Solved

IIS/SMTP Services disappear from Windows 2003/Exchange 2003 server services list

Posted on 2009-03-31
3
868 Views
Last Modified: 2012-05-06
For no known reason, my Exchange 2003 Services stopped operating on a Windows 2003 SP2 server; this happens from time to time but restarting services or restarting services usually clears it up.  When I checked services in this instance, the Exchange related services were stopped BUT the IIS/SMTP services were NOT in the service list at all.  I have no suspects for deleting these services so I need to know if this has happened to others.

I'm currently running a full Exchange backup before proceeding with troubleshooting, in large part based on Microsoft KB 320202 which I found in response to a search on the Exchange error 1083 when failing to start the Microsoft Routing Engine (although all other services do start).  This may address getting IIS/SMTP and Exchange back in operation but not the underlying issue of  how/why IIS/SMTP disappeared in first place.

High points for weirdness and priority.

 I'll be back in a few hours to check on responses... please don't consider a delayed response as a lack of interest -- I'm rebooting my brain while the backup runs.  Thanks.
0
Comment
Question by:ColdKathleen
  • 2
3 Comments
 
LVL 3

Accepted Solution

by:
nskurs earned 500 total points
ID: 24036280
This happens if someone Hacked your IIS/SMTP services or metabase corrupted. You have to check for trojan (Check the events and so on)

If this server hacked then you have to rebuild this server from scratch.

If the metabase corrupted then restore from backup.

Check the SMTP service, do telnet to port 25.....

1. Establish a telnet session with the Exchange 2003 on port 25:

click Start, click Run, type telnet localhost 25 in the Open box, and then click OK.

2. Type ehlo, and then press ENTER.

The following list appears:

250-ServerName.example.com Hello [IP address]
250-TURN
250-ATRN
250-SIZE
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250-X-EXPS GSSAPI NTLM LOGIN
250-X-EXPS=LOGIN
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-X-LINK2STATE
250-XEXCH50
250 OK

If the following command verbs for the Exchange 2003 SMTP service are not present, the association of the Exchange 2003 computer to the SMTP service is damaged:

250-X-EXPS GSSAPI NTLM LOGIN
250-X-EXPS=LOGIN
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-X-LINK2STATE
250-XEXCH50

Type quit, and then press ENTER to quit the telnet session.

If some of the Exchange association SMTP command verbs are missing, then you must reinstall Exchange 2003.

The reinstall Exchange, it does not overwrite the databases.

It only backfills any missing files and metabase entries.

This does not affect the settings or mailboxes on the server that is running Exchange.

- Cheers!
0
 

Author Comment

by:ColdKathleen
ID: 24037027
nskurs:  OK to use a free Trojan Scanner, such as from WindowsSecurity.com?  I'll be looking over the Event Logs again but I didn't see anything immediately suspicious.  With fresh Info Store backup in hand, will follow KB 320202 which has me moving MDB-database to an "old" folder to protect it during the reinstall... thanks for quick answer.  I'll be back in touch as the recovery process moves along.
0
 

Author Closing Comment

by:ColdKathleen
ID: 31565163
I appreciated the timely response; KB320202 was key to recovery but your hints were helpful and I picked up a virus/trojan scanner too.  Thanks!
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Utilizing an array to gracefully append to a list of EmailAddresses
Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
how to add IIS SMTP to handle application/Scanner relays into office 365.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now