Error 1002 - IIS 6 being automatically disabled...

TheMSsForum.com: The Microsoft Software Forum

Hey all,

Not the brightest on IIS 6. One of my webservers is getting this error in
the event logs. The developers have been playing around and would like to
get some input on how to troubleshoot this issue. I have the concerning
error just below and then the series of errors before this one. Once the
service is stopped, everyone gets "Service Unavailable" and I have to reset
the website and all is good again. Please advise!!!

Event Type: Error
Event Source: W3SVC
Event Category: None
Event ID: 1002
Date: 2/22/2005
Time: 3:29:44 PM
User: N/A
Computer: NCWECZWEB027
Description:
Application pool 'DefaultAppPool' is being automatically disabled due to a
series of failures in the process(es) serving that application pool.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp

-----------------------------------------------------------
ALL THE LOGS
-----------------------------------------------------------

Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 2/22/2005
Time: 3:09:10 PM
User: N/A
Computer: NCWECZWEB027
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly.
The process id was '17720'. The process exit code was '0x80'.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1011
Date: 2/22/2005
Time: 3:09:33 PM
User: N/A
Computer: NCWECZWEB027
Description:
A process serving application pool 'DefaultAppPool' suffered a fatal
communication error with the World Wide Web Publishing Service. The process
id was '19096'. The data field contains the error number.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 07 80 m..Â?


Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 2/22/2005
Time: 3:13:01 PM
User: N/A
Computer: NCWECZWEB027
Description:
Application popup: Idle timer expired : Session has been idle over its time
limit.
It will be disconnected in 2 minutes.
Press any key now to continue session.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1011
Date: 2/22/2005
Time: 3:27:26 PM
User: N/A
Computer: NCWECZWEB027
Description:
A process serving application pool 'DefaultAppPool' suffered a fatal
communication error with the World Wide Web Publishing Service. The process
id was '19632'. The data field contains the error number.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 07 80 m..Â?


Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1011
Date: 2/22/2005
Time: 3:28:44 PM
User: N/A
Computer: NCWECZWEB027
Description:
A process serving application pool 'DefaultAppPool' suffered a fatal
communication error with the World Wide Web Publishing Service. The process
id was '18812'. The data field contains the error number.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 07 80 m..Â?


Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 2/22/2005
Time: 3:28:45 PM
User: N/A
Computer: NCWECZWEB027
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly.
The process id was '19616'. The process exit code was '0x80'.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 2/22/2005
Time: 3:29:07 PM
User: N/A
Computer: NCWECZWEB027
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly.
The process id was '19136'. The process exit code was '0x80'.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1011
Date: 2/22/2005
Time: 3:29:44 PM
User: N/A
Computer: NCWECZWEB027
Description:
A process serving application pool 'DefaultAppPool' suffered a fatal
communication error with the World Wide Web Publishing Service. The process
id was '17712'. The data field contains the error number.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 07 80 m..Â?

-------------------------------------------------------

Thanks in advance!

Greg Williams, MCSE
Top

Re: Error 1002 - IIS 6 being automatically disabled... by John

John
Wed Feb 23 08:46:00 CST 2005

On Tue, 22 Feb 2005 13:15:02 -0800, "Greg williams"
<Gregwilliams@discussions.microsoft.com> wrote:

>Hey all,
>
>Not the brightest on IIS 6. One of my webservers is getting this error in
>the event logs. The developers have been playing around and would like to
>get some input on how to troubleshoot this issue. I have the concerning
>error just below and then the series of errors before this one. Once the
>service is stopped, everyone gets "Service Unavailable" and I have to reset
>the website and all is good again. Please advise!!!

Looks like some code in the one of the sites is mucking things up and
resetting IIS. Do you have multiple sites on the box?

John Cesta

The CPU Checker - Monitors your CPU % while you sleep
LogFileManager - IIS LogFile Management Tool
WebPageChecker - Helps Maintain Server UpTime
DomainReportIt PRO - Helps Rebuild IIS
http://www.serverautomationtools.com


>
>Event Type: Error
>Event Source: W3SVC
>Event Category: None
>Event ID: 1002
>Date: 2/22/2005
>Time: 3:29:44 PM
>User: N/A
>Computer: NCWECZWEB027
>Description:
>Application pool 'DefaultAppPool' is being automatically disabled due to a
>series of failures in the process(es) serving that application pool.
>
>For more information, see Help and Support Center at
>http://go.microsoft.com/fwlink/events.asp
>
>-----------------------------------------------------------
>ALL THE LOGS
>-----------------------------------------------------------
>
>Event Type: Warning
>Event Source: W3SVC
>Event Category: None
>Event ID: 1009
>Date: 2/22/2005
>Time: 3:09:10 PM
>User: N/A
>Computer: NCWECZWEB027
>Description:
>A process serving application pool 'DefaultAppPool' terminated unexpectedly.
>The process id was '17720'. The process exit code was '0x80'.
>
>For more information, see Help and Support Center at
>http://go.microsoft.com/fwlink/events.asp.
>
>
>Event Type: Warning
>Event Source: W3SVC
>Event Category: None
>Event ID: 1011
>Date: 2/22/2005
>Time: 3:09:33 PM
>User: N/A
>Computer: NCWECZWEB027
>Description:
>A process serving application pool 'DefaultAppPool' suffered a fatal
>communication error with the World Wide Web Publishing Service. The process
>id was '19096'. The data field contains the error number.
>
>For more information, see Help and Support Center at
>http://go.microsoft.com/fwlink/events.asp.
>Data:
>0000: 6d 00 07 80 m..?
>
>
>Event Type: Information
>Event Source: Application Popup
>Event Category: None
>Event ID: 26
>Date: 2/22/2005
>Time: 3:13:01 PM
>User: N/A
>Computer: NCWECZWEB027
>Description:
>Application popup: Idle timer expired : Session has been idle over its time
>limit.
>It will be disconnected in 2 minutes.
>Press any key now to continue session.
>
>For more information, see Help and Support Center at
>http://go.microsoft.com/fwlink/events.asp.
>
>
>Event Type: Warning
>Event Source: W3SVC
>Event Category: None
>Event ID: 1011
>Date: 2/22/2005
>Time: 3:27:26 PM
>User: N/A
>Computer: NCWECZWEB027
>Description:
>A process serving application pool 'DefaultAppPool' suffered a fatal
>communication error with the World Wide Web Publishing Service. The process
>id was '19632'. The data field contains the error number.
>
>For more information, see Help and Support Center at
>http://go.microsoft.com/fwlink/events.asp.
>Data:
>0000: 6d 00 07 80 m..?
>
>
>Event Type: Warning
>Event Source: W3SVC
>Event Category: None
>Event ID: 1011
>Date: 2/22/2005
>Time: 3:28:44 PM
>User: N/A
>Computer: NCWECZWEB027
>Description:
>A process serving application pool 'DefaultAppPool' suffered a fatal
>communication error with the World Wide Web Publishing Service. The process
>id was '18812'. The data field contains the error number.
>
>For more information, see Help and Support Center at
>http://go.microsoft.com/fwlink/events.asp.
>Data:
>0000: 6d 00 07 80 m..?
>
>
>Event Type: Warning
>Event Source: W3SVC
>Event Category: None
>Event ID: 1009
>Date: 2/22/2005
>Time: 3:28:45 PM
>User: N/A
>Computer: NCWECZWEB027
>Description:
>A process serving application pool 'DefaultAppPool' terminated unexpectedly.
>The process id was '19616'. The process exit code was '0x80'.
>
>For more information, see Help and Support Center at
>http://go.microsoft.com/fwlink/events.asp.
>
>
>Event Type: Warning
>Event Source: W3SVC
>Event Category: None
>Event ID: 1009
>Date: 2/22/2005
>Time: 3:29:07 PM
>User: N/A
>Computer: NCWECZWEB027
>Description:
>A process serving application pool 'DefaultAppPool' terminated unexpectedly.
>The process id was '19136'. The process exit code was '0x80'.
>
>For more information, see Help and Support Center at
>http://go.microsoft.com/fwlink/events.asp.
>
>
>Event Type: Warning
>Event Source: W3SVC
>Event Category: None
>Event ID: 1011
>Date: 2/22/2005
>Time: 3:29:44 PM
>User: N/A
>Computer: NCWECZWEB027
>Description:
>A process serving application pool 'DefaultAppPool' suffered a fatal
>communication error with the World Wide Web Publishing Service. The process
>id was '17712'. The data field contains the error number.
>
>For more information, see Help and Support Center at
>http://go.microsoft.com/fwlink/events.asp.
>Data:
>0000: 6d 00 07 80 m..?
>
>-------------------------------------------------------
>
>Thanks in advance!
>
>Greg Williams, MCSE

Top

Re: Error 1002 - IIS 6 being automatically disabled... by Kristofer

Kristofer
Wed Feb 23 14:01:16 CST 2005

Hi Greg,

There seems to be something wrong with the code that is running in
DefaultAppPool, which causes the application pool to disable itself,
because it cannot "fix" all the problems.

You should investigate the web applications that is set to use
DefaultAppPool, and see if they contain any coding errors. You might need
to isolate your web applications while doing this, to easier find the one
that is causing this to happen (DefaultAppPool is the default application
pool that is created, and used if you do not specify any other application
pool for your web applications).

Possibly causes can be bad drivers for database communication.

You can use IISState to find more information about why it is happening
for you:
http://www.iisfaq.com/default.aspx?view=P197

HTTPErr log file (%SYSTEMROOT%\System32\LogFiles\HTTPErr\) could also help
you troubleshoot this (to find out what request(s) caused the crash). Look
for requests before the 503s are returned.

Hope this helps you to find the cause of this.

Good Luck!

--
Regards,
Kristofer Gafvert
www.gafvert.info - My Articles and help
www.ilopia.com


Greg williams wrote:

> Hey all,
>
> Not the brightest on IIS 6. One of my webservers is getting this error
in
> the event logs. The developers have been playing around and would like
to
> get some input on how to troubleshoot this issue. I have the concerning
> error just below and then the series of errors before this one. Once the
> service is stopped, everyone gets "Service Unavailable" and I have to
reset
> the website and all is good again. Please advise!!!
>
> Event Type: Error
> Event Source: W3SVC
> Event Category: None
> Event ID: 1002
> Date: 2/22/2005
> Time: 3:29:44 PM
> User: N/A
> Computer: NCWECZWEB027
> Description:
> Application pool 'DefaultAppPool' is being automatically disabled due to
a
> series of failures in the process(es) serving that application pool.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp
>
> -----------------------------------------------------------
> ALL THE LOGS
> -----------------------------------------------------------
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1009
> Date: 2/22/2005
> Time: 3:09:10 PM
> User: N/A
> Computer: NCWECZWEB027
> Description:
> A process serving application pool 'DefaultAppPool' terminated
unexpectedly.
> The process id was '17720'. The process exit code was '0x80'.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1011
> Date: 2/22/2005
> Time: 3:09:33 PM
> User: N/A
> Computer: NCWECZWEB027
> Description:
> A process serving application pool 'DefaultAppPool' suffered a fatal
> communication error with the World Wide Web Publishing Service. The
process
> id was '19096'. The data field contains the error number.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 6d 00 07 80 m..Â?
>
>
> Event Type: Information
> Event Source: Application Popup
> Event Category: None
> Event ID: 26
> Date: 2/22/2005
> Time: 3:13:01 PM
> User: N/A
> Computer: NCWECZWEB027
> Description:
> Application popup: Idle timer expired : Session has been idle over its
time
> limit.
> It will be disconnected in 2 minutes.
> Press any key now to continue session.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1011
> Date: 2/22/2005
> Time: 3:27:26 PM
> User: N/A
> Computer: NCWECZWEB027
> Description:
> A process serving application pool 'DefaultAppPool' suffered a fatal
> communication error with the World Wide Web Publishing Service. The
process
> id was '19632'. The data field contains the error number.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 6d 00 07 80 m..Â?
>
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1011
> Date: 2/22/2005
> Time: 3:28:44 PM
> User: N/A
> Computer: NCWECZWEB027
> Description:
> A process serving application pool 'DefaultAppPool' suffered a fatal
> communication error with the World Wide Web Publishing Service. The
process
> id was '18812'. The data field contains the error number.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 6d 00 07 80 m..Â?
>
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1009
> Date: 2/22/2005
> Time: 3:28:45 PM
> User: N/A
> Computer: NCWECZWEB027
> Description:
> A process serving application pool 'DefaultAppPool' terminated
unexpectedly.
> The process id was '19616'. The process exit code was '0x80'.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1009
> Date: 2/22/2005
> Time: 3:29:07 PM
> User: N/A
> Computer: NCWECZWEB027
> Description:
> A process serving application pool 'DefaultAppPool' terminated
unexpectedly.
> The process id was '19136'. The process exit code was '0x80'.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1011
> Date: 2/22/2005
> Time: 3:29:44 PM
> User: N/A
> Computer: NCWECZWEB027
> Description:
> A process serving application pool 'DefaultAppPool' suffered a fatal
> communication error with the World Wide Web Publishing Service. The
process
> id was '17712'. The data field contains the error number.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 6d 00 07 80 m..Â?
>
> -------------------------------------------------------
>
> Thanks in advance!
>
> Greg Williams, MC
Top