Application pool "DefaultAppPool" is being automatically disabled.

Windows Server 2003 SP1
IIS v6.0

Clients trying to hit web sites on the server are getting “Service
Unavailable” error messages.

The system logs show the follow warnings leading up to an error.

Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 8/24/2007
Time: 5:03:00 PM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly.
The process id was '2496'. The process exit code was '0xffffffff'.

Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 8/24/2007
Time: 5:03:01 PM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly.
The process id was '3312'. The process exit code was '0xffffffff'.

Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 8/24/2007
Time: 5:03:02 PM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly.
The process id was '2672'. The process exit code was '0xffffffff'.

Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 8/24/2007
Time: 5:03:03 PM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly.
The process id was '4508'. The process exit code was '0xffffffff'.

Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 8/24/2007
Time: 5:03:04 PM
User: N/A
Computer:
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly.
The process id was '3744'. The process exit code was '0xffffffff'.

Event Type: Error
Event Source: W3SVC
Event Category: None
Event ID: 1002
Date: 8/24/2007
Time: 5:03:04 PM
User: N/A
Computer:
Description:
Application pool 'DefaultAppPool' is being automatically disabled due to a
series of failures in the process(es) serving that application pool.

I ran iisapp.vbs and the best I could get are the results below:

W3WP.exe PID: 3312 AppPoolId: DefaultAppPool
W3WP.exe PID: 4508 AppPoolId:

The IIS MMC also shows the Default application pool under the Application
Pools to be stopped.

All the fun began after applying the following Microsoft Updates:
KB932168,KB921503,KB929123,KB925902,KB936782,KB936021,KB9359 66,KB935840,KB935839,933854,KB926122,KB930178,KB931784

Any ideas?

RE: Application pool "DefaultAppPool" is being automatically disabled.

After logging into the server once again I noticed SMS had some left to
install. Rebooted the server and everything works now. Checked Add Remove
Programs but nothing new was installed. Maybe a patch did not completely
install???? I'm good to go.

Re: Application pool "DefaultAppPool" is being automatically disabled.

On Aug 24, 3:18 pm, ShrikeAttack
wrote:
> Windows Server 2003 SP1
> IIS v6.0
>
> Clients trying to hit web sites on the server are getting "Service
> Unavailable" error messages.
>
> The system logs show the follow warnings leading up to an error.
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1009
> Date: 8/24/2007
> Time: 5:03:00 PM
> User: N/A
> Computer: =20
> Description:
> A process serving application pool 'DefaultAppPool' terminated unexpected=
ly.
> The process id was '2496'. The process exit code was '0xffffffff'.
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1009
> Date: 8/24/2007
> Time: 5:03:01 PM
> User: N/A
> Computer: =20
> Description:
> A process serving application pool 'DefaultAppPool' terminated unexpected=
ly.
> The process id was '3312'. The process exit code was '0xffffffff'.
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1009
> Date: 8/24/2007
> Time: 5:03:02 PM
> User: N/A
> Computer: =20
> Description:
> A process serving application pool 'DefaultAppPool' terminated unexpected=
ly.
> The process id was '2672'. The process exit code was '0xffffffff'.
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1009
> Date: 8/24/2007
> Time: 5:03:03 PM
> User: N/A
> Computer: =20
> Description:
> A process serving application pool 'DefaultAppPool' terminated unexpected=
ly.
> The process id was '4508'. The process exit code was '0xffffffff'.
>
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1009
> Date: 8/24/2007
> Time: 5:03:04 PM
> User: N/A
> Computer: =20
> Description:
> A process serving application pool 'DefaultAppPool' terminated unexpected=
ly.
> The process id was '3744'. The process exit code was '0xffffffff'.
>
> Event Type: Error
> Event Source: W3SVC
> Event Category: None
> Event ID: 1002
> Date: 8/24/2007
> Time: 5:03:04 PM
> User: N/A
> Computer: =20
> Description:
> Application pool 'DefaultAppPool' is being automatically disabled due to a
> series of failures in the process(es) serving that application pool.
>
> I ran iisapp.vbs and the best I could get are the results below:
>
> W3WP.exe PID: 3312 AppPoolId: DefaultAppPool
> W3WP.exe PID: 4508 AppPoolId:
>
> The IIS MMC also shows the Default application pool under the Application
> Pools to be stopped.
>
> All the fun began after applying the following Microsoft Updates:
> KB932168,KB921503,KB929123,KB925902,KB936782,KB936021,KB9359 66,KB935840,K=
B9=AD35839,933854,KB926122,KB930178,KB931784
>
> Any ideas?


The worker process is crashing when running user code. This is easily
diagnosed by auto-attaching a debugger onto the process to wait for
the crash and then seeing what does crash and go from there.

Unless someone else has seen this same pattern and can link it to any
specific binary, this approach should find the solution within
seconds.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

Re: Application pool "DefaultAppPool" is being automatically disabled.

On Aug 25, 12:04 am, David Wang wrote:
> On Aug 24, 3:18 pm, ShrikeAttack
>
>
>
> wrote:
> > Windows Server 2003 SP1
> > IIS v6.0
>
> > Clients trying to hit web sites on the server are getting "Service
> > Unavailable" error messages.
>
> > The system logs show the follow warnings leading up to an error.
>
> > Event Type: Warning
> > Event Source: W3SVC
> > Event Category: None
> > Event ID: 1009
> > Date: 8/24/2007
> > Time: 5:03:00 PM
> > User: N/A
> > Computer:
> > Description:
> > A process serving application pool 'DefaultAppPool' terminated unexpect=
edly.
> > The process id was '2496'. The process exit code was '0xffffffff'.
>
> > Event Type: Warning
> > Event Source: W3SVC
> > Event Category: None
> > Event ID: 1009
> > Date: 8/24/2007
> > Time: 5:03:01 PM
> > User: N/A
> > Computer:
> > Description:
> > A process serving application pool 'DefaultAppPool' terminated unexpect=
edly.
> > The process id was '3312'. The process exit code was '0xffffffff'.
>
> > Event Type: Warning
> > Event Source: W3SVC
> > Event Category: None
> > Event ID: 1009
> > Date: 8/24/2007
> > Time: 5:03:02 PM
> > User: N/A
> > Computer:
> > Description:
> > A process serving application pool 'DefaultAppPool' terminated unexpect=
edly.
> > The process id was '2672'. The process exit code was '0xffffffff'.
>
> > Event Type: Warning
> > Event Source: W3SVC
> > Event Category: None
> > Event ID: 1009
> > Date: 8/24/2007
> > Time: 5:03:03 PM
> > User: N/A
> > Computer:
> > Description:
> > A process serving application pool 'DefaultAppPool' terminated unexpect=
edly.
> > The process id was '4508'. The process exit code was '0xffffffff'.
>
> > Event Type: Warning
> > Event Source: W3SVC
> > Event Category: None
> > Event ID: 1009
> > Date: 8/24/2007
> > Time: 5:03:04 PM
> > User: N/A
> > Computer:
> > Description:
> > A process serving application pool 'DefaultAppPool' terminated unexpect=
edly.
> > The process id was '3744'. The process exit code was '0xffffffff'.
>
> > Event Type: Error
> > Event Source: W3SVC
> > Event Category: None
> > Event ID: 1002
> > Date: 8/24/2007
> > Time: 5:03:04 PM
> > User: N/A
> > Computer:
> > Description:
> > Application pool 'DefaultAppPool' is being automatically disabled due t=
o a
> > series of failures in the process(es) serving that application pool.
>
> > I ran iisapp.vbs and the best I could get are the results below:
>
> > W3WP.exe PID: 3312 AppPoolId: DefaultAppPool
> > W3WP.exe PID: 4508 AppPoolId:
>
> > The IIS MMC also shows the Default application pool under the Applicati=
on
> > Pools to be stopped.
>
> > All the fun began after applying the following Microsoft Updates:
> > KB932168,KB921503,KB929123,KB925902,KB936782,KB936021,KB9359 66,KB935840=
,KB9=AD35839,933854,KB926122,KB930178,KB931784
>
> > Any ideas?
>
> The worker process is crashing when running user code. This is easily
> diagnosed by auto-attaching a debugger onto the process to wait for
> the crash and then seeing what does crash and go from there.
>
> Unless someone else has seen this same pattern and can link it to any
> specific binary, this approach should find the solution within
> seconds.
>
> //Davidhttp://w3-4u.blogspot.comhttp://blogs.msdn.com/David. Wang
> //

Also are there any other error message shwing up in the Application
Event Viewer? More specifically asp.net errors? If there is an issue
with asp.net code it should log something.

Once you have your issue resolved, go here and download my App Pool
Monitoring Service, http://www.windowsadminscripts.com/apps/apppool/ .
If your app pools ever stop again, the service will automatically
restart them :) .


Larry
www.windowsadminscripts.com