?
Solved

IIS/SMTP Services disappear from Windows 2003/Exchange 2003 server services list

Posted on 2009-03-31
3
Medium Priority
?
875 Views
Last Modified: 2012-05-06
For no known reason, my Exchange 2003 Services stopped operating on a Windows 2003 SP2 server; this happens from time to time but restarting services or restarting services usually clears it up.  When I checked services in this instance, the Exchange related services were stopped BUT the IIS/SMTP services were NOT in the service list at all.  I have no suspects for deleting these services so I need to know if this has happened to others.

I'm currently running a full Exchange backup before proceeding with troubleshooting, in large part based on Microsoft KB 320202 which I found in response to a search on the Exchange error 1083 when failing to start the Microsoft Routing Engine (although all other services do start).  This may address getting IIS/SMTP and Exchange back in operation but not the underlying issue of  how/why IIS/SMTP disappeared in first place.

High points for weirdness and priority.

 I'll be back in a few hours to check on responses... please don't consider a delayed response as a lack of interest -- I'm rebooting my brain while the backup runs.  Thanks.
0
Comment
Question by:ColdKathleen
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 3

Accepted Solution

by:
nskurs earned 1500 total points
ID: 24036280
This happens if someone Hacked your IIS/SMTP services or metabase corrupted. You have to check for trojan (Check the events and so on)

If this server hacked then you have to rebuild this server from scratch.

If the metabase corrupted then restore from backup.

Check the SMTP service, do telnet to port 25.....

1. Establish a telnet session with the Exchange 2003 on port 25:

click Start, click Run, type telnet localhost 25 in the Open box, and then click OK.

2. Type ehlo, and then press ENTER.

The following list appears:

250-ServerName.example.com Hello [IP address]
250-TURN
250-ATRN
250-SIZE
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250-X-EXPS GSSAPI NTLM LOGIN
250-X-EXPS=LOGIN
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-X-LINK2STATE
250-XEXCH50
250 OK

If the following command verbs for the Exchange 2003 SMTP service are not present, the association of the Exchange 2003 computer to the SMTP service is damaged:

250-X-EXPS GSSAPI NTLM LOGIN
250-X-EXPS=LOGIN
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-X-LINK2STATE
250-XEXCH50

Type quit, and then press ENTER to quit the telnet session.

If some of the Exchange association SMTP command verbs are missing, then you must reinstall Exchange 2003.

The reinstall Exchange, it does not overwrite the databases.

It only backfills any missing files and metabase entries.

This does not affect the settings or mailboxes on the server that is running Exchange.

- Cheers!
0
 

Author Comment

by:ColdKathleen
ID: 24037027
nskurs:  OK to use a free Trojan Scanner, such as from WindowsSecurity.com?  I'll be looking over the Event Logs again but I didn't see anything immediately suspicious.  With fresh Info Store backup in hand, will follow KB 320202 which has me moving MDB-database to an "old" folder to protect it during the reinstall... thanks for quick answer.  I'll be back in touch as the recovery process moves along.
0
 

Author Closing Comment

by:ColdKathleen
ID: 31565163
I appreciated the timely response; KB320202 was key to recovery but your hints were helpful and I picked up a virus/trojan scanner too.  Thanks!
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
Suggested Courses
Course of the Month11 days, 13 hours left to enroll

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question