# Why does my IIS metabase (metabase.xml) become corrupt everytime I reboot?

Hi, I am running Windows 2003 Small Business Server SP2. For the past 2 weeks, everytime my server is restarted, the IIS metabase becomes corrupt. It is the metabase.xml in particular that is corrupt. If I open the XML file, I can clearly see that there are garbage characters in the file, rather than just the text as in the regular file.

I can restore the file from backup, restart IIS and everything is fine, until I reboot again.. Any idea why this happening?

Note: if I do an IISRESET, this does not occur. Seems to only happen on reboot -- I can see that the modified timestamp on the file matches the time that the system is coming back up and services are starting..

Thanks!
Jason
SBSMicrosoft IIS Web Server

Last Comment
jbridges9

8/22/2022 - Mon
- -

You can use filemon (http://technet.microsoft.com/en-us/sysinternals/bb896642.aspx) to find the process that corrupts the metabase. Also you can create a several copies of the metabase during system shutdowning and booting.
Paulo Pimenta

How are you opening and saving the metabase.xml file? With wordpad? If so, Wordpad may be creating those characters, since it is a RTF editor. Try to edit it with Notepad, take out the special characters and save it.

Cheers,
PP/LMS
jbridges9

Alex-

How would I use Filemon to detect the corrupting process?

Thanks.
Your help has saved me hundreds of hours of internet surfing.
fblack61
jbridges9

Paul -

I haven't been editing it, but I use EditPlus to open the file for viewing. The corrupt file is 382KB, while the good copy is 383KB - so it seems something is being removed/replaced w/ the ASCII characters.
- -

Open filemon, set the "Include:" field to "metabase.xml", check the "Log Writes" checkbox and click Ok.
Then start/stop the IIS and check if any process changes it.
You can add "C:\Path\to\filemon -q" to the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run key and reboot - it will be started on windows startup and watch the metabase.xml.
jbridges9

Forgive me for being a novice with Filemon - I opened it and set the filter to metabase.xml and stop/started IIS. I can see the event briefly appear in Filemon and then go away before I can see what it is. Is there a way that I can redirect the output, or somehow save the output? I have my history depth set to 0 for unlimited.
Get an unlimited membership to EE for less than $4 a week. Unlimited question asking, solutions, articles and more. - - It is bug, it should not delete the records. Try to start it again with default options (put * in Include and check all the checkboxes). There are a few screenshots: http://www.softpedia.com/progScreenshots/Filemon-Screenshot-3365.html rkapetroleum Jason, have you been able to resolve this issue? We too are having the same issue on 5-6 servers on our network. Any chance you've recently installed/removed Symantec Endpoint Protection? ASKER jbridges9 Hi, I haven't resolved the issue yet - haven't had time to troubleshoot. I haven't installed Endpoint Protection, but we do have Symantec Backup Exec System Recovery installed.. I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst William Peck rkapetroleum Interesting, we too are running Backup Exec System Recovery 7.03.24709 as well as Backup Exec 11d. Care to work on this together? bbanis2k I am having the same issue. The server is SBS 2003...with guess what...Symantec System Recovery! I will consider removing this product and seeing if this resolves the issue. Does the Symantec product perform the same job as Volume Shadow Copies? ASKER CERTIFIED SOLUTION rkapetroleum Log in or sign up to see answer Become an EE member today7-DAY FREE TRIAL Members can start a 7-Day Free trial then enjoy unlimited access to the platform or Learn why we charge membership fees We get it - no one likes a content blocker. Take one extra minute and find out why we block content. Not exactly the question you had in mind? Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions. ASKER jbridges9 RKA: Thanks for the comment. That seems like something Symantec would say -- Unfortunately I can't restart IIS each time. However, the past 10 times or so I haven't had the problem.. Get an unlimited membership to EE for less than$4 a week.
Unlimited question asking, solutions, articles and more.
rkapetroleum

jbridges9: what did you to do stop the problem?