SMS 2003 dependent service failure: The World Wide Web Publishing Service failed to start

SMS_2003_dependent_service_failure__The_World_Wide_Web_Publishing_Service_failed_to_start_12_Rule (Rule)

Knowledge Base article:

Summary

This alert is triggered when the Windows Service Control Manager generates event ID 7000. This message is not specific to SMS. Although Service Control Manager may attempt to restart the service, this condition will not repair itself until the errors are fixed.

To investigate this alert:

Click Start, click Control Panel, double-click Administrative Tools, and then double-click Event Viewer.
In the console tree, click the System log.
In the details pane, locate event ID 7000 and double-click to view the description.

Causes

Refer to the detailed description in event 7000 for more information about the cause of this issue.

Resolutions

If the service does not restart, click Start, click Control Panel, click Administrative Tools, click Services and then start the service manually. If the problem persists, examine the IIS log files for possible causes.

External

For additional information about troubleshooting Internet Information Services issues for a web server in Windows 2000, see article 297954 in the Microsoft Knowledge Base.

For additional information about troubleshooting Internet Information Services issues for a web server in Windows Server 2003, see article 323358 in the Microsoft Knowledge Base.

For more assistance, a list of additional support options is available in the support section of the SMS Web site at Support for Systems Management Server.

Additional

This alert is best handled by SMS administrators.

Sample Events

The %1 service failed to start due to the following error:

Element properties:

Target

Microsoft.SMS.2003.Microsoft_SMS_2003_Component_Servers_based_on_IIS_Installation

Category

EventCollection

Enabled

False

Alert Generate

True

Alert Severity

Error

Alert Priority

Low

Remotable

True

Alert Message

SMS 2003 依赖服务故障: World Wide Web 发布服务无法启动

$Data/LoggingComputer$ - SMS 2003 依赖服务故障: World Wide Web 发布服务无法启动。

检测到 $Data/LoggingComputer$ 上运行的 World Wide Web 发布服务在 $Data/@time$ 停止。

Event Log

System

Comment

Mom2005ID='{6031AE9D-247D-4F76-9C89-DD18DB16CD9D}';MOM2005ComputerGroupID={8CFBEA36-0A59-48A1-99C4-6BAB528AC2B3}

Member Modules:

ID	Module Type	TypeId	RunAs
_907D4578_146C_11D3_AB21_00A0C98620CE_	DataSource	Microsoft.Windows.EventProvider	Default
CollectEventData	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
CollectEventDataWarehouse	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default
GenerateAlert	WriteAction	System.Mom.BackwardCompatibility.AlertResponse	Default

Source Code:

<Rule ID="SMS_2003_dependent_service_failure__The_World_Wide_Web_Publishing_Service_failed_to_start_12_Rule" Target="Microsoft.SMS.2003.Microsoft_SMS_2003_Component_Servers_based_on_IIS_Installation" Enabled="false" ConfirmDelivery="true" Comment="Mom2005ID='{6031AE9D-247D-4F76-9C89-DD18DB16CD9D}';MOM2005ComputerGroupID={8CFBEA36-0A59-48A1-99C4-6BAB528AC2B3}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_907D4578_146C_11D3_AB21_00A0C98620CE_" Comment="{907D4578-146C-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>System</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Service Control Manager</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">Params/Param[1]</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>World Wide Web Publishing Service</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>7000</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/LoggingComputer$

           - SMS 2003 dependent service failure: The World Wide Web Publishing Service failed to start.



The World Wide Web Publishing Service service running on 

            $Data/LoggingComputer$

           was detected as stopped at 

            $Data/@time$

          .</Description>

        <AlertLevel>70</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>SMS 2003 dependent service failure: The World Wide Web Publishing Service failed to start</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>