IIS 7 and Above
IIS Application pools stops if Load User Profile = True - RPC_S_SERVE...
Last post Jan 10, 2018 07:18 AM by Yuk Ding
Jan 03, 2018 07:44 AM|Candela32|LINK
I have a strange problem.
In IIS and under our application pool we used a setting called "Load User Profile" = Y. This has stopped working for some weeks back.
The Application Pool can be started with tis setting set to true but when someone browse the web site related to this application pool the APP pool changes state to stopped. (This issue is solved if change Load User profile to False, but we need it to be "True").
When this happens I see some events in the eventlog:
Event ID: 5022 "The windows process activation service failed to create a worker process for the application pool XXX. The data field conatins the error number
Followed by Critical event id:
Event id: 5002 Application Pool "XXX" is being automatically disabled due to series of failures in the process(es) serving the application pool.
This is the data I see in the events 5022:
I used err.exe to find more info about fault and this is what I got:
# as an HRESULT: Severity: FAILURE (1), Facility: 0x7, Code 0x6ba
# for hex 0x6ba / decimal 1722 :
# The RPC server is unavailable.
# 2 matches found for "800706BA"
What I have tried:
Another account in the application pool
Restarted server twice.
Stopped App_pool - changed serttings - IIS reset - Started App pool.
Local firewall disabled.
Tried this from another server in same domain: Get-WmiObject Win32_ComputerSystem –ComputerName "server name" and I recieved data. (This means RPC works?)
If someone could help me with this issue I would be more than happy.
Thanks in advance.
Jan 04, 2018 02:28 AM|Yuk Ding|LINK
The error message RPC_S_SERVER_UNAVAILABLE mean that the IIS admin service has stopped. So you could enable the service with the command line:
net start iisadmin
In addition, if you enable the user profiler crash the IIS website, then you need to grant application pool identity and authenticated user read/write permission to C:\Users\<apppool name>.
Have you tried to set the application pool identity to local system?
Please use process monitor the monitor the w3wp.exe
Jan 05, 2018 09:14 AM|Candela32|LINK
Thanks for your answer.
The IISAdmin process is running.
Regarding read/write permission I think this is correct as this has worked earlier but not after a reboot of server.
What do you mean by "you need to grant application pool identity and authenticated user read/write permission to C:\Users\<apppool name>." How do I do/check this?
I have tried Process monitor and during the time the Application pools crashes I do not see any events related to w3wp or iisadmin PID but I do find this which maybe is interesting?
Result: NAME NOT FOUND
Path: HKLM\System\CurrentControlSet\Services\WAS\"portal name"
Desired Access: Read
Command line: C:\WINDOWS\system32\svchost.exe -k iissvcs
This occurs 10 times in process monitor, the same amount of times and the same time the event in event viewer happens.
Jan 09, 2018 09:11 AM|Yuk Ding|LINK
Have you tried to grant the permission for these registry key?
Jan 09, 2018 11:35 AM|Candela32|LINK
The problem is that the path mentioned in ProcessMonitor (HKLM\System\CurrentControlSet\Services\WAS\"portal name") is not in the registry. It is missing. Its empty under HKLM\System\CurrentControlSet\Services\WAS\
But the folder /WAS has Administrator group as Full control permissions and user running the App_pool is member of Adminstrator group.
Jan 10, 2018 07:18 AM|Yuk Ding|LINK
It is not empty under HKLM\System\CurrentControlSet\Services\WAS\ on my side. So did you miss some registry key? What about reinstall the windows process activation service?
In addition, now that it is a worker process crash, are you sure the w3wp.exe have no error in worker process?