This alert is triggered when the Windows Service Control Manager generates Windows event ID 7023, 7024, 7031, or 7034. These event IDs are not specific to Configuration Manager. Service Control Manager might attempt to restart this service. If this service is not successfully restarted, Configuration Manager functionality is impaired on this computer.
To investigate this alert:
Click Start, click Control Panel, double-click Administrative Tools, and then double-click Event Viewer.
In the console tree, click the System log.
In the details pane, locate the event ID or IDs and double-click to view the description.
This condition could occur because:
There is a critical problem with the service or with one of its dependent components or services.
For event ID 7023, the message specifies the error that is encountered by Service Control Manager.
For event ID 7024, the message includes a service-specific error code. To translate the error code in the message, type net helpmsg [error code] at the command prompt.
For event ID 7031, the Windows event message lists the corrective action to be taken by the Service Control Manager. Note the number of times that the event has occurred and what corrective action will be taken. Wait to see if the service recovers due to that corrective action.
The action you must take depends on the cause. You might not have to do anything.
If the service does not restart, click Start, click Control Panel, click Administrative Tools, click Services, and then start the service manually. If the problem persists, examine the Internet Information Services (IIS) log files for possible causes.
7023 The %1 service terminated with the following error: %n%2\r\n.
7024 The %1 service terminated with service-specific error %2.\r\n.
7031 The %1 service terminated unexpectedly. It has done this %2 time(s). The following corrective action will be taken in %3 milliseconds: %5.\r\n.
7034 The %1 service terminated unexpectedly. It has done this %2 time(s).
This alert is best handled by Configuration Manager administrators.
For additional information about troubleshooting Internet Information Services issues for a Web server in Windows Server 2003, see article 323358 in the Microsoft Knowledge Base.
For more assistance, see a list of additional support options in the support section of the Configuration Manager Web site at Support for Configuration Manager 2007.
Target | Microsoft.SystemCenter.ConfigurationManager.2007.Microsoft_SMSv4_Component_Servers_based_on_IIS_Installation | ||
Category | EventCollection | ||
Enabled | False | ||
Alert Generate | True | ||
Alert Severity | Error | ||
Alert Priority | Low | ||
Remotable | True | ||
Alert Message |
| ||
Event Log | System | ||
Comment | Mom2005ID='{327B6FDA-9442-499C-BD0C-BEAEDFC34E3D}';MOM2005ComputerGroupID={4B5B5233-6359-4A59-8E47-EDFFDF978CDD} |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
_907D4578_146C_11D3_AB21_00A0C98620CE_ | DataSource | Microsoft.Windows.EventProvider | Default |
CollectEventData | WriteAction | Microsoft.SystemCenter.CollectEvent | Default |
CollectEventDataWarehouse | WriteAction | Microsoft.SystemCenter.DataWarehouse.PublishEventData | Default |
GenerateAlert | WriteAction | System.Mom.BackwardCompatibility.AlertResponse | Default |
<Rule ID="SMSv4_dependent_service_failure__The_World_Wide_Web_Publishing_Service_terminated_unexpectedly_10_Rule" Target="Microsoft.SystemCenter.ConfigurationManager.2007.Microsoft_SMSv4_Component_Servers_based_on_IIS_Installation" Enabled="false" ConfirmDelivery="true" Comment="Mom2005ID='{327B6FDA-9442-499C-BD0C-BEAEDFC34E3D}';MOM2005ComputerGroupID={4B5B5233-6359-4A59-8E47-EDFFDF978CDD}">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_907D4578_146C_11D3_AB21_00A0C98620CE_" Comment="{907D4578-146C-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesMOM2005RegularExpression</Operator>
<Pattern>^(7031|7034|7023|7024)$</Pattern>
</RegExExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Service Control Manager</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Params/Param[1]</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>World Wide Web Publishing Service</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">
<AlertGeneration>
<GenerateAlert>true</GenerateAlert>
<Owner/>
<Description>
$Data/LoggingComputer$
- ConfigMgr 2007 dependent service failure: The World Wide Web Publishing Service terminated unexpectedly.
The World Wide Web Publishing Service service running on
$Data/LoggingComputer$
was detected as stopped at
$Data/@time$
.</Description>
<AlertLevel>70</AlertLevel>
<ResolutionState/>
<Source>
$Data/PublisherName$
</Source>
<Name>ConfigMgr 2007 dependent service failure: The World Wide Web Publishing Service terminated unexpectedly</Name>
</AlertGeneration>
<InvokerType>0</InvokerType>
</WriteAction>
<WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>