Avatar of jbridges9
jbridges9Flag for United States of America asked on

Why does my IIS metabase (metabase.xml) become corrupt everytime I reboot?

Hi, I am running Windows 2003 Small Business Server SP2. For the past 2 weeks, everytime my server is restarted, the IIS metabase becomes corrupt. It is the metabase.xml in particular that is corrupt. If I open the XML file, I can clearly see that there are garbage characters in the file, rather than just the text as in the regular file.

I can restore the file from backup, restart IIS and everything is fine, until I reboot again.. Any idea why this happening?

Note: if I do an IISRESET, this does not occur. Seems to only happen on reboot -- I can see that the modified timestamp on the file matches the time that the system is coming back up and services are starting..


Thanks!
Jason
SBSMicrosoft IIS Web Server

Avatar of undefined
Last Comment
jbridges9

8/22/2022 - Mon
- -

You can use filemon (http://technet.microsoft.com/en-us/sysinternals/bb896642.aspx) to find the process that corrupts the metabase. Also you can create a several copies of the metabase during system shutdowning and booting.
Paulo Pimenta

How are you opening and saving the metabase.xml file? With wordpad? If so, Wordpad may be creating those characters, since it is a RTF editor. Try to edit it with Notepad, take out the special characters and save it.

Cheers,
PP/LMS
ASKER
jbridges9

Alex-

How would I use Filemon to detect the corrupting process?

Thanks.
Your help has saved me hundreds of hours of internet surfing.
fblack61
ASKER
jbridges9

Paul -

I haven't been editing it, but I use EditPlus to open the file for viewing. The corrupt file is 382KB, while the good copy is 383KB - so it seems something is being removed/replaced w/ the ASCII characters.
- -

Open filemon, set the "Include:" field to "metabase.xml", check the "Log Writes" checkbox and click Ok.
Then start/stop the IIS and check if any process changes it.
You can add "C:\Path\to\filemon -q" to the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run key and reboot - it will be started on windows startup and watch the metabase.xml.
ASKER
jbridges9

Forgive me for being a novice with Filemon - I opened it and set the filter to metabase.xml and stop/started IIS. I can see the event briefly appear in Filemon and then go away before I can see what it is. Is there a way that I can redirect the output, or somehow save the output? I have my history depth set to 0 for unlimited.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
- -

It is bug, it should not delete the records. Try to start it again with default options (put * in Include and check all the checkboxes). There are a few screenshots:  http://www.softpedia.com/progScreenshots/Filemon-Screenshot-3365.html
rkapetroleum

Jason, have you been able to resolve this issue? We too are having the same issue on 5-6 servers on our network. Any chance you've recently installed/removed Symantec Endpoint Protection?
ASKER
jbridges9

Hi,

I haven't resolved the issue yet - haven't had time to troubleshoot. I haven't installed Endpoint Protection, but we do have Symantec Backup Exec System Recovery installed..
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
rkapetroleum

Interesting, we too are running Backup Exec System Recovery 7.03.24709 as well as Backup Exec 11d. Care to work on this together?
bbanis2k

I am having the same issue.  The server is SBS 2003...with guess what...Symantec System Recovery!
I will consider removing this product and seeing if this resolves the issue.
Does the Symantec product perform the same job as Volume Shadow Copies?
 
ASKER CERTIFIED SOLUTION
rkapetroleum

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
jbridges9

RKA: Thanks for the comment. That seems like something Symantec would say -- Unfortunately I can't restart IIS each time. However, the past 10 times or so I haven't had the problem..
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
rkapetroleum

jbridges9: what did you to do stop the problem?
ASKER
jbridges9

Honestly, I'm not sure. We have upgraded to BESR 8.02, I recentlly (re) installed Sharepoint (Intranet) in my SBS environment since the last time I lost my metabase, I had to reinstall exchange and everything else. I also have BESR running a batch file to launch ntbackup to perform a system state backup with every backup job.

I also have a copy of the metabase.XML in about 3 different places "just in case"