Active Server Pages service stopped

[Horhayson]

Running W2k Server SP4, my application event viewer says that the Active
Server Pages service is stopped.

How and what do I need to do to start the service, and why does it stop?


*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
Don't just participate in USENET...get rewarded for it!

[Aaron Bertrand - MVP]

What is the event id? What is the associated error message? When did this
start happening?



"Horhayson" <dgeorges.1@netzero.com> wrote in message
news:uDs$qtdgDHA.1932@TK2MSFTNGP11.phx.gbl...

>
>
> Running W2k Server SP4, my application event viewer says that the Active
> Server Pages service is stopped.
>
> How and what do I need to do to start the service, and why does it stop?
>
>
> *** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
> Don't just participate in USENET...get rewarded for it!

[Aaron Bertrand - MVP]

WHat is the *TEXT* of the error message?



"Horhayson" <dgeorges.1@netzero.com> wrote in message
news:140b01c381e0$c0fbca10$a301280a@phx.gbl...

> Source: Active Server Pages
> Category: None
> Event ID: 4
>
> According to the AppLog, the service stopped on Fri, Sept
> 19, started 20 seconds later, then stopped again Mon, Sept
> 22.

[Aaron Bertrand - MVP]

Have you been to Windows Update, and are you completely up to date? I'd
hate to instill paranoia, but this almost sounds like some kind of attack...
have you checked for conspicuous GET requests in your IIS logs (e.g. for
cmd.exe, etc.)?

Do you have anti-virus software? It could be triggering restarts of the
application by touching global.asa.

Are you running anything additional besides IIS, e.g. Crystal Reports
server, cold fusion, JRun, etc?

Also, is "Cache ISAPI Applications" checked within Application Configuration
in Internet Services Manager?





"Horhayson" <dgeorges.1@netzero.com> wrote in message
news:133901c381e4$2793f380$a401280a@phx.gbl...

> That's it. "Service stopped." Cut and pasted from the
> event viewer itself.
>

> >-----Original Message-----
> >Service stopped.

> >>-----Original Message-----
> >>WHat is the *TEXT* of the error message?
> >>
> >>
> >>
> >>"Horhayson" <dgeorges.1@netzero.com> wrote in message
> >>news:140b01c381e0$c0fbca10$a301280a@phx.gbl...
> >>> Source: Active Server Pages
> >>> Category: None
> >>> Event ID: 4
> >>>
> >>> According to the AppLog, the service stopped on Fri,

> >Sept

> >>> 19, started 20 seconds later, then stopped again Mon,

> >Sept

> >>> 22.
> >>
> >>
> >>.
> >>

> >.
> >

[Horhayson]

1-I have been going religiously to Windows Update. I
will check again, though.
2- I do not have any conspicuous GET requests in the IIS
logs (the server is our Intranet server). The GET
requests that I see are benign (get this graphic, get
this animation, etc).
3- The server is our "Everything" server. It is
currently our: domain controller, dns, wins, dhcp, time,
backup, anti-virus, file, print, and I am sure I forgot a
few things.....
4- The check box for "Cache ISAPI Applications" is
checked within Application Configuration in Internet
Services Manager.
5- As this is our anti-virus server, I am currently on
hold with Symantec to see what is going on there.

>-----Original Message-----
>Have you been to Windows Update, and are you completely

up to date? I'd

>hate to instill paranoia, but this almost sounds like

some kind of attack...

>have you checked for conspicuous GET requests in your

IIS logs (e.g. for

>cmd.exe, etc.)?
>
>Do you have anti-virus software? It could be triggering

restarts of the

>application by touching global.asa.
>
>Are you running anything additional besides IIS, e.g.

Crystal Reports

>server, cold fusion, JRun, etc?
>
>Also, is "Cache ISAPI Applications" checked within

Application Configuration

>in Internet Services Manager?
>
>
>
>
>
>"Horhayson" <dgeorges.1@netzero.com> wrote in message
>news:133901c381e4$2793f380$a401280a@phx.gbl...

>> That's it. "Service stopped." Cut and pasted from the
>> event viewer itself.
>>

>> >-----Original Message-----
>> >Service stopped.
>> >>-----Original Message-----
>> >>WHat is the *TEXT* of the error message?
>> >>
>> >>
>> >>
>> >>"Horhayson" <dgeorges.1@netzero.com> wrote in message
>> >>news:140b01c381e0$c0fbca10$a301280a@phx.gbl...
>> >>> Source: Active Server Pages
>> >>> Category: None
>> >>> Event ID: 4
>> >>>
>> >>> According to the AppLog, the service stopped on

Fri,

>> >Sept
>> >>> 19, started 20 seconds later, then stopped again

Mon,

>> >Sept
>> >>> 22.
>> >>
>> >>
>> >>.
>> >>
>> >.
>> >

>
>
>.
>

[Ray at]

"Horhayson" <dgeorges.1@netzero.com> wrote in message
news:029301c381eb$4d009f90$a101280a@phx.gbl...

> 3- The server is our "Everything" server. It is
> currently our: domain controller, dns, wins, dhcp, time,
> backup, anti-virus, file, print, and I am sure I forgot a
> few things.....

8-O (or however you make a "shocked" face)

Ray at work

[Horhayson]

Is there a way to view what fixes/patches I need to
install for IIS? Windows Update does a good job about
the o/s, but I found that it doesn't do checks for IIS,
Exchange, and other servers.

>-----Original Message-----
>1-I have been going religiously to Windows Update. I
>will check again, though.
>2- I do not have any conspicuous GET requests in the IIS
>logs (the server is our Intranet server). The GET
>requests that I see are benign (get this graphic, get
>this animation, etc).
>3- The server is our "Everything" server. It is
>currently our: domain controller, dns, wins, dhcp,

time,

>backup, anti-virus, file, print, and I am sure I forgot

a

>few things.....
>4- The check box for "Cache ISAPI Applications" is
>checked within Application Configuration in Internet
>Services Manager.
>5- As this is our anti-virus server, I am currently on
>hold with Symantec to see what is going on there.
>

>>-----Original Message-----
>>Have you been to Windows Update, and are you completely

>up to date? I'd

>>hate to instill paranoia, but this almost sounds like

>some kind of attack...

>>have you checked for conspicuous GET requests in your

>IIS logs (e.g. for

>>cmd.exe, etc.)?
>>
>>Do you have anti-virus software? It could be

triggering

>restarts of the

>>application by touching global.asa.
>>
>>Are you running anything additional besides IIS, e.g.

>Crystal Reports

>>server, cold fusion, JRun, etc?
>>
>>Also, is "Cache ISAPI Applications" checked within

>Application Configuration

>>in Internet Services Manager?
>>
>>
>>
>>
>>
>>"Horhayson" <dgeorges.1@netzero.com> wrote in message
>>news:133901c381e4$2793f380$a401280a@phx.gbl...

>>> That's it. "Service stopped." Cut and pasted from

the

>>> event viewer itself.
>>>
>>> >-----Original Message-----
>>> >Service stopped.
>>> >>-----Original Message-----
>>> >>WHat is the *TEXT* of the error message?
>>> >>
>>> >>
>>> >>
>>> >>"Horhayson" <dgeorges.1@netzero.com> wrote in

message

>>> >>news:140b01c381e0$c0fbca10$a301280a@phx.gbl...
>>> >>> Source: Active Server Pages
>>> >>> Category: None
>>> >>> Event ID: 4
>>> >>>
>>> >>> According to the AppLog, the service stopped on

>Fri,

>>> >Sept
>>> >>> 19, started 20 seconds later, then stopped again

>Mon,

>>> >Sept
>>> >>> 22.
>>> >>
>>> >>
>>> >>.
>>> >>
>>> >.
>>> >

>>
>>
>>.
>>

>.
>

[Phillip Windell]

"Ray at <%=sLocation%>" <myfirstname at lane34 dot com> wrote in
message news:eWBwkvegDHA.2464@TK2MSFTNGP09.phx.gbl...

> > 3- The server is our "Everything" server. It is
> > currently our: domain controller, dns, wins, dhcp, time,
> > backup, anti-virus, file, print, and I am sure I forgot a
> > few things.....

Now *that's* what I call a single-point-of-failure! If you have to
reboot the machine for any little thing you take everybody offline
while you do it. A hacker could wipe out the whole business by
screwing up one machine. But that's how BackOffice and SBS were meant
to run....that's the way it is licensed.

> 8-O (or however you make a "shocked" face)

>8=O (Now it has two nostrils with eye browes sticking up)

[Phillip Windell]

"Horhayson" <dgeorges.1@netzero.com> wrote in message
news:c72901c38209$0cd5a370$a601280a@phx.gbl...

> I know it is a single point of failure. I wish I can do
> something about it. All hail the mighty budget
> constraints! Still having problems with it though.

I understand. Hang in there, maybe someone will come up with
something, it's just going to be difficult with all that on one
machine.

--

Phillip Windell [CCNA, MVP, MCP]
[email]pwindell@wandtv.com[/email]
WAND-TV (ABC Affiliate)
[url]www.wandtv.com[/url]