IIS Services Stop Automatically at 4 AM
in [IIS]
|
Prev: IIS start attemp faild. Admin Services is disabled. Error 13
Next: The state server has closed an expired TCP/IP connection
From: Mike Myers on 23 Apr 2010 10:29 Hi Group This has happened twice now, the last time being this morning. For no apparent reason the IIS service on the server just stops. I have examined everything in the log and the only thing that shows is from the System Log. For each of the IIS services, in this order W3SVC, SMTP, NNTP, FTP, HTTP SSL and IIS, a service control manager log is created saying: Event Type: Information Event Source: Service Control Manager Event Category: None Event ID: 7035 Date: 23/04/2010 Time: 04:00:15 User: NT AUTHORITY\SYSTEM Computer: AWSWS2 Description: The World Wide Web Publishing Service service was successfully sent a stop control. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. The next message is then that it stopped ... Event Type: Information Event Source: Service Control Manager Event Category: None Event ID: 7036 Date: 23/04/2010 Time: 04:00:19 User: N/A Computer: AWSWS2 Description: The World Wide Web Publishing Service service entered the stopped state. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. How on earth can I find out who or what is causing this to happen! I've checked our scheduled tasks, nothing runs at 04:00, and we don't do any service stopping or anything like that anyway. There's only two people with access to the machine and it's neither of us because we're in bed! Many thanks Mike
From: Adrienne Boswell on 26 Apr 2010 02:58 On Apr 23, 7:29 am, "Mike Myers" <bookham_measu...(a)yahoo.com> wrote: > Hi Group > > This has happened twice now, the last time being this morning. For no > apparent reason the IIS service on the server just stops. I have examined > everything in the log and the only thing that shows is from the System Log. > For each of the IIS services, in this order W3SVC, SMTP, NNTP, FTP, HTTP SSL > and IIS, a service control manager log is created saying: > > Event Type: Information > Event Source: Service Control Manager > Event Category: None > Event ID: 7035 > Date: 23/04/2010 > Time: 04:00:15 > User: NT AUTHORITY\SYSTEM > Computer: AWSWS2 > Description: > The World Wide Web Publishing Service service was successfully sent a stop > control. > > For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp. > > The next message is then that it stopped ... > > Event Type: Information > Event Source: Service Control Manager > Event Category: None > Event ID: 7036 > Date: 23/04/2010 > Time: 04:00:19 > User: N/A > Computer: AWSWS2 > Description: > The World Wide Web Publishing Service service entered the stopped state. > > For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp. > > How on earth can I find out who or what is causing this to happen! > > I've checked our scheduled tasks, nothing runs at 04:00, and we don't do any > service stopping or anything like that anyway. There's only two people with > access to the machine and it's neither of us because we're in bed! > > Many thanks > > Mike You said you checked "our" scheduled tasks. Did you check ALL the scheduled tasks? There might be something that some program is doing at 0400 that it thinks it has to stop IIS.
From: Mike Myers on 27 Apr 2010 12:01 There are no tasks running that would stop any service. The only thing I can think of is Windows Update. Now I see, it is scheduled to "Automatic" Every Friday at 4 AM, but I wonder why it's stopping/not working. I shall install and reboot manually. "Adrienne Boswell" <arbpen(a)yahoo.com> wrote in message news:792e82f2-d130-499b-ba9d-820db3329765(a)w20g2000prm.googlegroups.com... On Apr 23, 7:29 am, "Mike Myers" <bookham_measu...(a)yahoo.com> wrote: > Hi Group > > This has happened twice now, the last time being this morning. For no > apparent reason the IIS service on the server just stops. I have examined > everything in the log and the only thing that shows is from the System > Log. > For each of the IIS services, in this order W3SVC, SMTP, NNTP, FTP, HTTP > SSL > and IIS, a service control manager log is created saying: > > Event Type: Information > Event Source: Service Control Manager > Event Category: None > Event ID: 7035 > Date: 23/04/2010 > Time: 04:00:15 > User: NT AUTHORITY\SYSTEM > Computer: AWSWS2 > Description: > The World Wide Web Publishing Service service was successfully sent a stop > control. > > For more information, see Help and Support Center > athttp://go.microsoft.com/fwlink/events.asp. > > The next message is then that it stopped ... > > Event Type: Information > Event Source: Service Control Manager > Event Category: None > Event ID: 7036 > Date: 23/04/2010 > Time: 04:00:19 > User: N/A > Computer: AWSWS2 > Description: > The World Wide Web Publishing Service service entered the stopped state. > > For more information, see Help and Support Center > athttp://go.microsoft.com/fwlink/events.asp. > > How on earth can I find out who or what is causing this to happen! > > I've checked our scheduled tasks, nothing runs at 04:00, and we don't do > any > service stopping or anything like that anyway. There's only two people > with > access to the machine and it's neither of us because we're in bed! > > Many thanks > > Mike You said you checked "our" scheduled tasks. Did you check ALL the scheduled tasks? There might be something that some program is doing at 0400 that it thinks it has to stop IIS.
From: Mike Myers on 27 Apr 2010 12:03
Seems this KB is the problem. KB976323 http://codepolice.net/2010/04/19/ms10-024-and-kb976323-will-reset-your-iis-smtp-settings/ "Adrienne Boswell" <arbpen(a)yahoo.com> wrote in message news:792e82f2-d130-499b-ba9d-820db3329765(a)w20g2000prm.googlegroups.com... On Apr 23, 7:29 am, "Mike Myers" <bookham_measu...(a)yahoo.com> wrote: > Hi Group > > This has happened twice now, the last time being this morning. For no > apparent reason the IIS service on the server just stops. I have examined > everything in the log and the only thing that shows is from the System > Log. > For each of the IIS services, in this order W3SVC, SMTP, NNTP, FTP, HTTP > SSL > and IIS, a service control manager log is created saying: > > Event Type: Information > Event Source: Service Control Manager > Event Category: None > Event ID: 7035 > Date: 23/04/2010 > Time: 04:00:15 > User: NT AUTHORITY\SYSTEM > Computer: AWSWS2 > Description: > The World Wide Web Publishing Service service was successfully sent a stop > control. > > For more information, see Help and Support Center > athttp://go.microsoft.com/fwlink/events.asp. > > The next message is then that it stopped ... > > Event Type: Information > Event Source: Service Control Manager > Event Category: None > Event ID: 7036 > Date: 23/04/2010 > Time: 04:00:19 > User: N/A > Computer: AWSWS2 > Description: > The World Wide Web Publishing Service service entered the stopped state. > > For more information, see Help and Support Center > athttp://go.microsoft.com/fwlink/events.asp. > > How on earth can I find out who or what is causing this to happen! > > I've checked our scheduled tasks, nothing runs at 04:00, and we don't do > any > service stopping or anything like that anyway. There's only two people > with > access to the machine and it's neither of us because we're in bed! > > Many thanks > > Mike You said you checked "our" scheduled tasks. Did you check ALL the scheduled tasks? There might be something that some program is doing at 0400 that it thinks it has to stop IIS. |