SMS 2003 dependent service failure: The World Wide Web Publishing Service was unable to log on

SMS_2003_dependent_service_failure__The_World_Wide_Web_Publishing_Service_was_unable_to_log_on_12_Rule (Rule)

Knowledge Base article:

Summary

The service has failed to start because the user credentials and password are no longer valid. As a result the service is no longer available to dependent services and clients. By default this service logs on under the Local System account. It is possible that the account used to log on was changed from Local System to something else.

Causes

The account used to start the service has invalid credentials or insufficient privilege to start the service.

Resolutions

To ensure that the service is configured properly, use the Services snap-in, in Microsoft Management Console (MMC) to change the user account back to Local System.

External

For additional information about troubleshooting Internet Information Services issues for a web server in Windows 2000, see article 297954 in the Microsoft Knowledge Base.

For additional information about troubleshooting Internet Information Services issues for a web server in Windows Server 2003, see article 323358 in the Microsoft Knowledge Base.

For more assistance, a list of additional support options is available in the support section of the SMS Web site at Support for Systems Management Server.

Additional

This alert is best handled by SMS administrators.

Sample Events

The %1 service was unable to log on as %2 with the currently configured password due to the following error: %n%3%n%n To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Element properties:

TargetMicrosoft.SMS.2003.Microsoft_SMS_2003_Component_Servers_based_on_IIS_Installation
CategoryEventCollection
EnabledFalse
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
RemotableTrue
Alert Message
SMS 2003 依赖服务故障: World Wide Web 发布服务无法登录

$Data/LoggingComputer$ - SMS 2003 依赖服务故障: World Wide Web 发布服务无法登录。

检测到 $Data/LoggingComputer$ 上运行的 World Wide Web 发布服务在 $Data/@time$ 停止。
Event LogSystem
CommentMom2005ID='{DED36123-2C64-4544-AD63-BEAD3A845886}';MOM2005ComputerGroupID={8CFBEA36-0A59-48A1-99C4-6BAB528AC2B3}

Member Modules:

ID Module Type TypeId RunAs 
_907D4578_146C_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="SMS_2003_dependent_service_failure__The_World_Wide_Web_Publishing_Service_was_unable_to_log_on_12_Rule" Target="Microsoft.SMS.2003.Microsoft_SMS_2003_Component_Servers_based_on_IIS_Installation" Enabled="false" ConfirmDelivery="true" Comment="Mom2005ID='{DED36123-2C64-4544-AD63-BEAD3A845886}';MOM2005ComputerGroupID={8CFBEA36-0A59-48A1-99C4-6BAB528AC2B3}">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_907D4578_146C_11D3_AB21_00A0C98620CE_" Comment="{907D4578-146C-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Service Control Manager</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Params/Param[1]</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>World Wide Web Publishing Service</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>7038</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">
<AlertGeneration>
<GenerateAlert>true</GenerateAlert>
<Owner/>
<Description>
$Data/LoggingComputer$
- SMS 2003 dependent service failure: The World Wide Web Publishing Service was unable to log on.

The World Wide Web Publishing Service service running on
$Data/LoggingComputer$
was detected as stopped at
$Data/@time$
.</Description>
<AlertLevel>70</AlertLevel>
<ResolutionState/>
<Source>
$Data/PublisherName$
</Source>
<Name>SMS 2003 dependent service failure: The World Wide Web Publishing Service was unable to log on</Name>
</AlertGeneration>
<InvokerType>0</InvokerType>
</WriteAction>
<WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>