In order to perform its activities successfully, the Internet Information Services (IIS) World Wide Web Publishing Service (W3SVC) must be free of any I/O errors involving file access, memory availability, and network connections. In addition, any scripts that are used must be accessible and running, and any include files must be configured correctly.
Check HTTP server security initialization
To resolve this issue, you must examine the event log message for an error number that can provide clues to resolution. This error number will be different from the Event ID. To do this, see the following steps.
Check the event log message for a specific error number
To check the event log message for a specific error number included in the event log message:
In the Event Viewer, select the event that you received.
Click the Details tab, then Friendly View.
If a specific error number is available, the words Binary data: should appear.
Below In Words, note the number after the colon.
Find out more about a specific error number
To learn more about a specific error number:
Download the Err.exe utility from the Microsoft Exchange Server Error Code Look-up page.
Click Start, All Programs, Accessories, and then Command Prompt.
At the command prompt, navigate to the directory where you downloaded Err.exe. For example, if you downloaded Err.exe to C:\Err, type cd C:\Err.
Type err errornumber to obtain more information about the error. For example, if the specific error number is 80070005, type err 80070005.
In the example in Step 4, the error resolves to ERROR_ACCESS_DENIED, so your next step would be to check for a permissions issue.
| Target | Microsoft.Windows.InternetInformationServices.2008.WebServer | ||
| Category | Alert | ||
| Enabled | True | ||
| Event_ID | 2201 | ||
| Event Source | Microsoft-Windows-IIS-WMSVC | ||
| Alert Generate | True | ||
| Alert Severity | Warning | ||
| Alert Priority | Normal | ||
| Remotable | True | ||
| Alert Message |
| ||
| Event Log | Application |
| ID | Module Type | TypeId | RunAs |
|---|---|---|---|
| DS | DataSource | Microsoft.Windows.EventProvider | Default |
| WA | WriteAction | Microsoft.Windows.Server.IIS.2008.GenerateAlertAction.SuppressedByDescription | Default |
Home
ENU <Rule ID="Microsoft.Windows.InternetInformationServices.2008.HTTP.Server.could.not.initialize.its.security" Enabled="onEssentialMonitoring" Target="Microsoft.Windows.InternetInformationServices.2008.WebServer" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft-Windows-IIS-WMSVC</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>2201</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.Windows.Server.IIS.2008.GenerateAlertAction.SuppressedByDescription">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.InternetInformationServices.2008.HTTP.Server.could.not.initialize.its.security.AlertMessage"]$</AlertMessageId>
</WriteAction>
</WriteActions>
</Rule>