troubleshooting Question

Mystery process trying to start IISAdmin. How to identify?

Avatar of bctek
bctek asked on
OS Security
2 Comments1 Solution2116 ViewsLast Modified:
I have disabled IIS_Admin and WWW Publishing service.  I do not want IIS to start on my server (Win 2000).
Now I am getting this in my event log:

DCOM Event# 10005
DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. " attempting to start the service IISADMIN with arguments "" in order to run the server:

W3Ctrs Event #1003
"Unable to query the W3SVC (HTTP) service performance data. The error code returned by the service is data DWORD 0."

IISInfoCtrs Event #1003
"Unable to query the IIS Info service performance data. The error code returned by the service is data DWORD 0. "

the only program I have running on this server that I want to keep running is ISA server 2000, along with RRAS and DNS services enabled (it is multihomed).  

But neither of those should need IIS....?

how can I find out what is attempting to use IIS on this machine?  It seems to me something is trying to use IIS, but since I have the IIS services disabled, its generating errors
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 2 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 2 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros