Event ID - 1074

Event Id1074
SourceW3SVC
DescriptionA worker process with process id of "" serving application pool "DefaultAppPool" has requested a recycle because the worker process reached its allowed processing time limit.
Event Information According to Microsoft :
Cause :
This problem occurs because a worker process in an application pool does not have sufficient permissions to access and write to the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\\Names

Note:
represents the version of ASP.NET that is installed.
Resolution :

To work around this problem, follow these steps:
1.Add the application pool identity user account to the IIS_WPG group. (By default, the NETWORK SERVICE user account is the application pool identity user account.) To do this, follow these steps:
a) Click Start , right-click My Computer , and then click Manage .
b) Expand Local Users and Groups , and then click Groups .
c) Right-click IIS_WPG , and then click Properties .
d) In the IIS_WPG Properties dialog box, click Add .
e) In the Select Users, Computers or Groups dialog box, click Advanced.
f) Click Find Now .
g)In the Search results pane, click the application pool identity user account, and then click OK .
h)Click OK.
Note:
All the application pool identities should be members of the IIS_WPG group.
2. Make sure that the IIS_WPG group has the necessary permissions to access the ASP.NET Names registry entry. To grant IIS_WPG the necessary permissions, follow these steps:
a) Click Start , click Run , type regedit , and then click OK .
b) Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ASP.NET_2.0.50727\Names
c) Right-click Names , and then click Permissions .
d) Click Add , type IIS_WPG , click Check Names , and then click OK .
e) In the Permissions for Names dialog box, click Advanced .
f) In the Advanced Security Settings for Names dialog box, click the Permissions tab, click IIS_WPG , and then click Edit .
g) In the Permission Entry for Names dialog box, make sure that IIS_WPG is in the Name box.
h) Click to select the following check boxes
  • Query Value
  • Set Value
  • Create Subkey
  • Enumerate Subkeys
  • Notify
  • Read Control
i) In all the dialog boxes, click OK, and then exit Registry Editor.
If the server is a domain controller, you must change the application pool identity to a new domain user account or to an existing domain user account. To do this, follow these steps:
  1. Click Start , point to Administrative Tools , and then click Internet Information Services (IIS) Manager.
  2. In IIS Manager, expand the server, expand Application Pools , right-click the name of the application pool that you want to modify, and then click Properties .
  3. In the Application_Pool Properties dialog box, click the Identity tab.
  4. Click Configurable , type the account user name. Or, click Browse to locate the account.
  5. Type the account password in the Password box, and then click OK .

------------------------------------------------------------------------------------------------------------------
According to Microsoft:
To enumerate the properties and flags that are listed in the IIS metabase for Application Pools, and to view their current value, follow these steps:
1. Open a command prompt: click Start, click Run, and then type cmd.
2. Change to the directory where the Adsutil utility is located. The following is the default directory location:
%SYSTEMROOT%\Inetpub\AdminScripts
3. Type the following command:
cscript adsutil.vbs enum w3svc/AppPools .
Reference LinksEvent ID 1074 from Source W3SVC

How to modify Application Pool Recycling events in IIS 6.0

Logging Worker Process Recycling Events in IIS 6.0

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh