« Previous Next »

Thread: Something is Stopping IIS

Last post 07-02-2009 2:55 AM by icargill. 17 replies.

Average Rating Rate It (5)

RSS

Page 1 of 2 (18 items) 1 2 Next >

Sort Posts:

  • 06-23-2009, 7:59 AM

    • icargill
    • Not Ranked
    • Joined on 06-23-2009, 7:53 AM
    • Leatherhead, UK
    • Posts 6

    Something is Stopping IIS

    I'm running IIS on Windows XP, and have a problem with something restarting IIS every 60 seconds!!   The event log is full of events like (paraphrasing!)

    10:59  Sent a stop
    10:59  Stopped
    11:00  Sent a Start
    11:00  Running

    Alway triggered on the 59 seconds.  No indication of what is doing it.

    Any clues as to how I can trap this, or determine what is doing the restart.

    I think it is using iisrestart.exe to do so, because I renamed iisrestart.exe, but after 60 seconds, iisrestart.exe miraculously re-appears! (Presumably OS is 'self-healing' when someone tries to use the missing program?)

     

     

    Ian Cargill
    Development Manager
    Dendrite Clinical Systems
    Raynes Park, London
  • 06-23-2009, 3:21 PM In reply to

    Re: Something is Stopping IIS

     This is indeed a strange problem, can you paste the complete logs from the event viewer as it might have the user name that is sending this request.

  • 06-24-2009, 3:05 AM In reply to

    • icargill
    • Not Ranked
    • Joined on 06-23-2009, 7:53 AM
    • Leatherhead, UK
    • Posts 6

    Re: Something is Stopping IIS

    Well, all I get for the stop event is:

     

    Event Type: Information
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7035
    Date:  24/06/2009
    Time:  08:00:16
    User:  NT AUTHORITY\SYSTEM
    Computer: CARGILLLAP
    Description:
    The World Wide Web Publishing service was successfully sent a stop control.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    which doesn't seem to reveal much about the source.  Should i be looking somewhere else for this??

    Ian Cargill
    Development Manager
    Dendrite Clinical Systems
    Raynes Park, London
  • 06-24-2009, 10:12 AM In reply to

    Re: Something is Stopping IIS

    some ghost huh? have you check do you got any schedule job running? that deliberately restart the service?

    Cheers,
    Bernard Cheah
  • 06-24-2009, 10:16 AM In reply to

    • icargill
    • Not Ranked
    • Joined on 06-23-2009, 7:53 AM
    • Leatherhead, UK
    • Posts 6

    Re: Something is Stopping IIS

    Can't see any scheduled jobs.  At least, not in Control Panel | Scheduled Tasks.

    Ian Cargill
    Development Manager
    Dendrite Clinical Systems
    Raynes Park, London
  • 06-24-2009, 10:27 AM In reply to

    • srkjain
    • Not Ranked
    • Joined on 06-09-2009, 1:25 PM
    • Bangalore
    • Posts 12

    Re: Something is Stopping IIS

    Dont you see any other events like

    Event Type: Information
    Event Source: IISCTLS
    Event Category: None
    Event ID: 2
    Date:  24/06/2009
    Time:  6:27:36 AM
    User:  N/A
    Computer: MYCOMPUTER

    Description:
    IIS stop command received from user OASIS\helpdesk. The logged data is the status code.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 00 00 00 00               ....   
     

    after this event.

    Event Type: Information
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7035
    Date:  24/06/2009
    Time:  6:27:28 AM
    User:  SRKJAIN\Helpdesk
    Computer: MYCOMPUTER
    Description:
    The World Wide Web Publishing Service service was successfully sent a stop control.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    Rakesh Jain
  • 06-24-2009, 10:29 AM In reply to

    Re: Something is Stopping IIS

    Haha! well, could be from network etc?
    so you saying the symptom is consistent? every 1 min? have you try unplug the network cable? 

    run process monitor (BING it for more info) then look at the iis service and see if get more info on why it can kill? look at process id, etc.

    Cheers,
    Bernard Cheah
  • 06-24-2009, 10:33 AM In reply to

    Re: Something is Stopping IIS

    I think the clue is here:

    "IIS stop command received from user OASIS\helpdesk."

    Who is user helpdesk in the OASIS domian? I iumagine it is the helpdesk of your company mayeb they stop you running IIS......

  • 06-24-2009, 10:42 AM In reply to

    • icargill
    • Not Ranked
    • Joined on 06-23-2009, 7:53 AM
    • Leatherhead, UK
    • Posts 6

    Re: Something is Stopping IIS

    > I think the clue is here:
    > "IIS stop command received from user OASIS\helpdesk."

     That was someone's example, not from my system.

     And no, there is nothing so useful logged.  The event message I first posted is the limit of the information recorded.

    Ian Cargill
    Development Manager
    Dendrite Clinical Systems
    Raynes Park, London
  • 06-24-2009, 10:42 AM In reply to

    Re: Something is Stopping IIS

    The event log posted by OP is different, then event source is from service control manager, NOT IIS control.
    Cheers,
    Bernard Cheah
  • 06-25-2009, 3:43 AM In reply to

    Re: Something is Stopping IIS

     "User:  NT AUTHORITY\SYSTEM" means IIS is restarting itself, may be the service is configured to do that on failures. However it is strange that you don't get any other info in the event logs..

  • 06-25-2009, 11:55 PM In reply to

    • Aktiv
    • Not Ranked
    • Joined on 06-26-2009, 3:52 AM
    • Melbourne, Australia
    • Posts 3

    Re: Something is Stopping IIS

    I've just encountered the same thing with a client's SBS 2003 Server running IIS. They've got the standard stuff including Sharepoint, but also WSUS and McAfee's ePO which each rely on IIS.

    My reset is very close to the 1 minute mark too - sometimes as little as 51 seconds, but very very similiar to what you're describing, and keeps on ad infinitum.

    The idea that something loading with IIS which is causing a failure resulting in a reset sounds to me to have some merit. Now I've just to track it down!

    Philip Brookes
    Director
    Aktiv Tactics
    www.aktiv.com.au
    Phone 1300 85 70 75 / +61 3 9017 2996
  • 06-26-2009, 12:54 AM In reply to

    • Aktiv
    • Not Ranked
    • Joined on 06-26-2009, 3:52 AM
    • Melbourne, Australia
    • Posts 3

    Re: Something is Stopping IIS

    Do you have a program called PrinSuperVisor running on your computer? I just discovered that PrintSuperVisor (which was installed last week when the client got a new Oki Colour Laser Printer) was causing the IIS restart every minute. As soon as I disabled the service, everything's good!

    Philip Brookes
    Director
    Aktiv Tactics
    www.aktiv.com.au
    Phone 1300 85 70 75 / +61 3 9017 2996
  • 06-26-2009, 1:35 AM In reply to

    • icargill
    • Not Ranked
    • Joined on 06-23-2009, 7:53 AM
    • Leatherhead, UK
    • Posts 6

    Re: Something is Stopping IIS

    Philip,

     DAMN!  Well done that man.  That's it.  Oki  PrintSuperVision.

    Just de-installed it and the problem is resolved. I got the printer through our landlord, who does BIG business with OKI. Later this morning I shall be asking him for the details of a technical contact there to ***.

     Many thanks, fellow Aussie. How did you track it down??

    Ian Cargill
    Development Manager
    Dendrite Clinical Systems
    Raynes Park, London
  • 06-30-2009, 4:55 AM In reply to

    Re: Something is Stopping IIS

    Whao..... good stuff.
    This will be hard to troubleshoot.... even with process explorer.

    Cheers,
    Bernard Cheah
Page 1 of 2 (18 items) 1 2 Next >
Microsoft Communities