Event ID - 1168

Event Id1168
SourceMicrosoft-Windows-IIS-W3SVC
DescriptionThe World Wide Web Publishing Service (WWW Service) did not create a relationship between %1 and application %2 in site %3. The site will be stopped because the WWW Service cannot notify HTTP.sys about the application. The data field contains the error number.
Event Information According to Microsoft :

Cause :

This event is logged when the World Wide Web Publishing Service (WWW Service) did not create a relationship and application in site.

Resolution :

Stop and restart WAS and HTTP

Stopping and starting the HTTP service and the Windows Process Activation Service will shut down the World Wide Web Publishing service (W3SVC). All Web traffic to the server will stop while these services are down.

To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To stop and restart WAS and the HTTP service:
  1. Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator .
  2. Type net stop HTTP /y .
  3. Type net stop WAS /y .
  4. Type net start w3svc . This will also start WAS and the HTTP Service.
  5. To restart W3SVC, from the command prompt, type net start w3svc . Also, start any other services that were stopped when HTTP and WAS were shut down.
Verify :

To verify that a Web site is started, you can use either IIS Manager or the appcmd command line utility.

To perform these procedures, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To verify that the Web site is started by using the appcmd command line utility:
  1. Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator .
  2. Change the directory to %SystemDrive%\Windows\System32\inetsrv .
  3. Run the following command: appcmd.exe list site -site.name:"Site Name" . If the Web site is started, the output will resemble the following:

    SITE "Default Web Site" (id:1,bindings:http/*:80:,state:Started)
To verify that the Web site is started by using IIS Manager:
  1. Click Start , click Control Panel , and then click Administrative Tools .
  2. Right-click Internet Information Services (IIS) Manager and select Run as administrator .
  3. In the Connections pane, expand the computer name.
  4. In the Connections pane, click the Sites node.
  5. In Features View , look for the Web site name. The Web site status will be indicated under the Status column. If the Web site is started and is using the HTTP protocol, Started(http) will appear.
Reference LinksEvent ID 1168 from Source Microsoft-Windows-IIS-W3SVC

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh