Event ID - 15

Event Id15
SourceMicrosoft-Windows-IIS-FTP
DescriptionFailed to read metabase property PassivePortRange under the FTP Service node %1.
Event InformationAccording to Microsoft :
Cause :
This event is logged when the FTP service failed to read metadabase property passive port range under the FTP node.
Resolution :
Change the PassivePortRange property
In Passive mode, IIS 6.0 FTP randomly responds in a default port range from 1025 to 5000. To create a smaller range, you can configure a metabase property key named PassivePortRange . When you manually specify a value for PassivePortRange , you must specify a value from 5001 to 65535. The value that you specify may be a range or a single number.
To resolve this issue:
1.Configure PassivePortRange by using an ADSUTIL script.
2.Restart the FTP Service.
Note:
To perform these procedures, you must have membership in Administrators, or you must have been delegated the appropriate authority.
Configure PassivePortRange by using an ADSUTIL script
To configure PassivePortRange by using an ADSUTIL script:
1.Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt, and then click Run as administrator.
2.Type cd %SystemDrive%\Inetpub\AdminScripts and press ENTER.
3.Type the following from the command prompt (this example uses a port range of 6000-7000): adsutil.vbs set /MSFTPSVC/PassivePortRange "6000-7000"
Restart the FTP Service
To restart the FTP Service:
1.Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator .
2.Type net stop msftpsvc .
3.Type net start msftpsvc.
Verify :
If the FTP service is correctly configured, it should be in a running state. To verify that the FTP service is running, use the following procedure.
To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.
To verify that the FTP service is running:
1.Open an elevated Command Prompt window. Click Start, point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator .
2.Type sc query msftpsvc , and press ENTER. The FTP service is running if the state reported for the service is 4 RUNNING.
Reference LinksEvent ID 15 from Source Microsoft-Windows-IIS-FTP

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.