Event ID - 5053

Event Id	5053
Source	Microsoft-Windows-WAS
Description	The Windows Process Activation Service received a change notification, but was unable to process it correctly. The data field contains the error number.
Event Information	According to Microsoft : Cause : This event is logged when Windows Process Activation Service received a change notification, but was unable to process it correctly. Resolution : Stop and restart WAS Stopping the WAS service will also stop the World Wide Web Publishing Service (W3SVC) if W3SVC is running. Thus, you may also have to start W3SVC. To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority. To stop and restart WAS: Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator . At the command prompt, type net stop was /y . At the command prompt, type net start was . To restart W3SVC, from the command prompt, type net start w3svc . Also, start any other services that were stopped when WAS was shut down. Verify : If the Windows Process Activation Service (WAS) is configured correctly, IIS will serve pages successfully. To confirm that WAS is executing successfully, perform the follow these steps: Open Internet Explorer. Browse to http://localhost or your Web site's default home page. Confirm that the expected page is displayed. Open the logs for the Web site and make sure 200 OK (request succeeded) is logged for the previous request. By default, Web site logs are located in the %SystemDrive%\inetpub\logs\LogFiles directory. Note : If logging is set to centralized, the log file size will grow over time. The minimum possible (and configurable) log file size is 1 MB.
Reference Links	Event ID 5053 from Microsoft-Windows-WAS

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught