Event ID - 1129

Event Id1129
SourceMicrosoft-Windows-IIS-W3SVC
DescriptionThe World Wide Web Publishing Service (WWW Service) did not register the URL prefix %1 for site %2. Either the network endpoint for the site's IP address could not be created or the IP listen list for HTTP.sys did not have any usable IP addresses. The site has been disabled. The data field contains the error number.
Event Information According to Microsoft :

Cause :

This event is logged when the World Wide Web Publishing Service (WWW Service) did not register the URL prefix for site.

Resolution :

Clear the IP listen list

By default, the IP listen list is empty. This configuration works well for most Web sites, and unnecessary entries in the list may interfere with Web site availability. To clear all entries from the IP listen list, follow these steps:
  • Display and note the IP addresses in the IP listen list.
  • Delete the addresses from the list.
  • Display the IP listen list again to verify that it is empty.
  • Start the Web site.
To perform these procedures, you must have membership in Administrators , or you must have been delegated the appropriate authority.

Display and remove the IP addresses in the IP listen list

To display and remove the IP addresses in the IP listen list:
  1. Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator .
  2. Type netsh http show iplisten and press ENTER.
  3. Note the IP addresses that appear.
  4. Type netsh http delete iplisten x.x.x.x , where x.x.x.x represents the IP address you want to remove.
  5. Repeat the command in step 4 for every address that you noted in step 3.
  6. Type netsh http show iplisten again and press ENTER to confirm that the list is empty.
Start the Web site

To start the Web site:
  1. Click Start , click Control Panel , and then click Administrative Tools .
  2. Right-click Internet Information Services (IIS) Manager and select Run as administrator .
  3. In the Connections pane, select the Web site that you have to start.
  4. In the Actions pane, click Start to start the site.
Verify :

To verify that a Web site is started, you can use either IIS Manager or the appcmd command line utility.

To perform these procedures, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To verify that the Web site is started by using the appcmd command line utility:
  1. Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator .
  2. Change the directory to %SystemDrive%\Windows\System32\inetsrv .
  3. Run the following command: appcmd.exe list site -site.name:"Site Name" . If the Web site is started, the output will resemble the following:

    SITE "Default Web Site" (id:1,bindings:http/*:80:,state:Started)
To verify that the Web site is started by using IIS Manager:
  1. Click Start , click Control Panel , and then click Administrative Tools .
  2. Right-click Internet Information Services (IIS) Manager and select Run as administrator .
  3. In the Connections pane, expand the computer name.
  4. In the Connections pane, click the Sites node.
  5. In Features View , look for the Web site name. The Web site status will be indicated under the Status column. If the Web site is started and is using the HTTP protocol, Started(http) will appear.
Reference LinksEvent ID 1129 from Source Microsoft-Windows-IIS-W3SVC

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.