Application pool 'DefaultAppPool' is being automatically disabled
Ok, this error showed up yesterday on my 2003 server. The only thing that has changed is that we were bombarded on Tuesday night with updates. A little background here, I am utilising Internet Printing and I have an internal webpage that users can browse to and connect to printers. I have this setup on two seperate servers and the other (Server 2003 Domain Controller) works fine.
When you browse to the "Print" site..you get the "Service Unavailable" error. I read and researched all day yesterday and it appears it is hard to nail down the direct cause of this error. The Event ID's are 1002 & 1009. These are the things I looked at yesterday
1. Verified all permissions for IIS, checked registry via http://support.microsoft.com/default.aspx?scid=kb;en-us;812614
2. Checked working servers setup (everything matched)
I just found this http://support.microsoft.com/kb/885654/en-us and I am going to look into it, I will update this thread should I run across something but I wanted to pose this question to the experts here.
I'm hoping I don't have to completely rebuild IIS. *crosses fingers*
When you browse to the "Print" site..you get the "Service Unavailable" error. I read and researched all day yesterday and it appears it is hard to nail down the direct cause of this error. The Event ID's are 1002 & 1009. These are the things I looked at yesterday
1. Verified all permissions for IIS, checked registry via http://support.microsoft.com/default.aspx?scid=kb;en-us;812614
2. Checked working servers setup (everything matched)
I just found this http://support.microsoft.com/kb/885654/en-us and I am going to look into it, I will update this thread should I run across something but I wanted to pose this question to the experts here.
I'm hoping I don't have to completely rebuild IIS. *crosses fingers*
Kyle Abrahams, PMP
Confirm you're running the app pool under network service and not some service account?
ASKER
Yes, everything is running under normal conditions. Network Service, this is not a DC (although the working server is a DC). My laptop crashed this morning here at work..so not a good start to the day but I almost have it back up and running and will continue to troubleshooting.
Post the full event logs for these events. There are loads of 1002, etc errors
ASKER
Here are the Event Logs:
Event Type: Error
Event Source: W3SVC
Event Category: None
Event ID: 1002
Date: 12/9/2009
Time: 8:24:16 PM
User: N/A
Computer: COMPUTERNAME
Description:
Application pool 'DefaultAppPool' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/9/2009
Time: 8:24:16 PM
User: N/A
Computer: COMPUTERNAME
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '2240'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: W3SVC
Event Category: None
Event ID: 1002
Date: 12/9/2009
Time: 8:24:16 PM
User: N/A
Computer: COMPUTERNAME
Description:
Application pool 'DefaultAppPool' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/9/2009
Time: 8:24:16 PM
User: N/A
Computer: COMPUTERNAME
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '2240'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
ASKER
The event log looks like this, I see a series of warnings, then the Error
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/10/2009
Time: 11:19:47 AM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '772'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/10/2009
Time: 11:19:48 AM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '3916'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/10/2009
Time: 11:19:48 AM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '3824'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/10/2009
Time: 11:19:48 AM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '3904'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/10/2009
Time: 11:19:48 AM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '1884'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: W3SVC
Event Category: None
Event ID: 1002
Date: 12/10/2009
Time: 11:19:48 AM
User: N/A
Computer:
Description:
Application pool 'DefaultAppPool' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/10/2009
Time: 11:19:47 AM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '772'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/10/2009
Time: 11:19:48 AM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '3916'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/10/2009
Time: 11:19:48 AM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '3824'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/10/2009
Time: 11:19:48 AM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '3904'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 12/10/2009
Time: 11:19:48 AM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '1884'. The process exit code was '0xffffffff'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: W3SVC
Event Category: None
Event ID: 1002
Date: 12/10/2009
Time: 11:19:48 AM
User: N/A
Computer:
Description:
Application pool 'DefaultAppPool' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Does a basic page work for this site?
DO you have more than 1 website? / this is the only site/app in the default app pool
DO you have more than 1 website? / this is the only site/app in the default app pool
ASKER
ASKER
Ok, now this is getting ridiculous...this is now affecting my Utility server (Windows 2003 Server R2) as well.
I pulled the logfile on my main server and you can see AppPool bomb out...
I pulled the logfile on my main server and you can see AppPool bomb out...
2009-12-08 23:33:40 192.168.120.50 4706 192.168.123.153 80 - - - - - Timer_ConnectionIdle -
2009-12-08 23:40:40 192.168.120.31 2099 192.168.123.153 80 - - - - - Timer_ConnectionIdle -
2009-12-08 23:56:00 192.168.120.31 2337 192.168.123.153 80 - - - - - Timer_ConnectionIdle -
#Software: Microsoft HTTP API 1.0
#Version: 1.0
#Date: 2009-12-09 12:33:25
#Fields: date time c-ip c-port s-ip s-port cs-version cs-method cs-uri sc-status s-siteid s-reason s-queuename
2009-12-09 12:33:25 192.168.120.124 1181 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 13:00:06 10.10.15.90 1115 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 13:28:51 192.168.120.94 1141 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 13:33:34 192.168.120.16 1155 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 13:33:40 192.168.120.21 1031 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 13:34:52 192.168.120.21 1111 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 13:40:31 192.168.120.144 1090 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 13:52:15 10.10.15.151 1088 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 13:52:54 192.168.120.50 4762 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5fHP4345~5f02/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 13:53:35 192.168.120.50 4824 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5fHP4345~5f02/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 14:04:37 192.168.120.117 1117 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 14:11:47 10.10.15.107 4211 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 14:16:33 192.168.122.117 1116 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 14:21:46 10.10.15.44 1134 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 14:27:05 192.168.122.117 1238 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5f4730~5f02/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 14:28:17 192.168.122.117 1279 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5f4730~5f02/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 14:29:47 192.168.122.117 1315 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5f4730~5f02/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 14:31:09 192.168.122.117 1343 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5f4730~5f02/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 14:47:33 192.168.122.117 1360 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5f4730~5f02/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 14:57:05 10.10.15.115 1118 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 15:04:55 10.10.15.131 1085 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 15:05:00 192.168.122.117 1371 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5f4730~5f02/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 15:07:44 192.168.122.117 1374 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5f4730~5f02/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 15:09:51 192.168.120.51 49756 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5f4730~5f02/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 15:17:26 192.168.120.112 1189 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
2009-12-09 15:26:41 192.168.120.85 4574 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5fHP8060/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 15:26:43 192.168.120.85 4575 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5fHP8060/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 15:26:43 192.168.120.85 4576 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5fHP5200/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 15:26:43 192.168.120.85 4577 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5fHP5200/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 15:28:00 192.168.120.85 4589 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5fHP8060/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 15:28:12 192.168.120.85 4590 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5fHP8060/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 15:28:12 192.168.120.85 4591 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5fHP5200/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 15:28:12 192.168.120.85 4592 192.168.123.153 80 HTTP/1.1 POST /printers/US~5f1303~5fHP5200/.printer 503 1 AppOffline DefaultAppPool
2009-12-09 15:48:26 192.168.120.144 1085 192.168.123.153 80 HTTP/1.1 OPTIONS / 503 1 AppOffline DefaultAppPool
This is being caused by one of the Windows updates that was installed on Tuesday as you mentioned. If you remove it for now, your websites will work.
Can be removed from Add/Remove programs etc.
I did some looking on the web after seeing this issue reported again, and others have also mentioned one of the updates breaks IIS. This link has further details, plus the updates that were included from Tuesday:
http://serverfault.com/questions/93049/why-does-december-8th-2009-patch-tuesday-kill-iis-in-windows-server-2003
Can be removed from Add/Remove programs etc.
I did some looking on the web after seeing this issue reported again, and others have also mentioned one of the updates breaks IIS. This link has further details, plus the updates that were included from Tuesday:
http://serverfault.com/questions/93049/why-does-december-8th-2009-patch-tuesday-kill-iis-in-windows-server-2003
ASKER
You know, this is a wild goose chase so I decided to backup/reinstall IIS on both servers. Bada-Bing-Badaboom...it's all up and running fine again. Thanks
I have attached the list of updates from 12/9/09 that likely led to this failure
Shady-MS-Updates.JPG
I have attached the list of updates from 12/9/09 that likely led to this failure
Shady-MS-Updates.JPG
ASKER
Ok, this issue is back this morning on both boxes...I am going to read the link provided above and see if removing the updates will help..this is ridiculous.
ASKER
Ok, this issue is back this morning on both boxes...I am going to read the link provided above and see if removing the updates will help..this is ridiculous.
Re-installing Service Pack 2 also resolves this....
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Ok, I followed the KB article, reinstalled SP2 on both servers...all seems ok thus far.
I knew it was the updates, it was the only thing that had changed recently. Microsoft = Job Security! lol
I knew it was the updates, it was the only thing that had changed recently. Microsoft = Job Security! lol