IIS 7 - Troubleshooting

Re: Error 503 after upgrading to Vista SP1

icelava — Sat, 05 Apr 2008 10:07:56 GMT

icelava:
The error has not been useful in telling me where to correct the problem. There is no specific access-deined message for a file path like others have been receiving (for other situations).
I have attempted to grant NETWORK SERVICE Modify access up to
C:\inetpub\temp\appPools\Classic .NET AppPool.config
and it still bombs out. Without a more detailed message I am unsure where to further proceed or look at.

Ok i have found the offending path: C:\windows\System32\inetsrv\config\schema

http://icelava.net/forums/2726/ShowThread.aspx

Re: Error 503 after upgrading to Vista SP1

icelava — Sat, 05 Apr 2008 09:03:11 GMT

I have also unfortunately encountered the same problem and totally cannot run IIS 7 and my ASP.NET applications now.

Log Name:      Application
Source:        Microsoft-Windows-IIS-W3SVC-WP
Date:          5/4/2008 16:56:59
Event ID:      2276
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      jenova
Description:
The worker process failed to initialize correctly and therefore could not be started. The data is the error.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-IIS-W3SVC-WP" Guid="{670080D9-742A-4187-8D16-41143D1290BD}" EventSourceName="W3SVC-WP" />
    <EventID Qualifiers="49152">2276</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2008-04-05T08:56:59.000Z" />
    <EventRecordID>134481</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>jenova</Computer>
    <Security />
</System>
<EventData>
    <Binary>05000780</Binary>
</EventData>
</Event>

The error has not been useful in telling me where to correct the problem. There is no specific access-deined message for a file path like others have been receiving (for other situations).

I have attempted to grant NETWORK SERVICE Modify access up to
C:\inetpub\temp\appPools\Classic .NET AppPool.config
and it still bombs out. Without a more detailed message I am unsure where to further proceed or look at.

C:\Users\Aaron.seet>ICACLS %systemdrive%\inetpub\temp\appPools
C:\inetpub\temp\appPools CREATOR OWNER:(OI)(CI)(IO)(F)
                         NT AUTHORITY\SYSTEM:(OI)(CI)(F)
                         NT AUTHORITY\NETWORK SERVICE:(OI)(CI)(M)
                         BUILTIN\Administrators:(OI)(CI)(F)
                         BUILTIN\IIS_IUSRS:(OI)(CI)(RX)

Successfully processed 1 files; Failed processing 0 files

C:\Users\Aaron.seet>ICACLS %systemdrive%\inetpub\temp\appPools\*
C:\inetpub\temp\appPools\APCA790.tmp NT AUTHORITY\SYSTEM:(F)
BUILTIN\Administrators:(F)

C:\inetpub\temp\appPools\APCD29A.tmp NT AUTHORITY\SYSTEM:(F)
BUILTIN\Administrators:(F)

C:\inetpub\temp\appPools\Classic .NET AppPool.config NT AUTHORITY\SYSTEM:(F)
                                                     BUILTIN\Administrators:(F)
                                                     IIS APPPOOL\Classic .NET Ap
pPool:(R)
                                                     NT AUTHORITY\NETWORK SERVIC
E:(RX)

C:\inetpub\temp\appPools\Integrated .NET.config NT AUTHORITY\SYSTEM:(OI)(CI)(F)
BUILTIN\Administrators:(OI)(CI)(
F)
IIS APPPOOL\Integrated .NET:(OI)
(CI)(R)

Successfully processed 4 files; Failed processing 0 files

C:\Users\Aaron.seet>ICACLS %systemdrive%\inetpub\wwwroot
C:\inetpub\wwwroot BUILTIN\IIS_IUSRS:(RX)
                   BUILTIN\IIS_IUSRS:(OI)(CI)(IO)(GR,GE)
                   NT AUTHORITY\SYSTEM:(I)(F)
                   CREATOR OWNER:(I)(OI)(CI)(IO)(F)
                   NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)
                   BUILTIN\Administrators:(I)(OI)(CI)(F)
                   NT AUTHORITY\NETWORK SERVICE:(I)(OI)(CI)(RX)
                   BUILTIN\Users:(I)(OI)(CI)(RX)
                   NT SERVICE\TrustedInstaller:(I)(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Users\Aaron.seet>net start
These Windows services are started:

   Application Experience
   Application Host Helper Service
   Application Management
   Ati External Event Utility
   Automatic LiveUpdate Scheduler
   Background Intelligent Transfer Service
   Base Filtering Engine
   Certificate Propagation
   CNG Key Isolation
   COM+ Event System
   Computer Browser
   Cryptographic Services
   DCOM Server Process Launcher
   Dell Wireless WLAN Tray Service
   Desktop Window Manager Session Manager
   DHCP Client
   Diagnostic Policy Service
   Diagnostic System Host
   Distributed Link Tracking Client
   DNS Client
   Extensible Authentication Protocol
   Function Discovery Provider Host
   Function Discovery Resource Publication
   Group Policy Client
   Human Interface Device Access
   IIS Admin Service
   IKE and AuthIP IPsec Keying Modules
   IP Helper
   IPsec Policy Agent
   KtmRm for Distributed Transaction Coordinator
   LiveUpdate Notice Service Ex
   Multimedia Class Scheduler
   Network Connections
   Network List Service
   Network Location Awareness
   Network Store Interface Service
   Offline Files
   PDAgent
   Plug and Play
   Portable Device Enumerator Service
   Print Spooler
   Program Compatibility Assistant Service
   ReadyBoost
   Remote Access Connection Manager
   Remote Procedure Call (RPC)
   Secondary Logon
   Secure Socket Tunneling Protocol Service
   Security Accounts Manager
   Security Center
   Server
   Shell Hardware Detection
   Software Licensing
   SQL Server (MSSQLSERVER)
   SQL Server Browser
   SQL Server FullText Search (MSSQLSERVER)
   SQL Server Reporting Services (MSSQLSERVER)
   SQL Server VSS Writer
   SSDP Discovery
   Superfetch
   SupportSoft Sprocket Service (dellsupportcenter)
   Symantec AntiVirus
   Symantec AntiVirus Definition Watcher
   Symantec Event Manager
   Symantec Settings Manager
   System Event Notification Service
   Task Scheduler
   TCP/IP NetBIOS Helper
   Telephony
   Terminal Services
   Terminal Services Configuration
   Terminal Services UserMode Port Redirector
   Themes
   UPnP Device Host
   User Profile Service
   WebClient
   Windows Audio
   Windows Audio Endpoint Builder
   Windows Connect Now - Config Registrar
   Windows Driver Foundation - User-mode Driver Framework
   Windows Error Reporting Service
   Windows Event Log
   Windows Firewall
   Windows Image Acquisition (WIA)
   Windows Management Instrumentation
   Windows Process Activation Service
   Windows Search
   Windows Time
   Windows Update
   WLAN AutoConfig
   Workstation
   World Wide Web Publishing Service
   XAudioService

The command completed successfully.

Re: Error 503 after upgrading to Vista SP1

Tomas Vercetti — Thu, 13 Mar 2008 19:53:07 GMT

Firstly I had VS 2005 Standart and IIS7 and MySQL Connector/Net 5.1.0 installed on Vista 64 about half of year. Do not remember in which order I installed them. No additional components for IIS7 are installed. IIS7 is installed including all features with the exception of ftp and IIS6 support. All works fine.

Not long ago I decided to update my software. So I uninstalled MySQL software and then VS 2005. I installed VS 2008 Pro (Trial) immediately after that (after rebooting). I'm not sure that IIS7 worked after installation of VS 2008 and prior to installing SP1. Next day I got SP1 and tried install it. I got error at the end of installation as was mentioned in the first post - EventLogger service didn't start because of lack of permission rights. Solved according to http://channel9.msdn.com/ShowPost.aspx?PostID=379459 . After that SP1 installed successfully. And after that I noticed that IIS7 shows the 503 error and warning about Authorization (that was mentioned in my first post). MySQL Server was installed later successfully. But MySQL Connector.NET 5.2.1 "Web Provider" doesn't install too because of "C:\Windows\\Microsoft.NET\Framework\v2.0.50727\installUtil.exe" error during registration of MySql.Web.dll. ( I posted some details here: http://forums.mysql.com/read.php?38,199073,199778#msg-199778 )

So I decided that something is wrong with the permissions. I make IIS7 working after some testing as I note in the first post. But that solution is not good one as far as I know.

Hope that helps.

Re: Error 503 after upgrading to Vista SP1

thomad — Thu, 13 Mar 2008 06:00:31 GMT

Tomas,

Something fishy is going on here and from here I can't figure out what's going on. I asked our Test team for a repro. It woudl be nice if you could give me any more information on how to pinpoint the problem. Stuff like, what IIS components did you install before the upgrade, did you add new software, did upgrade succeed without errors etc.

You can also contact our support team. They should be able to help you as well.

Re: Error 503 after upgrading to Vista SP1

Tomas Vercetti — Tue, 11 Mar 2008 08:20:26 GMT

thomad:
What are the Details of your Eventlog message. Does it say something like "The worker process for application pool 'DefaultApplicationPool' encountered an error 'Cannot read configuration file ' trying to read global module configuration data from file '\\?\C:\Windows\system32\inetsrv\config\applicationHost.config'

No, it doesn't. There are Details of Eventlog message:

Log Name:      Application
Source:        Microsoft-Windows-IIS-W3SVC-WP
Date:          11.03.2008 2:14:13
Event ID:      2276
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      UNIVERSE-PC
Description:
The worker process failed to initialize correctly and therefore could not be started. The data is the error.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-IIS-W3SVC-WP" Guid="{670080D9-742A-4187-8D16-41143D1290BD}" EventSourceName="W3SVC-WP" />
    <EventID Qualifiers="49152">2276</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2008-03-10T21:14:13.000Z" />
    <EventRecordID>31140</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>UNIVERSE-PC</Computer>
    <Security />
</System>
<EventData>
    <Binary>05000780</Binary>
</EventData>
</Event>

thomad:
If so, can you send me the results of the following command-lines (you have to run elevated)?

Sending them though. I have UAC turned off.

C:\Users\Test>ICACLS %systemdrive%\inetpub\temp\appPools
C:\inetpub\temp\appPools CREATOR OWNER:(OI)(CI)(IO)(F)
                         NT AUTHORITY\SYSTEM:(OI)(CI)(F)
                         NT AUTHORITY\NETWORK SERVICE:(OI)(CI)(RX)
                         BUILTIN\Administrators:(OI)(CI)(F)
                         BUILTIN\IIS_IUSRS:(OI)(CI)(RX)

Successfully processed 1 files; Failed processing 0 files

C:\Users\Test>ICACLS %systemdrive%\inetpub\temp\appPools\*
C:\inetpub\temp\appPools\APC8671.tmp NT AUTHORITY\SYSTEM:(F)
                                     BUILTIN\Administrators:(F)

C:\inetpub\temp\appPools\APCE7C6.tmp NT AUTHORITY\SYSTEM:(F)
                                     BUILTIN\Administrators:(F)

C:\inetpub\temp\appPools\APCE7EA.tmp NT AUTHORITY\SYSTEM:(F)
                                     BUILTIN\Administrators:(F)

Successfully processed 3 files; Failed processing 0 files

C:\Users\Test>ICACLS %systemdrive%\inetpub\wwwroot
C:\inetpub\wwwroot BUILTIN\IIS_IUSRS:(OI)(CI)(F)
                   NT AUTHORITY\NETWORK SERVICE:(OI)(CI)(NP)(F)
                   UNIVERSE-PC\Test:(I)(F)
                   CREATOR OWNER:(I)(OI)(CI)(IO)(F)
                   NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
                   UNIVERSE-PC\Test:(I)(OI)(CI)(IO)(F)
                   BUILTIN\Administrators:(I)(OI)(CI)(F)
                   BUILTIN\IIS_IUSRS:(I)(OI)(CI)(RX)
                   BUILTIN\Users:(I)(OI)(CI)(RX)
                   NT SERVICE\TrustedInstaller:(I)(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files

C:\Users\Test>NET START
These Windows services are started:

   Application Experience
   Application Host Helper Service
   Ati External Event Utility
   Background Intelligent Transfer Service
   Base Filtering Engine
   COM+ Event System
   Computer Browser
   Cryptographic Services
   DCOM Server Process Launcher
   Desktop Window Manager Session Manager
   DHCP Client
   Diagnostic Policy Service
   Diagnostic System Host
   Distributed Link Tracking Client
   DNS Client
   Function Discovery Resource Publication
   Group Policy Client
   IKE and AuthIP IPsec Keying Modules
   IP Helper
   IPsec Policy Agent
   KtmRm for Distributed Transaction Coordinator
   Machine Debug Manager
   Multimedia Class Scheduler
   MySQL
   Network Connections
   Network List Service
   Network Location Awareness
   Network Store Interface Service
   Offline Files
   Plug and Play
   Portable Device Enumerator Service
   Print Spooler
   Program Compatibility Assistant Service
   ReadyBoost
   Remote Access Connection Manager
   Remote Procedure Call (RPC)
   Secondary Logon
   Secure Socket Tunneling Protocol Service
   Security Accounts Manager
   Security Center
   Server
   Shell Hardware Detection
   SL UI Notification Service
   Software Licensing
   SQL Server (SQLEXPRESS)
   SQL Server VSS Writer
   SSDP Discovery
   Superfetch
   System Event Notification Service
   Tablet PC Input Service
   Task Scheduler
   TCP/IP NetBIOS Helper
   Telephony
   Terminal Services
   Themes
   UPnP Device Host
   User Profile Service
   WebClient
   Windows Audio
   Windows Audio Endpoint Builder
   Windows Defender
   Windows Driver Foundation - User-mode Driver Framework
   Windows Error Reporting Service
   Windows Event Log
   Windows Firewall
   Windows Image Acquisition (WIA)
   Windows Management Instrumentation
   Windows Process Activation Service
   Windows Search
   Windows Time
   Windows Update
   Workstation
   World Wide Web Publishing Service

The command completed successfully.

Thanks

Re: Error 503 after upgrading to Vista SP1

thomad — Tue, 11 Mar 2008 06:38:44 GMT

Can you check the following:

What are the Details of your Eventlog message. Does it say something like "The worker process for application pool 'DefaultApplicationPool' encountered an error 'Cannot read configuration file ' trying to read global module configuration data from file '\\?\C:\Windows\system32\inetsrv\config\applicationHost.config'

If so, can you send me the results of the following command-lines (you have to run elevated)?
ICACLS %systemdrive%\inetpub\temp\appPools
ICACLS %systemdrive%\inetpub\temp\appPools\*
ICACLS %systemdrive%\inetpub\wwwroot
NET START

thanks

Error 503 after upgrading to Vista SP1

Tomas Vercetti — Mon, 10 Mar 2008 11:23:20 GMT

After installation of SP1 on my Vista 64 I began to receive "HTTP Error 503. The service is unavailable." The DefaultAppPool dies after each request attempt. If it matters I have VS 2008 installed.

The eventID of IIS-W3SVC-WP is 2276 in the “Application” windows event log. Error code is 80070005 (ERROR_ACCESS_DENIED). When I click IIS Manager -> Sites -> Default Web Site -> Basic Settings -> Test Settings I get the following results:

Authentication - Pass-through authentication (DefaultAppPool:NetworkService). Details: The application pool identity is valid;

Authorization - Cannot verify access to path (C:\inetpub\wwwroot). Details: The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read access to the physical path. Then test these settings again.

As in the post http://forums.iis.net/p/1132975/1803211.aspx#1803211 if I give a permissions for the Network Service user to applicationHost.config AND to the "C:\inetpub\temp\appPools" IIS seems working. But the error about "Authorization - Cannot verify access to path (C:\inetpub\wwwroot)" persists even if I give the full permissions for NetworkService and IIS_IUSRS users to the "C:\inetpub\wwwroot". Solution supposed in the abovementioned post doesn't work.

How can it be solved?

I want to add some notes:

1. After installation of VS 2008 I had a problem installing SP1 because of "Windows Event Log" couldn't be started - "Error 5: Access is denied." Solved accordingly to http://channel9.msdn.com/ShowPost.aspx?PostID=379459

2. Error installing "Web Providers" for MySQL Connector.NET 5.2.1 after installing SP1. "C:\Windows\\Microsoft.NET\Framework\v2.0.50727\installUtil.exe" used in installation script returns error. MainEngineThread is returning 1603. It MAY BE the same error with permissions.

3. And IIS: 80070005 (ERROR_ACCESS_DENIED).

Seems suspicious...

Thanks in advance!