Nowcom
asked on
Exchange 2k3 IIS crashing...
Exchange 2k3 active pasive cluster...seems every six hours or so IIS would crashed....
I would get these events on my applications log:
Event Type: Error
Event Source: Microsoft Exchange Server
Event Category: None
Event ID: 1000
Date: 9/6/2004
Time: 4:22:05 PM
User: N/A
Computer: EXCH2B
Description:
Faulting application inetinfo.exe, version 6.0.3790.0, stamp 3e8000f7, faulting module unknown, version 0.0.0.0, stamp 00000000, debug? 0, fault address 0xb4df9645.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
System log:
Event Type: Error
Event Source: ClusSvc
Event Category: Failover Mgr
Event ID: 1069
Date: 9/7/2004
Time: 8:57:39 AM
User: N/A
Computer: EXCH2A
Description:
Cluster resource 'Exchange Routing Service Instance (EXCHANGE2)' in Resource Group 'Exchange I' failed.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: ClusSvc
Event Category: Failover Mgr
Event ID: 1069
Date: 9/7/2004
Time: 8:57:39 AM
User: N/A
Computer: EXCH2A
Description:
Cluster resource 'SMTP Virtual Server Instance 1 (EXCHANGE2)' in Resource Group 'Exchange I' failed.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: ClusSvc
Event Category: Failover Mgr
Event ID: 1069
Date: 9/7/2004
Time: 8:57:39 AM
User: N/A
Computer: EXCH2A
Description:
Cluster resource 'Exchange POP3 Server (EXCHANGE2)' in Resource Group 'Exchange I' failed.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 9/7/2004
Time: 8:57:39 AM
User: N/A
Computer: EXCH2A
Description:
The IIS Admin Service service terminated unexpectedly. It has done this 28 time(s). The following corrective action will be taken in 1 milliseconds: Run the configured recovery program.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 9/7/2004
Time: 8:57:39 AM
User: N/A
Computer: EXCH2A
Description:
A process serving application pool 'ExchangeApplicationPool' terminated unexpectedly. The process id was '3020'. The process exit code was '0xc0000005'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Any Idea???
I would get these events on my applications log:
Event Type: Error
Event Source: Microsoft Exchange Server
Event Category: None
Event ID: 1000
Date: 9/6/2004
Time: 4:22:05 PM
User: N/A
Computer: EXCH2B
Description:
Faulting application inetinfo.exe, version 6.0.3790.0, stamp 3e8000f7, faulting module unknown, version 0.0.0.0, stamp 00000000, debug? 0, fault address 0xb4df9645.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
System log:
Event Type: Error
Event Source: ClusSvc
Event Category: Failover Mgr
Event ID: 1069
Date: 9/7/2004
Time: 8:57:39 AM
User: N/A
Computer: EXCH2A
Description:
Cluster resource 'Exchange Routing Service Instance (EXCHANGE2)' in Resource Group 'Exchange I' failed.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: ClusSvc
Event Category: Failover Mgr
Event ID: 1069
Date: 9/7/2004
Time: 8:57:39 AM
User: N/A
Computer: EXCH2A
Description:
Cluster resource 'SMTP Virtual Server Instance 1 (EXCHANGE2)' in Resource Group 'Exchange I' failed.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: ClusSvc
Event Category: Failover Mgr
Event ID: 1069
Date: 9/7/2004
Time: 8:57:39 AM
User: N/A
Computer: EXCH2A
Description:
Cluster resource 'Exchange POP3 Server (EXCHANGE2)' in Resource Group 'Exchange I' failed.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 9/7/2004
Time: 8:57:39 AM
User: N/A
Computer: EXCH2A
Description:
The IIS Admin Service service terminated unexpectedly. It has done this 28 time(s). The following corrective action will be taken in 1 milliseconds: Run the configured recovery program.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 9/7/2004
Time: 8:57:39 AM
User: N/A
Computer: EXCH2A
Description:
A process serving application pool 'ExchangeApplicationPool' terminated unexpectedly. The process id was '3020'. The process exit code was '0xc0000005'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Any Idea???
ASKER
Thanks for the quick response BNettles73...Is there a way to test the IIS Metabase for corruption?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks BNettles73!!! Yes, I have excluded all exchange and all IIS from the AV...Once I recreated SMTP Quene DIR on Exchange everything works fine...no more error message...Thanks for the help.
Make sure your AV software is not scanning Exchange or IIS directories ...