Link to home
Start Free TrialLog in
Avatar of modmikeva
modmikevaFlag for United States of America

asked on

IIS-W3SVC-WP, Event 2262

I have a new SBS 2008 box that I just migrated from and old SBS 2003 domain.  This new server becomes unresponsive at some point early each morning.  Based on the research I've done, I believe whatever is causing the below event is what is causing the lock up.  Based on this same research it appears to be related to Sharepoint.  Therefore I have also attached a Sharepoint error that I am getting, in case that would be helpful.  

I have not been able to find any info on how to fix this on and SBS 2008 box and very little info on it in regards to IIS7.  Can someone help me out a little with this?

Log Name:      Application
Source:        Microsoft-Windows-IIS-W3SVC-WP
Date:          12/8/2010 1:51:09 AM
Event ID:      2262
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      server.domain.com
Description:
ISAPI 'C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll' reported itself as unhealthy for the following reason: 'Deadlock detected'.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-IIS-W3SVC-WP" Guid="{670080D9-742A-4187-8D16-41143D1290BD}" EventSourceName="W3SVC-WP" />
    <EventID Qualifiers="32768">2262</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-12-08T06:51:09.000Z" />
    <EventRecordID>14028</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>server.domain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="IsapiExtension">C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll</Data>
    <Data Name="UnhealthyReason">Deadlock detected</Data>
    <Binary>
    </Binary>
  </EventData>
</Event>




Log Name:      Application
Source:        Windows SharePoint Services 3 Search
Date:          12/8/2010 1:50:55 AM
Event ID:      2436
Task Category: Gatherer
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      server.domain.com
Description:
The start address <sts3s://mail.domain.com:987/contentdbid={1b00a602-2c8f-42cc-ac06-44c838898df1}> cannot be crawled.

Context: Application 'Search index file on the search server', Catalog 'Search'

Details:
      Access is denied. Check that the Default Content Access Account has access to this content, or add a crawl rule to crawl this content.   (0x80041205)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows SharePoint Services 3 Search" />
    <EventID Qualifiers="32768">2436</EventID>
    <Level>3</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-12-08T06:50:55.000Z" />
    <EventRecordID>14027</EventRecordID>
    <Channel>Application</Channel>
    <Computer>server.domain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>

Context: Application 'Search index file on the search server', Catalog 'Search'

Details:
      Access is denied. Check that the Default Content Access Account has access to this content, or add a crawl rule to crawl this content.   (0x80041205)</Data>
    <Data>sts3s://mail.domain.com:987/contentdbid={1b00a602-2c8f-42cc-ac06-44c838898df1}</Data>
  </EventData>
</Event>
Avatar of modmikeva
modmikeva
Flag of United States of America image

ASKER

Ok, so it happened again but this time was unmistakably a result of trying to do an incremental backup using Backup Exec 12.5.  Below are the errors I got.  It appears that the whole things starts due to a missing transaction log file.  i have turned on circular logging and will do a full backup tonight, then go back to non-circular logging and see what I get









Log Name:      Application
Source:        MSExchangeIS
Date:          12/8/2010 1:00:38 PM
Event ID:      9646
Task Category: General
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      HPS-SBS.highpuritysystemsinc.com
Description:
Mapi session "/o=First Organization/ou=first administrative group/cn=Recipients/cn=DBarefoot" exceeded the maximum of 32 objects of type "session".
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeIS" />
    <EventID Qualifiers="49158">9646</EventID>
    <Level>2</Level>
    <Task>6</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-12-08T18:00:38.000Z" />
    <EventRecordID>14934</EventRecordID>
    <Channel>Application</Channel>
    <Computer>HPS-SBS.highpuritysystemsinc.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>/o=First Organization/ou=first administrative group/cn=Recipients/cn=DBarefoot</Data>
    <Data>32</Data>
    <Data>session</Data>
    <Binary>5B444941475F4354585D000016000000FFDC350000000000000208000000C304401005000780</Binary>
  </EventData>
</Event>




Log Name:      Application
Source:        Microsoft-Windows-IIS-W3SVC-WP
Date:          12/8/2010 12:51:14 PM
Event ID:      2262
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      HPS-SBS.highpuritysystemsinc.com
Description:
ISAPI 'C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll' reported itself as unhealthy for the following reason: 'Deadlock detected'.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-IIS-W3SVC-WP" Guid="{670080D9-742A-4187-8D16-41143D1290BD}" EventSourceName="W3SVC-WP" />
    <EventID Qualifiers="32768">2262</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-12-08T17:51:14.000Z" />
    <EventRecordID>14920</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>HPS-SBS.highpuritysystemsinc.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="IsapiExtension">C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_isapi.dll</Data>
    <Data Name="UnhealthyReason">Deadlock detected</Data>
    <Binary>
    </Binary>
  </EventData>
</Event>




Log Name:      Application
Source:        MSExchangeIS
Date:          12/8/2010 12:36:48 PM
Event ID:      10027
Task Category: General
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      HPS-SBS.highpuritysystemsinc.com
Description:
There are 5 RPC requests for the mailbox "/o=First Organization/ou=first administrative group/cn=Recipients/cn=DSorenson" on the database "/o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=HPS-SBS/cn=Microsoft Private MDB" that take abnormally long time to complete. It may be indicative of performance problems with your server.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeIS" />
    <EventID Qualifiers="49158">10027</EventID>
    <Level>2</Level>
    <Task>6</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-12-08T17:36:48.000Z" />
    <EventRecordID>14904</EventRecordID>
    <Channel>Application</Channel>
    <Computer>HPS-SBS.highpuritysystemsinc.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>5</Data>
    <Data>/o=First Organization/ou=first administrative group/cn=Recipients/cn=DSorenson</Data>
    <Data>/o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=HPS-SBS/cn=Microsoft Private MDB</Data>
    <Binary>150F00004E0F000000000000000000000000000000000000150F0000150F0000D8020000939400002D000000150F000001000000150F00000A000000150F00000C000000150F000000000000000000000000000000000000F975316EB26F5D42882457337F5539E8000000000000000000000000000000000E0000006AC891FBDC3CD94D887D18EC68DE388406000000331B9358B7FFA44182BC95E8F71D554405000000000000005B444941475F4354585D000026000000FFF40D0000000000000218000000BD4420100000000003592010000000000359201000000000</Binary>
  </EventData>
</Event>





Log Name:      Application
Source:        ESE
Date:          12/8/2010 12:31:58 PM
Event ID:      459
Task Category: Logging/Recovery
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      HPS-SBS.highpuritysystemsinc.com
Description:
MSExchangeIS (2968) First Storage Group: The file D:\Program Files\Microsoft\Exchange Server\Mailbox\First Storage Group\E000000CFA9.log is missing and could not be backed-up.

For more information, click http://www.microsoft.com/contentredirect.asp.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ESE" />
    <EventID Qualifiers="0">459</EventID>
    <Level>2</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-12-08T17:31:58.000Z" />
    <EventRecordID>14902</EventRecordID>
    <Channel>Application</Channel>
    <Computer>HPS-SBS.highpuritysystemsinc.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>MSExchangeIS</Data>
    <Data>2968</Data>
    <Data>First Storage Group: </Data>
    <Data>D:\Program Files\Microsoft\Exchange Server\Mailbox\First Storage Group\E000000CFA9.log</Data>
  </EventData>
</Event>



Avatar of Kumaraswamy R
2 things :
1. Please check your machine.config , and see this should be true
<processModel autoConfig="true"/>
2. “The SSLAlwaysNegoClientCert property controls SSL client connection negotiations. If this property is set to true, any time SSL connections are negotiated, the server will immediately negotiate a client certificate, preventing an expensive renegotiation. Setting SSLAlwaysNegoClientCert also helps eliminate client certificate renegotiation deadlocks, which may occur when a client is blocked on sending a large request body when a renegotiation request is received.” So you may need to enable 'SSLAlwaysNegoClientCert".
http://technet.microsoft.com/en-us/library/cc778630%28WS.10%29.aspx
ASKER CERTIFIED SOLUTION
Avatar of modmikeva
modmikeva
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Answered the question myself.