IIS Services Stop Automatically at 4 AM

[Mike Myers]

Hi Group

This has happened twice now, the last time being this morning. For no
apparent reason the IIS service on the server just stops. I have examined
everything in the log and the only thing that shows is from the System Log.
For each of the IIS services, in this order W3SVC, SMTP, NNTP, FTP, HTTP SSL
and IIS, a service control manager log is created saying:

Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 23/04/2010
Time: 04:00:15
User: NT AUTHORITY\SYSTEM
Computer: AWSWS2
Description:
The World Wide Web Publishing Service service was successfully sent a stop
control.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The next message is then that it stopped ...

Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 23/04/2010
Time: 04:00:19
User: N/A
Computer: AWSWS2
Description:
The World Wide Web Publishing Service service entered the stopped state.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

How on earth can I find out who or what is causing this to happen!

I've checked our scheduled tasks, nothing runs at 04:00, and we don't do any
service stopping or anything like that anyway. There's only two people with
access to the machine and it's neither of us because we're in bed!

Many thanks

Mike

[Adrienne Boswell]

On Apr 23, 7:29 am, "Mike Myers" <bookham_measu...@yahoo.com> wrote:
> Hi Group
>
> This has happened twice now, the last time being this morning.  For no
> apparent reason the IIS service on the server just stops.  I have examined
> everything in the log and the only thing that shows is from the System Log.
> For each of the IIS services, in this order W3SVC, SMTP, NNTP, FTP, HTTP SSL
> and IIS, a service control manager log is created saying:
>
> Event Type: Information
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7035
> Date:  23/04/2010
> Time:  04:00:15
> User:  NT AUTHORITY\SYSTEM
> Computer: AWSWS2
> Description:
> The World Wide Web Publishing Service service was successfully sent a stop
> control.
>

> For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

>
> The next message is then that it stopped ...
>
> Event Type: Information
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7036
> Date:  23/04/2010
> Time:  04:00:19
> User:  N/A
> Computer: AWSWS2
> Description:
> The World Wide Web Publishing Service service entered the stopped state.
>

> For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

>
> How on earth can I find out who or what is causing this to happen!
>
> I've checked our scheduled tasks, nothing runs at 04:00, and we don't do any
> service stopping or anything like that anyway.  There's only two people with
> access to the machine and it's neither of us because we're in bed!
>
> Many thanks
>
> Mike

You said you checked "our" scheduled tasks. Did you check ALL the
scheduled tasks? There might be something that some program is doing
at 0400 that it thinks it has to stop IIS.

[Mike Myers]

Seems this KB is the problem. KB976323

http://codepolice.net/2010/04/19/ms10-024-and-kb976323-will-reset-your-iis-smtp-settings/

"Adrienne Boswell" <arb...@yahoo.com> wrote in message
news:792e82f2-d130-499b...@w20g2000prm.googlegroups.com...

[Mike Myers]

There are no tasks running that would stop any service.

The only thing I can think of is Windows Update. Now I see, it is scheduled
to "Automatic" Every Friday at 4 AM, but I wonder why it's stopping/not
working.

I shall install and reboot manually.

"Adrienne Boswell" <arb...@yahoo.com> wrote in message
news:792e82f2-d130-499b...@w20g2000prm.googlegroups.com...