[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

IIS/SMTP Services disappear from Windows 2003/Exchange 2003 server services list

Posted on 2009-03-31
3
Medium Priority
?
876 Views
Last Modified: 2012-05-06
For no known reason, my Exchange 2003 Services stopped operating on a Windows 2003 SP2 server; this happens from time to time but restarting services or restarting services usually clears it up.  When I checked services in this instance, the Exchange related services were stopped BUT the IIS/SMTP services were NOT in the service list at all.  I have no suspects for deleting these services so I need to know if this has happened to others.

I'm currently running a full Exchange backup before proceeding with troubleshooting, in large part based on Microsoft KB 320202 which I found in response to a search on the Exchange error 1083 when failing to start the Microsoft Routing Engine (although all other services do start).  This may address getting IIS/SMTP and Exchange back in operation but not the underlying issue of  how/why IIS/SMTP disappeared in first place.

High points for weirdness and priority.

 I'll be back in a few hours to check on responses... please don't consider a delayed response as a lack of interest -- I'm rebooting my brain while the backup runs.  Thanks.
0
Comment
Question by:ColdKathleen
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 3

Accepted Solution

by:
nskurs earned 1500 total points
ID: 24036280
This happens if someone Hacked your IIS/SMTP services or metabase corrupted. You have to check for trojan (Check the events and so on)

If this server hacked then you have to rebuild this server from scratch.

If the metabase corrupted then restore from backup.

Check the SMTP service, do telnet to port 25.....

1. Establish a telnet session with the Exchange 2003 on port 25:

click Start, click Run, type telnet localhost 25 in the Open box, and then click OK.

2. Type ehlo, and then press ENTER.

The following list appears:

250-ServerName.example.com Hello [IP address]
250-TURN
250-ATRN
250-SIZE
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250-X-EXPS GSSAPI NTLM LOGIN
250-X-EXPS=LOGIN
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-X-LINK2STATE
250-XEXCH50
250 OK

If the following command verbs for the Exchange 2003 SMTP service are not present, the association of the Exchange 2003 computer to the SMTP service is damaged:

250-X-EXPS GSSAPI NTLM LOGIN
250-X-EXPS=LOGIN
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-X-LINK2STATE
250-XEXCH50

Type quit, and then press ENTER to quit the telnet session.

If some of the Exchange association SMTP command verbs are missing, then you must reinstall Exchange 2003.

The reinstall Exchange, it does not overwrite the databases.

It only backfills any missing files and metabase entries.

This does not affect the settings or mailboxes on the server that is running Exchange.

- Cheers!
0
 

Author Comment

by:ColdKathleen
ID: 24037027
nskurs:  OK to use a free Trojan Scanner, such as from WindowsSecurity.com?  I'll be looking over the Event Logs again but I didn't see anything immediately suspicious.  With fresh Info Store backup in hand, will follow KB 320202 which has me moving MDB-database to an "old" folder to protect it during the reinstall... thanks for quick answer.  I'll be back in touch as the recovery process moves along.
0
 

Author Closing Comment

by:ColdKathleen
ID: 31565163
I appreciated the timely response; KB320202 was key to recovery but your hints were helpful and I picked up a virus/trojan scanner too.  Thanks!
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Are you an Exchange administrator employed with an organization? And, have you encountered a corrupt Exchange database due to which you are not able to open its EDB file. This article will explain all the steps to repair corrupt Exchange database.
how to add IIS SMTP to handle application/Scanner relays into office 365.
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question