| Event Id | 1016 |
| Source | Microsoft-Windows-IIS-W3SVC |
| Description | The World Wide Web Publishing Service (WWW Service) did not configure logging for site %1. The data field contains the error number. |
| Event Information | According to Microsoft : Cause : This event is logged when the WWW serviuce did not configure logging for sites. Resolution : Stop and restart the HTTP service Stopping the HTTP service will shut down the World Wide Web Publishing Service (W3SVC). All Web traffic to the server will stop while these services are down. To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority. To stop and restart the HTTP service: 1.Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator . 2.Type net stop HTTP /y . 3.Type net start w3svc . This will also start the HTTP service. 4.Start any other services that were stopped when HTTP and W3SVC were shut down. Verify : To verify that a Web site is started, you can use either IIS Manager or the appcmd command line utility. To perform these procedures, you must have membership in Administrators , or you must have been delegated the appropriate authority. To verify that the Web site is started by using the appcmd command line utility: 1.Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator . 2.Change the directory to %SystemDrive%\Windows\System32\inetsrv. 3.Run the following command: appcmd.exe list site -site.name:"Site Name" . If the Web site is started, the output will resemble the following: SITE "Default Web Site" (id:1,bindings:http/*:80:,state:Started) To verify that the Web site is started by using IIS Manager: 1.Click Start , click Control Panel , and then click Administrative Tools. 2.Right-click Internet Information Services (IIS) Manager and select Run as administrator . 3.In the Connections pane, expand the computer name. 4.In the Connections pane, click the Sites node. 5.In Features View , look for the Web site name. The Web site status will be indicated under the Status column. If the Web site is started and is using the HTTP protocol, Started(http) will appear. |
| Reference Links | Event ID 1016 from Source Microsoft-Windows-IIS-W3SVC |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.