Link to home
Start Free TrialLog in
Avatar of flyboyldb3909
flyboyldb3909

asked on

IIS troubles with Remote Web Access user accessing shared folders

Server 2012 R2 Standard. IIS ver 8.5 Install\hardware approx 6 months old.  Worked upon initial install.  Any user can login in successfully. Once a user clicks on a shared folder, it then kicks the user back out to the login screen with the following: "You were logged off when Remote Web Access reset. To log on again, type your user name and password."  At that point is user logs back in and clicks on a shared folder - it will not kick you back out - but will not show any folder contents - basically just sits there.

As soon as a RWA user clicks on a shared folder it generates "SERVER01 5011      Warning      Microsoft-Windows-WAS      System      10/1/2015 4:34:50 PM" with 5011 being the ID. Under that is listed "A process serving application pool 'RemoteAppPool' suffered a fatal communication error with the Windows Process Activation Service. The process id was '21752'. The data field contains the error number."

Running Process Monitor from Sysinternals I see the following once a RWA user clicks on a shared folder is logs the following under the w3wp.exe Process Name

High Resolution Date & Time:      10/1/2015 4:34:51.5888677 PM
Event Class:      Registry
Operation:      RegOpenKey
Result:      NAME NOT FOUND
Path:      HKLM\Software\Microsoft\Cryptography\Offload
TID:      21368
Duration:      0.0000012
Desired Access:      Read

0      ntoskrnl.exe      RtlEqualUnicodeString + 0x2240      0xfffff803f2e1ce80      C:\Windows\system32\ntoskrnl.exe
1      ntoskrnl.exe      ObOpenObjectByName + 0x456a      0xfffff803f2e40a2a      C:\Windows\system32\ntoskrnl.exe
2      ntoskrnl.exe      FsRtlInitializeOplock + 0x2374      0xfffff803f2f1d754      C:\Windows\system32\ntoskrnl.exe
3      ntoskrnl.exe      ObOpenObjectByName + 0x1e3      0xfffff803f2e3c6a3      C:\Windows\system32\ntoskrnl.exe
4      ntoskrnl.exe      PsImpersonateClient + 0xac4      0xfffff803f2e3c2c4      C:\Windows\system32\ntoskrnl.exe
5      ntoskrnl.exe      PsImpersonateClient + 0x81b      0xfffff803f2e3c01b      C:\Windows\system32\ntoskrnl.exe
6      ntoskrnl.exe      setjmpex + 0x34a3      0xfffff803f2bd31b3      C:\Windows\system32\ntoskrnl.exe
7      ntdll.dll      ZwOpenKeyEx + 0xa      0x7ffeb8ed225a      C:\Windows\System32\ntdll.dll
8      KernelBase.dll      GetTokenInformation + 0x399      0x7ffeb6363799      C:\Windows\System32\KernelBase.dll
9      KernelBase.dll      RegOpenKeyExInternalA + 0x132      0x7ffeb6381102      C:\Windows\System32\KernelBase.dll
10      KernelBase.dll      RegOpenKeyExA + 0x19      0x7ffeb63811b9      C:\Windows\System32\KernelBase.dll
11      rsaenh.dll      CPAcquireContext + 0x923      0x7ffeb5481e93      C:\Windows\System32\rsaenh.dll
12      rsaenh.dll      CPAcquireContext + 0x889      0x7ffeb5481df9      C:\Windows\System32\rsaenh.dll
13      rsaenh.dll      CPAcquireContext + 0x247      0x7ffeb54817b7      C:\Windows\System32\rsaenh.dll
14      rsaenh.dll      CPAcquireContext + 0x8c      0x7ffeb54815fc      C:\Windows\System32\rsaenh.dll
15      cryptsp.dll      CryptAcquireContextA + 0x55d      0x7ffeb589186d      C:\Windows\System32\cryptsp.dll
16      clr.dll      GetMetaDataInternalInterface + 0x83b6d      0x7ffeaf4f208d      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
17      clr.dll      GetMetaDataInternalInterface + 0x83992      0x7ffeaf4f1eb2      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
18      clr.dll      GetMetaDataInternalInterface + 0x83d70      0x7ffeaf4f2290      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
19      clr.dll      LogHelp_TerminateOnAssert + 0x19f1      0x7ffeaf4522d1      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
20      clr.dll      LogHelp_TerminateOnAssert + 0x16f2      0x7ffeaf451fd2      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
21      clr.dll      LogHelp_TerminateOnAssert + 0x40d9      0x7ffeaf4549b9      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
22      clr.dll      LogHelp_TerminateOnAssert + 0x3e8f      0x7ffeaf45476f      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
23      clr.dll      LogHelp_TerminateOnAssert + 0x2e78      0x7ffeaf453758      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
24      clr.dll      LogHelp_TerminateOnAssert + 0x34cd      0x7ffeaf453dad      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
25      clr.dll      LogHelp_TerminateOnAssert + 0x347d      0x7ffeaf453d5d      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
26      clr.dll      CreateAssemblyNameObject + 0x17ef      0x7ffeaf459037      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
27      clr.dll      CreateAssemblyNameObject + 0x10cf      0x7ffeaf458917      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
28      clr.dll      CreateAssemblyNameObject + 0xa53      0x7ffeaf45829b      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
29      clr.dll      CreateAssemblyNameObject + 0x147      0x7ffeaf45798f      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
30      clr.dll      CreateAssemblyNameObject + 0xa0      0x7ffeaf4578e8      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
31      clr.dll      GetMetaDataInternalInterface + 0x8372e      0x7ffeaf4f1c4e      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
32      clr.dll      GetMetaDataInternalInterface + 0x8353f      0x7ffeaf4f1a5f      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
33      clr.dll      GetMetaDataInternalInterface + 0x1d6a8      0x7ffeaf48bbc8      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
34      clr.dll      GetMetaDataInternalInterface + 0x1bf67      0x7ffeaf48a487      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
35      clr.dll      IEE + 0x28a89      0x7ffeaf61b4e5      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
36      clrjit.dll      clrjit.dll + 0xcbfd      0x7ffeaf20cbfd      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
37      clrjit.dll      clrjit.dll + 0x12e93      0x7ffeaf212e93      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
38      clrjit.dll      clrjit.dll + 0x12e1f      0x7ffeaf212e1f      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
39      clrjit.dll      clrjit.dll + 0x11e5f      0x7ffeaf211e5f      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
40      clrjit.dll      clrjit.dll + 0x1000d      0x7ffeaf21000d      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
41      clrjit.dll      clrjit.dll + 0x102f5      0x7ffeaf2102f5      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
42      clrjit.dll      clrjit.dll + 0x13308      0x7ffeaf213308      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
43      clrjit.dll      clrjit.dll + 0x7d8c      0x7ffeaf207d8c      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
44      clrjit.dll      clrjit.dll + 0x1410b      0x7ffeaf21410b      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
45      clr.dll      clr.dll + 0x2f643      0x7ffeaf43f643      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
46      clr.dll      clr.dll + 0x2f56f      0x7ffeaf43f56f      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
47      clr.dll      clr.dll + 0x2f45e      0x7ffeaf43f45e      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
48      clr.dll      clr.dll + 0x2f325      0x7ffeaf43f325      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
49      clr.dll      clr.dll + 0x2f25f      0x7ffeaf43f25f      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
50      clr.dll      clr.dll + 0x137a1      0x7ffeaf4237a1      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
51      clr.dll      clr.dll + 0x13fb6      0x7ffeaf423fb6      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
52      clr.dll      clr.dll + 0x225a      0x7ffeaf41225a      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
53      clr.dll      clr.dll + 0xa7f3      0x7ffeaf41a7f3      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
54      clr.dll      clr.dll + 0xa6de      0x7ffeaf41a6de      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
55      clr.dll      GetMetaDataInternalInterface + 0x2fb8e      0x7ffeaf49e0ae      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
56      clr.dll      GetMetaDataInternalInterface + 0x2f8ce      0x7ffeaf49ddee      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
57      mscorlib.ni.dll      mscorlib.ni.dll + 0x493be5      0x7ffea66f3be5      C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\fc9860df7e7c03efd26ad5311301dfcb\mscorlib.ni.dll
58      mscorlib.ni.dll      mscorlib.ni.dll + 0x491273      0x7ffea66f1273      C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\fc9860df7e7c03efd26ad5311301dfcb\mscorlib.ni.dll
59      System.ServiceModel.Activation.ni.dll      System.ServiceModel.Activation.ni.dll + 0x6c932      0x7ffea819c932      C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv14b62006#\82f32cdf1869a5c8f9c9a50c8ae7d83a\System.ServiceModel.Activation.ni.dll
60      System.ServiceModel.Activation.ni.dll      System.ServiceModel.Activation.ni.dll + 0x6c7bc      0x7ffea819c7bc      C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv14b62006#\82f32cdf1869a5c8f9c9a50c8ae7d83a\System.ServiceModel.Activation.ni.dll
61      System.ServiceModel.Activation.ni.dll      System.ServiceModel.Activation.ni.dll + 0x6ca5c      0x7ffea819ca5c      C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv14b62006#\82f32cdf1869a5c8f9c9a50c8ae7d83a\System.ServiceModel.Activation.ni.dll
62      System.ServiceModel.Activation.ni.dll      System.ServiceModel.Activation.ni.dll + 0x67eab      0x7ffea8197eab      C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv14b62006#\82f32cdf1869a5c8f9c9a50c8ae7d83a\System.ServiceModel.Activation.ni.dll
63      System.ServiceModel.Activation.ni.dll      System.ServiceModel.Activation.ni.dll + 0x67c35      0x7ffea8197c35      C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv14b62006#\82f32cdf1869a5c8f9c9a50c8ae7d83a\System.ServiceModel.Activation.ni.dll
64      System.ServiceModel.Activation.ni.dll      System.ServiceModel.Activation.ni.dll + 0x67bc3      0x7ffea8197bc3      C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv14b62006#\82f32cdf1869a5c8f9c9a50c8ae7d83a\System.ServiceModel.Activation.ni.dll
65      System.ServiceModel.Activation.ni.dll      System.ServiceModel.Activation.ni.dll + 0x28a02      0x7ffea8158a02      C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv14b62006#\82f32cdf1869a5c8f9c9a50c8ae7d83a\System.ServiceModel.Activation.ni.dll
66      System.ServiceModel.Activation.ni.dll      System.ServiceModel.Activation.ni.dll + 0x67b43      0x7ffea8197b43      C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv14b62006#\82f32cdf1869a5c8f9c9a50c8ae7d83a\System.ServiceModel.Activation.ni.dll
67      System.ServiceModel.Internals.ni.dll      System.ServiceModel.Internals.ni.dll + 0x4bf11      0x7ffe9f4fbf11      C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servd1dec626#\c5f3f02d8e835923f9c750feb1fefb7e\System.ServiceModel.Internals.ni.dll
68      System.ServiceModel.Internals.ni.dll      System.ServiceModel.Internals.ni.dll + 0x4be90      0x7ffe9f4fbe90      C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servd1dec626#\c5f3f02d8e835923f9c750feb1fefb7e\System.ServiceModel.Internals.ni.dll
69      mscorlib.ni.dll      mscorlib.ni.dll + 0x518de6      0x7ffea6778de6      C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\fc9860df7e7c03efd26ad5311301dfcb\mscorlib.ni.dll
70      clr.dll      clr.dll + 0xa7f3      0x7ffeaf41a7f3      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
71      clr.dll      clr.dll + 0xa6de      0x7ffeaf41a6de      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
72      clr.dll      clr.dll + 0x15614      0x7ffeaf425614      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
73      clr.dll      TranslateSecurityAttributes + 0x155d48      0x7ffeaf9d7088      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
74      clr.dll      clr.dll + 0xc121      0x7ffeaf41c121      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
75      clr.dll      clr.dll + 0xc0a8      0x7ffeaf41c0a8      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
76      clr.dll      clr.dll + 0xc019      0x7ffeaf41c019      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
77      clr.dll      clr.dll + 0x2e874      0x7ffeaf43e874      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
78      clr.dll      GetMetaDataInternalInterface + 0x6ad03      0x7ffeaf4d9223      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
79      clr.dll      clr.dll + 0x2e85b      0x7ffeaf43e85b      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
80      clr.dll      clr.dll + 0xc0a8      0x7ffeaf41c0a8      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
81      clr.dll      clr.dll + 0xc019      0x7ffeaf41c019      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
82      clr.dll      clr.dll + 0xc15f      0x7ffeaf41c15f      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
83      clr.dll      TranslateSecurityAttributes + 0x155ea9      0x7ffeaf9d71e9      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
84      clr.dll      TranslateSecurityAttributes + 0x155db9      0x7ffeaf9d70f9      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
85      clr.dll      StrongNameSignatureVerification + 0x81c9      0x7ffeaf55763d      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
86      clr.dll      CopyPDBs + 0x44a2      0x7ffeaf55fcb6      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
87      kernel32.dll      BaseThreadInitThunk + 0x22      0x7ffeb87813d2      C:\Windows\System32\kernel32.dll
88      ntdll.dll      RtlUserThreadStart + 0x34      0x7ffeb8e55454      C:\Windows\System32\ntdll.dll


Like I stated, when the server was first installed - all worked fine. They just now got to the point of utilizing it for remote users. Any ideas appreciated.
Avatar of Dan McFadden
Dan McFadden
Flag of United States of America image
Can you post the complete Application Event Log entry in XML format.  Seeing the details of the error codes thrown will help in troubleshooting what is actually causing the issue.

Dan
Avatar of flyboyldb3909
flyboyldb3909

ASKER

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Application Error" />
  <EventID Qualifiers="0">1000</EventID>
  <Level>2</Level>
  <Task>100</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2015-10-02T18:43:07.000000000Z" />
  <EventRecordID>9374</EventRecordID>
  <Channel>Application</Channel>
  <Computer>Server01.erc.local</Computer>
  <Security />
  </System>
- <EventData>
  <Data>w3wp.exe</Data>
  <Data>8.5.9600.16384</Data>
  <Data>5215df96</Data>
  <Data>ntdll.dll</Data>
  <Data>6.3.9600.18007</Data>
  <Data>55c4c16b</Data>
  <Data>c0000409</Data>
  <Data>000000000005e768</Data>
  <Data>19ac</Data>
  <Data>01d0fd4214a34dd6</Data>
  <Data>c:\windows\system32\inetsrv\w3wp.exe</Data>
  <Data>C:\Windows\SYSTEM32\ntdll.dll</Data>
  <Data>6ba7c3dd-6935-11e5-80d0-001e67e7d20a</Data>
  <Data />
  <Data />
  </EventData>
  </Event>
Avatar of Dan McFadden
Dan McFadden
Flag of United States of America image
The exception code reference above is a STATUS_STACK_BUFFER_OVERRUN.

What version of the .NET Framework is your AppPool setup to run with?

Dan
Avatar of flyboyldb3909
flyboyldb3909

ASKER

4.0 for the version
Avatar of flyboyldb3909
flyboyldb3909

ASKER

Don't know if this is what you are looking for.

Microsoft (R) Windows Debugger Version 6.3.9600.17336 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path.           *
* Use .symfix to have the debugger choose a symbol path.                   *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
ModLoad: 00007ff6`40a90000 00007ff6`40a9a000   c:\windows\system32\inetsrv\w3wp.exe
ModLoad: 00007fff`338a0000 00007fff`33a4c000   C:\Windows\SYSTEM32\ntdll.dll
ModLoad: 00007fff`314a0000 00007fff`315de000   C:\Windows\system32\KERNEL32.DLL
ModLoad: 00007fff`30bd0000 00007fff`30ce5000   C:\Windows\system32\KERNELBASE.dll
ModLoad: 00007fff`336a0000 00007fff`3374a000   C:\Windows\system32\ADVAPI32.dll
ModLoad: 00007fff`33510000 00007fff`335ba000   C:\Windows\system32\msvcrt.dll
ModLoad: 00007fff`31980000 00007fff`31b91000   C:\Windows\SYSTEM32\combase.dll
ModLoad: 00007fff`24690000 00007fff`246de000   c:\windows\system32\inetsrv\iisutil.dll
ModLoad: 00007fff`33470000 00007fff`334c9000   C:\Windows\SYSTEM32\sechost.dll
ModLoad: 00007fff`31740000 00007fff`31881000   C:\Windows\system32\RPCRT4.dll
ModLoad: 00007fff`33620000 00007fff`3367a000   C:\Windows\system32\WS2_32.dll
ModLoad: 00007fff`2f0f0000 00007fff`2f0fe000   C:\Windows\SYSTEM32\pcwum.DLL
ModLoad: 00007fff`33690000 00007fff`33699000   C:\Windows\system32\NSI.dll
ModLoad: 00007fff`2eb70000 00007fff`2eb7b000   C:\Windows\SYSTEM32\kernel.appcore.dll
ModLoad: 00007fff`30940000 00007fff`3094b000   C:\Windows\SYSTEM32\CRYPTBASE.dll
ModLoad: 00007fff`308d0000 00007fff`30933000   C:\Windows\SYSTEM32\bcryptPrimitives.dll
ModLoad: 00007fff`2d540000 00007fff`2d572000   C:\Windows\SYSTEM32\ntmarta.dll
ModLoad: 00007fff`31320000 00007fff`31497000   C:\Windows\SYSTEM32\user32.dll
ModLoad: 00007fff`311d0000 00007fff`3131f000   C:\Windows\system32\GDI32.dll
ModLoad: 00007fff`217e0000 00007fff`217f6000   c:\windows\system32\inetsrv\w3wphost.dll
ModLoad: 00007fff`33760000 00007fff`33821000   C:\Windows\system32\OLEAUT32.dll
ModLoad: 00007fff`24600000 00007fff`24682000   c:\windows\system32\inetsrv\nativerd.dll
ModLoad: 00007fff`2c6e0000 00007fff`2c719000   C:\Windows\SYSTEM32\XmlLite.dll
ModLoad: 00007fff`2c6d0000 00007fff`2c6db000   C:\Windows\SYSTEM32\ktmw32.dll
ModLoad: 00007fff`245c0000 00007fff`245f9000   c:\windows\system32\inetsrv\IISRES.DLL
ModLoad: 00007fff`302f0000 00007fff`30310000   C:\Windows\SYSTEM32\CRYPTSP.dll
ModLoad: 00007fff`2fee0000 00007fff`2ff16000   C:\Windows\system32\rsaenh.dll
ModLoad: 00007fff`30590000 00007fff`305b6000   C:\Windows\SYSTEM32\bcrypt.dll
ModLoad: 00007fff`318c0000 00007fff`31976000   C:\Windows\SYSTEM32\clbcatq.dll
ModLoad: 00007fff`24550000 00007fff`2458e000   C:\Windows\system32\mlang.dll
ModLoad: 00007fff`216f0000 00007fff`21788000   C:\Windows\Microsoft.NET\Framework64\v4.0.30319\webengine4.dll
ModLoad: 00007fff`2a490000 00007fff`2a566000   C:\Windows\SYSTEM32\MSVCR120_CLR0400.dll
ModLoad: 00007fff`2ffd0000 00007fff`2fff1000   C:\Windows\SYSTEM32\USERENV.dll
ModLoad: 00007fff`33750000 00007fff`33757000   C:\Windows\system32\PSAPI.DLL
ModLoad: 00007fff`30a00000 00007fff`30a15000   C:\Windows\SYSTEM32\profapi.dll
ModLoad: 00007fff`2afb0000 00007fff`2b014000   C:\Windows\SYSTEM32\mscoree.dll
ModLoad: 00007fff`2af10000 00007fff`2afad000   C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
ModLoad: 00007fff`335c0000 00007fff`33614000   C:\Windows\system32\SHLWAPI.dll
ModLoad: 00007fff`2a570000 00007fff`2af10000   C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
ModLoad: 00007fff`20fe0000 00007fff`2102f000   C:\Windows\system32\inetsrv\iiscore.dll
ModLoad: 00007fff`308a0000 00007fff`308ce000   C:\Windows\SYSTEM32\SspiCli.dll
ModLoad: 00007fff`22020000 00007fff`2202b000   c:\windows\system32\inetsrv\W3TP.dll
ModLoad: 00007fff`20fc0000 00007fff`20fde000   c:\windows\system32\inetsrv\w3dt.dll
ModLoad: 00007fff`23250000 00007fff`2325e000   C:\Windows\SYSTEM32\HTTPAPI.dll
ModLoad: 00007fff`210b0000 00007fff`210c5000   C:\Windows\system32\napinsp.dll
ModLoad: 00007fff`2da10000 00007fff`2da2b000   C:\Windows\system32\NLAapi.dll
ModLoad: 00007fff`30290000 00007fff`302e9000   C:\Windows\System32\mswsock.dll
ModLoad: 00007fff`30090000 00007fff`30134000   C:\Windows\SYSTEM32\DNSAPI.dll
ModLoad: 00007fff`215f0000 00007fff`215fd000   C:\Windows\System32\winrnr.dll
ModLoad: 00007fff`2c690000 00007fff`2c69a000   C:\Windows\System32\rasadhlp.dll
ModLoad: 00007fff`2f8a0000 00007fff`2f8ca000   C:\Windows\SYSTEM32\IPHLPAPI.DLL
ModLoad: 00007fff`2f490000 00007fff`2f49a000   C:\Windows\SYSTEM32\WINNSI.DLL
ModLoad: 00007fff`2c960000 00007fff`2c9cb000   C:\Windows\System32\fwpuclnt.dll
ModLoad: 00007fff`20fb0000 00007fff`20fb8000   C:\Windows\System32\inetsrv\cachuri.dll
ModLoad: 00007fff`20fa0000 00007fff`20faa000   C:\Windows\System32\inetsrv\cachfile.dll
ModLoad: 00007fff`20f90000 00007fff`20f98000   C:\Windows\System32\inetsrv\cachtokn.dll
ModLoad: 00007fff`20f80000 00007fff`20f90000   C:\Windows\System32\inetsrv\cachhttp.dll
ModLoad: 00007fff`20f60000 00007fff`20f71000   C:\Windows\System32\inetsrv\compstat.dll
ModLoad: 00007fff`20f50000 00007fff`20f59000   C:\Windows\System32\inetsrv\defdoc.dll
ModLoad: 00007fff`20f40000 00007fff`20f4a000   C:\Windows\System32\inetsrv\dirlist.dll
ModLoad: 00007fff`20f30000 00007fff`20f3a000   C:\Windows\System32\inetsrv\protsup.dll
ModLoad: 00007fff`20f20000 00007fff`20f2d000   C:\Windows\System32\inetsrv\static.dll
ModLoad: 00007fff`20f10000 00007fff`20f1e000   C:\Windows\System32\inetsrv\authanon.dll
ModLoad: 00007fff`20f00000 00007fff`20f0b000   C:\Windows\System32\inetsrv\iprestr.dll
ModLoad: 00007fff`20ef0000 00007fff`20efd000   C:\Windows\System32\inetsrv\diprestr.dll
ModLoad: 00007fff`20ee0000 00007fff`20eee000   C:\Windows\System32\inetsrv\modrqflt.dll
ModLoad: 00007fff`20ed0000 00007fff`20edf000   C:\Windows\System32\inetsrv\custerr.dll
ModLoad: 00007fff`20ec0000 00007fff`20ecd000   C:\Windows\System32\inetsrv\loghttp.dll
ModLoad: 00007fff`20eb0000 00007fff`20ebc000   C:\Windows\System32\inetsrv\iis_ssi.dll
ModLoad: 00007fff`20ea0000 00007fff`20eae000   C:\Windows\System32\inetsrv\authbas.dll
ModLoad: 00007fff`20e80000 00007fff`20e91000   C:\Windows\System32\inetsrv\authsspi.dll
ModLoad: 00007fff`2e600000 00007fff`2e617000   C:\Windows\SYSTEM32\wkscli.dll
ModLoad: 00007fff`2f1e0000 00007fff`2f1ec000   C:\Windows\SYSTEM32\netutils.dll
ModLoad: 00007fff`20e60000 00007fff`20e7d000   C:\Windows\System32\inetsrv\iisetw.dll
ModLoad: 00007fff`20e30000 00007fff`20e5c000   C:\Windows\System32\inetsrv\iisfreb.dll
ModLoad: 00007fff`20e10000 00007fff`20e30000   C:\Windows\System32\inetsrv\isapi.dll
ModLoad: 00007fff`20df0000 00007fff`20e04000   C:\Windows\System32\inetsrv\filter.dll
ModLoad: 00007fff`20de0000 00007fff`20de9000   C:\Windows\System32\inetsrv\validcfg.dll
ModLoad: 00007fff`2e7f0000 00007fff`2e8a2000   C:\Windows\SYSTEM32\shcore.dll
ModLoad: 00007fff`31d50000 00007fff`31ee4000   C:\Windows\system32\ole32.dll
ModLoad: 00007fff`20dd0000 00007fff`20dda000   C:\Windows\System32\inetsrv\redirect.dll
ModLoad: 00007fff`20dc0000 00007fff`20dc9000   C:\Windows\System32\inetsrv\iisreqs.dll
ModLoad: 00007fff`20d10000 00007fff`20d1a000   C:\Windows\System32\inetsrv\authcert.dll
ModLoad: 00007fff`20cf0000 00007fff`20d03000   C:\Windows\system32\rpcproxy\rpcproxy.dll
ModLoad: 00007fff`21f20000 00007fff`21f69000   C:\Windows\SYSTEM32\ACTIVEDS.dll
ModLoad: 00007fff`30d50000 00007fff`30f2f000   C:\Windows\system32\CRYPT32.dll
ModLoad: 00007fff`23df0000 00007fff`23e32000   C:\Windows\SYSTEM32\adsldpc.dll
ModLoad: 00007fff`30ab0000 00007fff`30ac1000   C:\Windows\system32\MSASN1.dll
ModLoad: 00007fff`33410000 00007fff`3346c000   C:\Windows\system32\WLDAP32.dll
ModLoad: 00007fff`2c7c0000 00007fff`2c7ca000   C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_filter.dll
ModLoad: 00007fff`2c760000 00007fff`2c76b000   C:\Windows\system32\inetsrv\wbhst_pm.dll
ModLoad: 00007fff`2c750000 00007fff`2c757000   C:\Windows\Microsoft.NET\Framework64\v4.0.30319\webengine.dll
ModLoad: 00007fff`28ee0000 00007fff`2a481000   C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\fc9860df7e7c03efd26ad5311301dfcb\mscorlib.ni.dll
ModLoad: 00007fff`28130000 00007fff`28da7000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System\03684c663aa6a9eeb92faf2dfdba9bc2\System.ni.dll
ModLoad: 00007fff`27640000 00007fff`27fa8000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\374fcab45c666ab4e3cb1d8f0b2ff117\System.Core.ni.dll
ModLoad: 00007fff`12d80000 00007fff`13e26000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web\350b20954e91999ecb3269202605a5ee\System.Web.ni.dll
ModLoad: 00007fff`30950000 00007fff`309e9000   C:\Windows\SYSTEM32\sxs.dll
ModLoad: 00007fff`2bc50000 00007fff`2bc6e000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.8dc504e4#\ba9fefeefc8d051625942f4050e424de\System.Web.ApplicationServices.ni.dll
ModLoad: 00007fff`27fb0000 00007fff`280df000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\1c7a457d4b8d2639fde389692c9e4e22\System.Configuration.ni.dll
ModLoad: 00007fff`26c90000 00007fff`2763b000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\06d95097745c54f7d28868ff547803c4\System.Xml.ni.dll
ModLoad: 00007fff`28db0000 00007fff`28ede000   C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
ModLoad: 00007fff`2bb30000 00007fff`2bc43000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.B83e9cb53#\e683c72d4dd9ba4b618c9ee9fa78fe37\Microsoft.Build.Utilities.v4.0.ni.dll
ModLoad: 00007fff`2bae0000 00007fff`2bb2e000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runt19c51595#\02de11e0cdf910513a62a48d09d4109a\System.Runtime.Caching.ni.dll
ModLoad: 00007fff`31ef0000 00007fff`33409000   C:\Windows\system32\shell32.dll
ModLoad: 00007fff`2f520000 00007fff`2f52a000   C:\Windows\SYSTEM32\version.dll
ModLoad: 00000028`0ee50000 00000028`0ef0c000   C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
ModLoad: 00007fff`2ba30000 00007fff`2bad7000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv14b62006#\82f32cdf1869a5c8f9c9a50c8ae7d83a\System.ServiceModel.Activation.ni.dll
ModLoad: 00007fff`17ad0000 00007fff`17e6e000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.28b9ef5a#\e54f6a71f10ef9e9a142b5f002150113\System.Web.Extensions.ni.dll
ModLoad: 00007fff`246e0000 00007fff`247d9000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servd1dec626#\c5f3f02d8e835923f9c750feb1fefb7e\System.ServiceModel.Internals.ni.dll
ModLoad: 00007fff`2eb60000 00007fff`2eb6a000   C:\Windows\SYSTEM32\DPAPI.DLL
ModLoad: 00007fff`24c30000 00007fff`26525000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\de6f821e6848f1f25eb3303a8615ccde\System.ServiceModel.ni.dll
ModLoad: 00007fff`24c00000 00007fff`24c26000   C:\Windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\f618a5ea07d5864d313b80857333df39\SMDiagnostics.ni.dll
ModLoad: 00007fff`2c770000 00007fff`2c77e000   C:\Windows\system32\inetsrv\gzip.dll
ModLoad: 00007fff`1b840000 00007fff`1b855000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xaml.Hosting\8f7cca0e175fcda0bf5605e25e911ce1\System.Xaml.Hosting.ni.dll
ModLoad: 00000028`0f090000 00000028`0f09a000   C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\fe931c16\c9fa34fd\App_Web_fsgpwwoy.dll
ModLoad: 00000028`0f0b0000 00000028`0f0b8000   C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\fe931c16\c9fa34fd\assembly\dl3\9a38ef31\5562eb7d_9cc0d001\Wssg.RootSite.dll
ModLoad: 00007fff`17800000 00007fff`17ac9000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\5754ed6e69bd29b4d637d2a576d78114\System.Web.Mobile.ni.dll
ModLoad: 00007fff`2b9a0000 00007fff`2ba03000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.82d5542b#\27fee419c7e3fc1369b326f32cc1ae7f\System.Web.RegularExpressions.ni.dll
ModLoad: 00000028`0f0e0000 00000028`0f108000   C:\windows\system32\Essentials\Wssg.Web.Internal.dll
ModLoad: 00007fff`21200000 00007fff`213bc000   C:\Windows\assembly\NativeImages_v4.0.30319_64\WssgCommon\690f6c8acd870ad87af59f7cfb472156\WssgCommon.ni.dll
ModLoad: 00000028`0f140000 00000028`0f14e000   C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Wssg.Web\v4.0_6.3.0.0__31bf3856ad364e35\Wssg.Web.dll
ModLoad: 00007fff`20530000 00007fff`20548000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.C25dcfcb8#\c500f15d66ccd164f035fe88069fd828\Microsoft.CertificateServices.Setup.Interop.ni.dll
ModLoad: 00007fff`202f0000 00007fff`20304000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.C416f0659#\7f9b1cf1177cffde9ac4b2614f35d22c\Microsoft.CertificateServices.Certcli.Interop.ni.dll
ModLoad: 00007fff`1f300000 00007fff`1f323000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Cae24a571#\e4b43a43d85dfe222d3466e7f588f18e\Microsoft.CertificateAdministration.Interop.ni.dll
ModLoad: 00007fff`1f2a0000 00007fff`1f2fa000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.G80dd509d#\1858153b2f121c02f12546f8350715e1\Microsoft.GroupPolicy.Management.ni.dll
ModLoad: 00007fff`1f1f0000 00007fff`1f29e000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.W15cd0137#\5c94b84e527ed4d66b611fb8df28baeb\Microsoft.Windows.ServerManager.PowerShell.ni.dll
ModLoad: 00007fff`1f190000 00007fff`1f1e3000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Gdaac1de8#\e90f9aa0b37c1309842cb3da76a65169\Microsoft.GroupPolicy.Management.Interop.ni.dll
ModLoad: 00007fff`1d370000 00007fff`1f0e6000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Manaa57fc8cc#\00298dad32472fde2a9d9595aabbdf7e\System.Management.Automation.ni.dll
ModLoad: 00007fff`1d250000 00007fff`1d2a9000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.G16279ba2#\5c9734fb0c2135efdbac7d175d588da7\Microsoft.GroupPolicy.ServerAdminTools.GpmgmtLib.ni.dll
ModLoad: 00007fff`1f0f0000 00007fff`1f190000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Mf49f6405#\0f0eb4b1060241d6506beb3fdd737649\Microsoft.Management.Infrastructure.ni.dll
ModLoad: 00007fff`1d1e0000 00007fff`1d24f000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.W81a3882f#\177174ecf76f02fc5eaceaae696be670\Microsoft.Windows.ServerManager.ServerComponentManager.ni.dll
ModLoad: 00007fff`1d190000 00007fff`1d1a9000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Wb9b5bb58#\4b2ff57803570b485f285a5b69588876\Microsoft.Windows.ServerManager.Deployment.Extension.ni.dll
ModLoad: 00007fff`1cad0000 00007fff`1d181000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Wf493a5fb#\b14f9ea3e502b0c7c4b0ca72390798f0\Microsoft.Windows.ServerManager.Common.ni.dll
ModLoad: 00007fff`1d2b0000 00007fff`1d367000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.M870d558a#\286f8d116b2a87daf40fa6cba5a52751\Microsoft.Management.Infrastructure.Native.ni.dll
ModLoad: 00007fff`1c570000 00007fff`1ca96000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Meefd589e#\1c98cfdd7f441f5215ba5ce3fd067fea\Microsoft.Management.UI.ni.dll
ModLoad: 00007fff`1c1a0000 00007fff`1c407000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Pefb7a36b#\74c148fdb2411b410493ca3ee8320874\Microsoft.PowerShell.Workflow.ServiceCore.ni.dll
ModLoad: 00007fff`1be60000 00007fff`1c013000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Pae3498d9#\4c9ba938b8a9b6f6aa23266eb4bbd83f\Microsoft.PowerShell.Commands.Management.ni.dll
ModLoad: 00007fff`1bd80000 00007fff`1be3f000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Mf5ac9168#\3d7f94852113e789e3f00b9c59fdb578\Microsoft.Management.Infrastructure.CimCmdlets.ni.dll
ModLoad: 00007fff`1bcd0000 00007fff`1bd79000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.We0722664#\fbc2b0e178f6f19144e976a4c353a2e1\Microsoft.WSMan.Management.ni.dll
ModLoad: 00007fff`1bb20000 00007fff`1bb8a000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.P6f792626#\23fae087f72d3931836b3c2fa5d75332\Microsoft.PowerShell.Security.ni.dll
ModLoad: 00007fff`1bb10000 00007fff`1bb17000   C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.W193497eb#\debcb7894f1b3b1ae4520458a3742170\Microsoft.WSMan.Runtime.ni.dll
ModLoad: 00000028`0f2c0000 00000028`0f2ec000   C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Sku\v4.0_6.3.0.0__31bf3856ad364e35\Sku.dll
ModLoad: 00007fff`1a960000 00007fff`1b21e000   C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data\c88747c2ac09932a9eedc4e2eb96b380\System.Data.ni.dll
ModLoad: 00007fff`1a5e0000 00007fff`1a8fd000   C:\Windows\Microsoft.Net\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
(1108.27f8): Break instruction exception - code 80000003 (first chance)
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Windows\SYSTEM32\ntdll.dll -
ntdll!DbgBreakPoint:
00007fff`33932d00 cc              int     3
ASKER CERTIFIED SOLUTION
Avatar of Dan McFadden
Dan McFadden
Flag of United States of America image
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of flyboyldb3909
flyboyldb3909

ASKER

There was Windows Server Updates - tried uninstalling all of them to no avail. I will run the diag and post back.
Avatar of flyboyldb3909
flyboyldb3909

ASKER

Also get this   ID 5011   Severity Warning  Source Microsoft-Windows-WAS     A process serving application pool 'RemoteAppPool' suffered a fatal communication error with the Windows Process Activation Service. The process id was '22096'. The data field contains the error number.

This was when I attempted to login using RWA.  Still working on running the diag tool
Avatar of flyboyldb3909
flyboyldb3909

ASKER

Ran the IIS debugger - attached the w3wp.exe process.  Attempted to access via RWA. Nothing showed up in the debugger and the RWA worked perfectly - could connect and access shared folders.  I shut down the dedugger tool and still works. I have not rebooted the server as of yet. Will reboot tomorrow and advise.  I am totally confused as to why the debugger tool caused it to work.
Avatar of Dan McFadden
Dan McFadden
Flag of United States of America image
I doubt that the DebugDiag tool made anything work.  All the debugger does is watch the process and waits for a crash.  If a crash is detected, it pauses the process, snap a memory dump and releases the process.

The other thing you can try is to use a tool from the SysInternals Suit called Process Monitor.

link:  https://technet.microsoft.com/en-us/sysinternals/bb896645

You can set the tool up to monitor the w3wp.exe that is associated with the AppPool with the issue.  After ProcMon is watching that process, access the website.  ProcMon will capture all the activity of the w3wp.exe process.  You can then go thru and see what the process is doing right before the crash occurs.

Dan
Avatar of flyboyldb3909
flyboyldb3909

ASKER

I know this and you know this - the debugger tool - just debugs. I tested just a couple of minutes prior to running the debugger tool. Had the same results as have had over the last few weeks troubleshooting this issue - start a RWA session and once I clicked on a shared folder - it would dump me back out to a login screen. Same error with the w3wp.exe was logged.

So I downloaded the IIS debugger tool and attached the w3wp.exe process. From another computer logged in via RWA session - clicked on a shared folder and it worked. Nothing logged in the debugger tool. Shut down the debugger tool  -still continued to work. Rebooted the server - continued to work. I am at a total loss as to why. Nothing changed outside of downloading and running the debugger tool and attaching that process - that is all I did.  Thanks for suggesting the debugger tool - even though logic does not prevail here.