| Event Id | 2269 |
| Source | Microsoft-Windows-IIS-WMSVC |
| Description | The worker process for app pool '%1', PID='%2', failed to initialize the http.sys communication when asked to start processing http requests and therefore will be considered ill by W3SVC and terminated. The data field contains the error number. |
| Event Information | According to Microsoft : Cause : This event is logged when the worker process for app pool failed to initialize the http.sys communication. Resolution : Restore bypass traverse checking rights To resolve this issue, you must first restore the bypass traverse checking rights, and then restart the W3SVC and HTTP services. Note : To perform these procedures, you must have membership in Administrators, or you must have been delegated the appropriate authority. Restore bypass traverse checking rights To restore bypass traverse checking rights by using the Group Policy Editor: 1.Click Start, click Run, type gpedit.msc, and then click OK. 2.Expand Computer Configuration, Windows Settings , and Security Settings . 3.Expand Local Policies , and then selectUser Rights assignment . 4.In the right pane under the Policy column, right-clickBypass traverse checking and click Properties . 5.Click Add User or Group . 6.Type Everyone;Users , and then click OK. Note: If you receive a message that an object named "Users" cannot be found, click Object Types, click to select the Groups check box, and then click OK two times. Note: If you do not want to give the Everyone group and the Users group the Bypass Traverse Checking user right, you may be able to resolve this issue if you give the IIS_IUSRS group the Bypass Traverse Checking user right. To do this, replace "Everyone;Users" above with "IIS_IUSRS". Restart the W3SVC and HTTP services To restart the W3SVC and HTTP services by using the net command: 1.Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator . 2.Type net stop w3svc . 3.Type net stop http . 4.Type net start 3svc . 5.Type net start Http . Verify : You can use a browser client and IIS Manager to verify that an application pool worker process has started. Note: An IIS worker process does not exist until a request is made to the application pool for the Web application. For this reason, you may have to test browse the Web application before you can verify that a worker process is functional. Test browse the application To test browse the application: 1.Open up your default browser or required client. 2.Browse to the Web site or application whose worker process you want to test. The client should display the expected output page. Verify that an application pool worker process is running To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority. To verify that an application pool worker process is running: 1.Click Start , click Control Panel , and then click Administrative Tools . 2.Right-click Internet Information Services (IIS) Manager and select Run as administrator. 3.In the Connections pane, select the computer name. 4.In Features View , under the Feature Name column heading, double-click the Worker Processes management feature. A list of currently active application pools and worker processes will appear. 5.The State column for the worker process will indicate Running if the worker process is running. 6.You can also view currently executing requests by right-clicking the application pool name or worker process id and selecting View Current Requests. |
| Reference Links | Event ID 2269 from Source Microsoft-Windows-IIS-WMSVC |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.