| Event Id | 1003 |
| Source | w3ctrs |
| Description | Unable to query the W3SVC (HTTP) service performance data. The error code returned by the service is data DWORD 0. |
| Event Information | CAUSE:These errors are caused when a server is being analyzed using Performance Monitor and the IIS Admin Service is stopped or restarted, or when the IIS counters are added when the IIS Admin Service is not running. This information from some newsgroups may help you: ------------------------------------------------------------------------------ In addition to these events, the IIS Admin service may not be able to be stopped or the Event Viewer may become temporarily locked. These errors are caused when a server is being analyzed using Performance Monitor and the IIS Admin Service is stopped or restarted, or when the IIS counters are added when the IIS Admin Service is not running. When you analyze a server using Performance Monitor, it is necessary to stop Performance Monitor before stopping or starting the IIS Admin service. The IIS counter collection DLL uses the IIS MetaBase (for enumerating server roots and IPC). When you are viewing the counters, the IIS Admin service, which hosts the IIS MetaBase, should not be shut down. It may appear to become locked, even though both the WWW and FTP Publishing services are shut down. In the event, the IIS Admin service is stopped while Performance Monitor is running, and either the IIS Admin service or Event Viewer will appear to become locked. Exit Performance Monitor and stop the IIS Admin service. ------------------------------------------------------------------------------ |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.