is stopped, the error message is different, so I know that it's at least touching the service.
It seems that the http bindings for wmsvc are messed up.
Try the following from cmd line window on the server machine "netsh http show sslcert" and see if the correct port /certificate combo are configured for wmsvc.
In order to work around this issue try changing the certificate (along with the port) used for Management Service. The try starting wmsvc.
I think you're on to something. "netsh http show sslcert" didn't show anything so I installed a different cert. It was a wildcard cert and didn't work so I tried a 3rd time with a regular cert. It still didn't work. I changed the port to 8173 and in
IIS Manager I use localhost:8173 but it still fails. (when I just use localhost, or localhost:8174 (bogus port) I get an error that it can't find the server, so again, I can tell that it's making it part way there.
"netsh http show sslcert" still shows blank though.
Huh...are you using Server Beta 3 on the server and latest version of RemoteMgr client on Vista? We fixed this issue for Server Beta 3.
Anyways lets fix this issue -
·Take ownership for the machine keytakeown /F %ProgramData%\Microsoft\Crypto\RSA\MachineKeys\bedbf0b4da5f8061b6444baedf4c00b1*
/R·Acl the machine key such that administrators group has read permissionsicacls %ProgramData%\Microsoft\Crypto\RSA\MachineKeys\bedbf0b4da5f8061b6444baedf4c00b1*
/grant Administrators:(R)·Reserve the port 8172 for wmsvcnetsh http add urlacl url="https://*:8172/" User="NT SERVICE\wmsvc"·Associate the cert with the portnetsh http add sslcert ipport=0.0.0.0:8172 certhash=<certHash>
appid={d7d72267-fcf9-4424-9eec-7e1d8dcec9a9}
I wasn't testing using the mismatched versions at the time, but I had before. In fact, it broke after that test, I just didn't realize it was from that.
The last test I did in IIS Manager wasn't with the same bindings so after running this from the command line, the IIS Manager GUI was off. It wouldn't let me put them back, saying that they were already in use. I just updated the registry key (HKLM\software\microsoft\webmanagement\server),
restarting IIS Manager and everything is working perfectly!
Many thanks!!
Oh, one last question. Is this just a beta issue? Later will mismatched versions play nicely together?
I'm running into a similar issue again. I've since updated my server to the latest bits but my Vista client is still the same. (One I downloaded from iis.net about 3 weeks ago)
From the local machine everything works good, but when connecting remotely it allows me to authenticate, then it shows me the certificate warning because it's a self-signed cert. Then it says that the server returned a 404 error. Here's what are in the
VMSVC logs:
OWScott
286 Posts
Unable to start WMSVC - or connect - kind of
Jul 19, 2007 02:41 AM|LINK
I installed the Management Service and successful set everything up. I connected from a Windows Vista machine and life was good.
All of a sudden, after stopping it and changing to port 8173 for testing purposes and then trying to start the service again, I was unable to start the service. I reversed everything but that didn't help. After trying for a bit, I through I would try using Local System. Using Local System the service started up, but I'm unable to connect to anything remotely. (this is 10 minutes after everything worked perfectly)
The error I get is:
---------------------------
Connect to Site
---------------------------
Could not connect to the specified computer.
Details: The underlying connection was closed: An unexpected error occurred on a send.
---------------------------
OK
---------------------------
Event viewer doesn't offer any suggestions except that the WMSVC service keeps failing and starting again and that it has done this 1 time unexpectantly.
The logs only show logs exactly like this, except for the date:
2007-07-18 03:02:00 ::1 GET /ping.axd - 8172 - ::1 Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) 200 0 0
For one, how do I switch back to Local Service when I don't know the password? And, what else can I do to troubleshoot? I tried with my administrator account but it does the same thing as Local System.
Note, this error is when testing on the local server too, and I've tested with windows firewall turned off. Also note that it worked 10 minutes before and I changed virtually nothing in the meantime, so I do know that everything was configured correctly.
Thanks
Scott
Microsoft MVP - IIS
Vaasnet
www.vaasnet.com
OWScott
286 Posts
Re: Unable to start WMSVC - or connect - kind of
Jul 19, 2007 03:00 AM|LINK
Further on this. I do see this entry in Event Viewer, but only if I log in using Window auth. If I use IIS Manager auth, it doesn't record anything except that the service failed and started up again.
An account failed to log on.
Subject:
Security ID: IIS7\Administrator
Account Name: Administrator
Account Domain: IIS7
Logon ID: 0x3f39f
Logon Type: 5
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: -
Account Domain: -
Failure Information:
Failure Reason: An Error occured during Logon.
Status: 0xc0000022
Sub Status: 0xc0000022
Process Information:
Caller Process ID: 0xbc0
Caller Process Name: C:\Windows\System32\inetsrv\WMSvc.exe
---
Just prior to this are some successful connections for the same administrator user. Also, when the service is stopped, the error message is different, so I know that it's at least touching the service.
Microsoft MVP - IIS
Vaasnet
www.vaasnet.com
NitashaV
75 Posts
Microsoft
Re: Unable to start WMSVC - or connect - kind of
Jul 19, 2007 05:14 PM|LINK
It seems that the http bindings for wmsvc are messed up.
Try the following from cmd line window on the server machine "netsh http show sslcert" and see if the correct port /certificate combo are configured for wmsvc.
In order to work around this issue try changing the certificate (along with the port) used for Management Service. The try starting wmsvc.
OWScott
286 Posts
Re: Unable to start WMSVC - or connect - kind of
Jul 19, 2007 05:53 PM|LINK
Nitasha,
I think you're on to something. "netsh http show sslcert" didn't show anything so I installed a different cert. It was a wildcard cert and didn't work so I tried a 3rd time with a regular cert. It still didn't work. I changed the port to 8173 and in IIS Manager I use localhost:8173 but it still fails. (when I just use localhost, or localhost:8174 (bogus port) I get an error that it can't find the server, so again, I can tell that it's making it part way there.
"netsh http show sslcert" still shows blank though.
Thanks!
Scott
Microsoft MVP - IIS
Vaasnet
www.vaasnet.com
NitashaV
75 Posts
Microsoft
Re: Unable to start WMSVC - or connect - kind of
Jul 19, 2007 06:06 PM|LINK
Huh...are you using Server Beta 3 on the server and latest version of RemoteMgr client on Vista? We fixed this issue for Server Beta 3.
Anyways lets fix this issue -
· Take ownership for the machine keytakeown /F %ProgramData%\Microsoft\Crypto\RSA\MachineKeys\bedbf0b4da5f8061b6444baedf4c00b1* /R· Acl the machine key such that administrators group has read permissionsicacls %ProgramData%\Microsoft\Crypto\RSA\MachineKeys\bedbf0b4da5f8061b6444baedf4c00b1* /grant Administrators:(R)· Reserve the port 8172 for wmsvcnetsh http add urlacl url="https://*:8172/" User="NT SERVICE\wmsvc"· Associate the cert with the portnetsh http add sslcert ipport=0.0.0.0:8172 certhash=<certHash> appid={d7d72267-fcf9-4424-9eec-7e1d8dcec9a9}Let me know if this works.
-Nitasha
OWScott
286 Posts
Re: Unable to start WMSVC - or connect - kind of
Jul 19, 2007 06:39 PM|LINK
Sweet!! That did it.
I wasn't testing using the mismatched versions at the time, but I had before. In fact, it broke after that test, I just didn't realize it was from that.
The last test I did in IIS Manager wasn't with the same bindings so after running this from the command line, the IIS Manager GUI was off. It wouldn't let me put them back, saying that they were already in use. I just updated the registry key (HKLM\software\microsoft\webmanagement\server), restarting IIS Manager and everything is working perfectly!
Many thanks!!
Oh, one last question. Is this just a beta issue? Later will mismatched versions play nicely together?
Scott
Microsoft MVP - IIS
Vaasnet
www.vaasnet.com
NitashaV
75 Posts
Microsoft
Re: Unable to start WMSVC - or connect - kind of
Jul 19, 2007 09:57 PM|LINK
This issue has already been fixed on later builds.
Yes thats the idea :)
OWScott
286 Posts
Re: Unable to start WMSVC - or connect - kind of
Jul 20, 2007 04:54 AM|LINK
Cool, I figured you would have it under control. :)
Microsoft MVP - IIS
Vaasnet
www.vaasnet.com
OWScott
286 Posts
Re: Unable to start WMSVC - or connect - kind of
Aug 09, 2007 03:29 AM|LINK
Hi Nitasha,
I'm running into a similar issue again. I've since updated my server to the latest bits but my Vista client is still the same. (One I downloaded from iis.net about 3 weeks ago)
From the local machine everything works good, but when connecting remotely it allows me to authenticate, then it shows me the certificate warning because it's a self-signed cert. Then it says that the server returned a 404 error. Here's what are in the VMSVC logs:
2007-08-09 03:15:10 192.168.77.52 GET /Login.axd loginOnly=1&retrieveUrl=1& 8172 - 192.168.77.106 WebManagementShell|1.0.0.0|2.0.50727.312|System.Windows.Forms.Control 404 4 0 203
Any idea what to check for?
Microsoft MVP - IIS
Vaasnet
www.vaasnet.com
NitashaV
75 Posts
Microsoft
Re: Unable to start WMSVC - or connect - kind of
Aug 22, 2007 05:12 PM|LINK
An event should also be thrown on the server machine, Can you tell me its details from the eventvwr --> Windows Logs --> Application?
-Nitasha