Active Server Pages service stopped

[Horhayson]

Running W2k Server SP4, my application event viewer says that the Active
Server Pages service is stopped.

How and what do I need to do to start the service, and why does it stop?
*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

[Aaron Bertrand - MVP]

What is the event id? What is the associated error message? When did this
start happening?

"Horhayson" <dg********@net zero.com> wrote in message
news:uD******** ******@TK2MSFTN GP11.phx.gbl...

Running W2k Server SP4, my application event viewer says that the Active
Server Pages service is stopped.

How and what do I need to do to start the service, and why does it stop?
*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

[Aaron Bertrand - MVP]

WHat is the *TEXT* of the error message?

"Horhayson" <dg********@net zero.com> wrote in message
news:14******** *************** *****@phx.gbl.. .

Source: Active Server Pages
Category: None
Event ID: 4

According to the AppLog, the service stopped on Fri, Sept
19, started 20 seconds later, then stopped again Mon, Sept
22.

[Aaron Bertrand - MVP]

Have you been to Windows Update, and are you completely up to date? I'd
hate to instill paranoia, but this almost sounds like some kind of attack...
have you checked for conspicuous GET requests in your IIS logs (e.g. for
cmd.exe, etc.)?

Do you have anti-virus software? It could be triggering restarts of the
application by touching global.asa.

Are you running anything additional besides IIS, e.g. Crystal Reports
server, cold fusion, JRun, etc?

Also, is "Cache ISAPI Applications" checked within Application Configuration
in Internet Services Manager?

"Horhayson" <dg********@net zero.com> wrote in message
news:13******** *************** *****@phx.gbl.. .

That's it. "Service stopped." Cut and pasted from the
event viewer itself.

-----Original Message-----
Service stopped.

-----Original Message-----
WHat is the *TEXT* of the error message?

"Horhayson" <dg********@net zero.com> wrote in message
news:14****** *************** *******@phx.gbl ...
Source: Active Server Pages
Category: None
Event ID: 4

According to the AppLog, the service stopped on Fri,

Sept

19, started 20 seconds later, then stopped again Mon,

Sept

22.
.

.

[Horhayson]

1-I have been going religiously to Windows Update. I
will check again, though.
2- I do not have any conspicuous GET requests in the IIS
logs (the server is our Intranet server). The GET
requests that I see are benign (get this graphic, get
this animation, etc).
3- The server is our "Everything " server. It is
currently our: domain controller, dns, wins, dhcp, time,
backup, anti-virus, file, print, and I am sure I forgot a
few things.....
4- The check box for "Cache ISAPI Applications" is
checked within Application Configuration in Internet
Services Manager.
5- As this is our anti-virus server, I am currently on
hold with Symantec to see what is going on there.

-----Original Message-----
Have you been to Windows Update, and are you completely up to date? I'dhate to instill paranoia, but this almost sounds like some kind of attack...have you checked for conspicuous GET requests in your IIS logs (e.g. forcmd.exe, etc.)?

Do you have anti-virus software? It could be triggering restarts of theapplication by touching global.asa.

Are you running anything additional besides IIS, e.g. Crystal Reportsserver, cold fusion, JRun, etc?

Also, is "Cache ISAPI Applications" checked within Application Configurationin Internet Services Manager?

"Horhayson" <dg********@net zero.com> wrote in message
news:13******* *************** ******@phx.gbl. ..

That's it. "Service stopped." Cut and pasted from the
event viewer itself.

>-----Original Message-----
>Service stopped.
>>-----Original Message-----
>>WHat is the *TEXT* of the error message?
>>
>>
>>
>>"Horhayson" <dg********@net zero.com> wrote in message
>>news:14****** *************** *******@phx.gbl ...
>>> Source: Active Server Pages
>>> Category: None
>>> Event ID: 4
>>>
>>> According to the AppLog, the service stopped on Fri, >Sept
>>> 19, started 20 seconds later, then stopped again Mon, >Sept
>>> 22.
>>
>>
>>.
>>
>.
>

.

[Ray at]

"Horhayson" <dg********@net zero.com> wrote in message
news:02******** *************** *****@phx.gbl.. .

3- The server is our "Everything " server. It is
currently our: domain controller, dns, wins, dhcp, time,
backup, anti-virus, file, print, and I am sure I forgot a
few things.....

8-O (or however you make a "shocked" face)

Ray at work

[Horhayson]

Is there a way to view what fixes/patches I need to
install for IIS? Windows Update does a good job about
the o/s, but I found that it doesn't do checks for IIS,
Exchange, and other servers.

-----Original Message-----
1-I have been going religiously to Windows Update. I
will check again, though.
2- I do not have any conspicuous GET requests in the IIS
logs (the server is our Intranet server). The GET
requests that I see are benign (get this graphic, get
this animation, etc).
3- The server is our "Everything " server. It is
currently our: domain controller, dns, wins, dhcp, time,backup, anti-virus, file, print, and I am sure I forgot afew things.....
4- The check box for "Cache ISAPI Applications" is
checked within Application Configuration in Internet
Services Manager.
5- As this is our anti-virus server, I am currently on
hold with Symantec to see what is going on there.

-----Original Message-----
Have you been to Windows Update, and are you completelyup to date? I'd

hate to instill paranoia, but this almost sounds like

some kind of attack...

have you checked for conspicuous GET requests in your

IIS logs (e.g. for

cmd.exe, etc.)?

Do you have anti-virus software? It could be triggeringrestarts of the

application by touching global.asa.

Are you running anything additional besides IIS, e.g.

Crystal Reports

server, cold fusion, JRun, etc?

Also, is "Cache ISAPI Applications" checked within

Application Configuration

in Internet Services Manager?

"Horhayson" <dg********@net zero.com> wrote in message
news:13****** *************** *******@phx.gbl ...

That's it. "Service stopped." Cut and pasted from the event viewer itself.

>-----Original Message-----
>Service stopped.
>>-----Original Message-----
>>WHat is the *TEXT* of the error message?
>>
>>
>>
>>"Horhayson" <dg********@net zero.com> wrote in message >>news:14****** *************** *******@phx.gbl ...
>>> Source: Active Server Pages
>>> Category: None
>>> Event ID: 4
>>>
>>> According to the AppLog, the service stopped on

Fri, >Sept
>>> 19, started 20 seconds later, then stopped againMon, >Sept
>>> 22.
>>
>>
>>.
>>
>.
>

.

.

[Phillip Windell]

"Ray at <%=sLocation% >" <myfirstname at lane34 dot com> wrote in
message news:eW******** ******@TK2MSFTN GP09.phx.gbl...

3- The server is our "Everything " server. It is
currently our: domain controller, dns, wins, dhcp, time,
backup, anti-virus, file, print, and I am sure I forgot a
few things.....

Now *that's* what I call a single-point-of-failure! If you have to
reboot the machine for any little thing you take everybody offline
while you do it. A hacker could wipe out the whole business by
screwing up one machine. But that's how BackOffice and SBS were meant
to run....that's the way it is licensed.
8-O (or however you make a "shocked" face) 8=O (Now it has two nostrils with eye browes sticking up)

[Phillip Windell]

"Horhayson" <dg********@net zero.com> wrote in message
news:c7******** *************** *****@phx.gbl.. .

I know it is a single point of failure. I wish I can do
something about it. All hail the mighty budget
constraints! Still having problems with it though.

I understand. Hang in there, maybe someone will come up with
something, it's just going to be difficult with all that on one
machine.

--

Phillip Windell [CCNA, MVP, MCP]
pw******@wandtv .com
WAND-TV (ABC Affiliate)
www.wandtv.com