jbstewart
asked on
ExchangeApplicationPool Crashes - ActiveSync and RPC/HTTP Won't Work
We had an issue just spring on us and I have exhausted almost everything I could think of and/or find. This is a Windows Small Business Server 2003 machine.
Upon boot the w3wp.exe throws an error and the ExchangeApplicationPool stops and I few erros are logged in the Event Logs. We ran a dump on it and I had Microsoft look at the dump report. The engineer thought the issue was with massync.dll, which I ran a hotfix he provided that did not help. I will post the event log information as well as what I have tried to fix the issue.
This event happens 5 times in the System Log
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1011
Date: 11/22/2010
Time: 4:45:18 PM
User: N/A
Computer: SBS
Description:
A process serving application pool 'ExchangeActiveSyncPool' suffered a fatal communication error with the World Wide Web Publishing Service. The process id was '6776'. The data field contains the error number.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 07 80 m..¿
This event drops right after those 5 above
Event Type: Error
Event Source: W3SVC
Event Category: None
Event ID: 1002
Date: 11/22/2010
Time: 4:46:01 PM
User: N/A
Computer: SBS
Description:
Application pool 'ExchangeActiveSyncPool' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Here are the Application Log Errors I ger
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 11/22/2010
Time: 4:45:58 PM
User: N/A
Computer: SBS
Description:
Faulting application w3wp.exe, version 6.0.3790.3959, faulting module msvcrt.dll, version 7.0.3790.3959, fault address 0x00038e21.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 77 33 77 ure w3w
0018: 70 2e 65 78 65 20 36 2e p.exe 6.
0020: 30 2e 33 37 39 30 2e 33 0.3790.3
0028: 39 35 39 20 69 6e 20 6d 959 in m
0030: 73 76 63 72 74 2e 64 6c svcrt.dl
0038: 6c 20 37 2e 30 2e 33 37 l 7.0.37
0040: 39 30 2e 33 39 35 39 20 90.3959
0048: 61 74 20 6f 66 66 73 65 at offse
0050: 74 20 30 30 30 33 38 65 t 00038e
0058: 32 31 21
Event Type: Information
Event Source: Server ActiveSync
Event Category: None
Event ID: 3002
Date: 11/22/2010
Time: 4:45:52 PM
User: N/A
Computer: SBS
Description:
Microsoft Exchange ActiveSync has been loaded: Process ID: [9376].
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Server ActiveSync
Event Category: None
Event ID: 3025
Date: 11/22/2010
Time: 4:45:52 PM
User: N/A
Computer: SBS
Description:
IP-based AUTD has been initialized.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Here is what I have done:
Made sure Network Service had proper permissions
Deleted DB and Exchange Virtual Directories and Rebuilt
I have found and verified some permission issues in IIS – then corrected
I have added w3wp.exe to the DEP
I have corrected issues with the DefaultAppPool’s permissions which cleared some errors in the logs
I have corrected issues with ExchangeAppPool permissions (with no outcome)
I found another hotfix that looked like it applied to this instance, as it updated the mapssync.dll however it made no difference
I then found an article by MS about this issue (sort of) that recommended running REGMON and finding registry keys that the network service did not have access to and update the permissions. I did so, and it made no change.
When all of these changes took place none of the errors changed. No new errors came up and none of these errors went away.
Any help would be appreciated!
Upon boot the w3wp.exe throws an error and the ExchangeApplicationPool stops and I few erros are logged in the Event Logs. We ran a dump on it and I had Microsoft look at the dump report. The engineer thought the issue was with massync.dll, which I ran a hotfix he provided that did not help. I will post the event log information as well as what I have tried to fix the issue.
This event happens 5 times in the System Log
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1011
Date: 11/22/2010
Time: 4:45:18 PM
User: N/A
Computer: SBS
Description:
A process serving application pool 'ExchangeActiveSyncPool' suffered a fatal communication error with the World Wide Web Publishing Service. The process id was '6776'. The data field contains the error number.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 07 80 m..¿
This event drops right after those 5 above
Event Type: Error
Event Source: W3SVC
Event Category: None
Event ID: 1002
Date: 11/22/2010
Time: 4:46:01 PM
User: N/A
Computer: SBS
Description:
Application pool 'ExchangeActiveSyncPool' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Here are the Application Log Errors I ger
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 11/22/2010
Time: 4:45:58 PM
User: N/A
Computer: SBS
Description:
Faulting application w3wp.exe, version 6.0.3790.3959, faulting module msvcrt.dll, version 7.0.3790.3959, fault address 0x00038e21.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 77 33 77 ure w3w
0018: 70 2e 65 78 65 20 36 2e p.exe 6.
0020: 30 2e 33 37 39 30 2e 33 0.3790.3
0028: 39 35 39 20 69 6e 20 6d 959 in m
0030: 73 76 63 72 74 2e 64 6c svcrt.dl
0038: 6c 20 37 2e 30 2e 33 37 l 7.0.37
0040: 39 30 2e 33 39 35 39 20 90.3959
0048: 61 74 20 6f 66 66 73 65 at offse
0050: 74 20 30 30 30 33 38 65 t 00038e
0058: 32 31 21
Event Type: Information
Event Source: Server ActiveSync
Event Category: None
Event ID: 3002
Date: 11/22/2010
Time: 4:45:52 PM
User: N/A
Computer: SBS
Description:
Microsoft Exchange ActiveSync has been loaded: Process ID: [9376].
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Server ActiveSync
Event Category: None
Event ID: 3025
Date: 11/22/2010
Time: 4:45:52 PM
User: N/A
Computer: SBS
Description:
IP-based AUTD has been initialized.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Here is what I have done:
Made sure Network Service had proper permissions
Deleted DB and Exchange Virtual Directories and Rebuilt
I have found and verified some permission issues in IIS – then corrected
I have added w3wp.exe to the DEP
I have corrected issues with the DefaultAppPool’s permissions which cleared some errors in the logs
I have corrected issues with ExchangeAppPool permissions (with no outcome)
I found another hotfix that looked like it applied to this instance, as it updated the mapssync.dll however it made no difference
I then found an article by MS about this issue (sort of) that recommended running REGMON and finding registry keys that the network service did not have access to and update the permissions. I did so, and it made no change.
When all of these changes took place none of the errors changed. No new errors came up and none of these errors went away.
Any help would be appreciated!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I have managed to keep everything from crashing now. However, RPC over HTTP is no longer working for some reason. I don't have any errors about it, it just won't connect with my outlook client.
Reboot the server once and check.
check if IIS is running.
check if IIS is running.
if needed you can rename current MASSYNC.DLL file MASSYNC.DLL.OLD
Copy the same version of .dll from the CD\media....then try recycling the IIS