Sign in
 
HomeOnline20132010Other VersionsRelated ProductsLibraryForumsGallery
TechCenter >
> 
> 
App Pool change is resulting in Service Unavailable Error

Proposed App Pool change is resulting in Service Unavailable Error

  • Tuesday, May 08, 2012 8:07 AM
     
     
    Sign In to Vote
    0

    Hi all,

    I am using SP 2010 and Win Server 2008 R2. I have central Admin and Some SP sites. I am running their application pools under some service Account say 'abc\def'. Til few days back it was working fine but some time ago I deleted my Program Data folder accidentally to get the free space on my system. Since then When i try to browse the sites its giving Service Unavailable error. Event Viewer says that. "Windows cannot load the user's profile but has logged on with the default profile for the system ." But if I use a local Service Account, everything works fine. I need to run the sites on Service Account and the Service Account is the System Admin on the machine. He has also full access to COntent DB as previously the sites are browsable with the service account. does anyone has an idea of what might be causing this issue?

    Thanks,



    K.V.N.PAVAN

     

All Replies

  • Tuesday, May 08, 2012 8:28 AM
     
     Proposed
    Sign In to Vote
    1

    the 503 Service Unavailable error is usually caused by the service stopping due to the account it's running as.  Check your application pools and then check the accounts in AD that they're using and make sure they're not locked out or disabled.

    You can also run into problems if you've changed any settings directly within IIS and not through the SharePoint interface. In which case running the Config Wizard and removing the box from the farm and adding it back in, will ensure the settings are all re-created from the Config database.

    Paul Turner http://redmanta.co.uk/blog Twitter: @RedMantaUK MCTS:WSS,MOSS,2010 MCITP:2010.
    Please remember to click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.

     
  • Tuesday, May 08, 2012 8:35 AM
     
     
    Sign In to Vote
    0

    Agree with Paul.

    Any changes made to an app pool or accounts or IIS, has to be made from SharePoint, never directly in IIS.

    Regards

    Thomas Balkeståhl - Technical Specialist - SharePoint - http://blog.blksthl.com
    Download the SharePoint Branding Project here

     
  • Tuesday, May 08, 2012 8:46 AM
     
     
    Sign In to Vote
    0

    Hi Paul,

    f the Service Account is disabled, I wil not be able to login to the site as a Service Account User ? Is that so..? Also please let me know how to change the App pool setting from SP interface instead of from IIS interface.

    Thanks,

    K.V.N.PAVAN

     
  • Tuesday, May 08, 2012 8:52 AM
     
     
    Sign In to Vote
    1
    If your service account is disabled or locked out, any application pool using this account will immediately stop as the account cannot be verified.  Check these first.  You can change the account the application pools are using via the Web Application configuration settings in Central Admin.

    Paul Turner http://redmanta.co.uk/blog Twitter: @RedMantaUK MCTS:WSS,MOSS,2010 MCITP:2010.
    Please remember to click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.

     
  • Tuesday, May 08, 2012 8:52 AM
     
     
    Sign In to Vote
    1

    Hi.

    If the service account is disabled or locked out, the entire website/web application should be disabled yes.
    Regarding changing the app pool account, this looks promising:

    Using the gui:

    Updating the Application Pool Account on a SharePoint 2010 Site
    http://blog.sharepointrx.com/2010/12/01/updating-the-application-pool-account-on-a-sharepoint-2010-site/

    Using PowerShell:

    Set-SPServiceApplicationPool
    http://technet.microsoft.com/en-us/library/ff607906.aspx

    Extra reference:

    Administering Service Applications Using the SharePoint 2010 Management Shell
    http://msdn.microsoft.com/en-us/library/ee537913.aspx

    Regards

    Thomas Balkeståhl - Technical Specialist - SharePoint - http://blog.blksthl.com
    Download the SharePoint Branding Project here

     
  • Tuesday, May 08, 2012 8:55 AM
     
     
    Sign In to Vote
    0

    Yes, I am able to login to the Central Admin and to the site with the Service Account credentials. So that means that the account has not been locked out or disabled. right? or is there any other mechanism to ensure this?

    Thanks,

    K.V.N.PAVAN

     
  • Tuesday, May 08, 2012 9:11 AM
     
     
    Sign In to Vote
    1
    No that simply means that the account your Central Admin application pool is running under is not locked out or disabled.  You can check which accounts your other web applications are using by looking at the application pools in IIS. You should see which ones are stopped through the IIS interface, you can then check the corresponding accounts in AD.

    Paul Turner http://redmanta.co.uk/blog Twitter: @RedMantaUK MCTS:WSS,MOSS,2010 MCITP:2010.
    Please remember to click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.

     
  • Tuesday, May 08, 2012 9:15 AM
     
     
    Sign In to Vote
    0

    Hi,

    You need to grant the new account logon as a service and logon as a batch job!

    Regards
    Henrik A. Halmstrand
    sharepointrevealed.com
    getspconfig.codeplex.com
    Please click Mark As Answer; if a post solves your problem or Vote As Helpful; if a post has been useful to you.

     
  • Tuesday, May 08, 2012 9:24 AM
     
     
    Sign In to Vote
    0

    Paul, I have only one service account under which I am running both the central Admin and SP Site. I am able to login to the site and as well as Central Admin using the Service Account credentials. So from your answer I can ensure that the Service account is not locked or disabled.I hosted a few services using the same Service Account as that of Central Admin but Ia mable to browse through the service and methods in them. these are enough I think that the acount is not locked out or disabled.

    Thanks,

    K.V.N.PAVAN

     
  • Tuesday, May 08, 2012 9:26 AM
     
     
    Sign In to Vote
    0

    I think that Paul simply missed that you logged on WITH the service account.

    I agree with you, if you can use it to logon, then the account is not disabled or locked out. You would not be allowed to logon if it was.
    Search for the solution elsewhere...

    Regards

    Thomas Balkeståhl - Technical Specialist - SharePoint - http://blog.blksthl.com
    Download the SharePoint Branding Project here

     
  • Tuesday, May 08, 2012 9:29 AM
     
     
    Sign In to Vote
    1

    I'm getting confused, with your original post you stated when you try to browse the site with the Service account

    "Since then When i try to browse the sites its giving Service Unavailable error" but your last statement says with the 1 service account you have you are "able to login to the site and as well as Central Admin".

    So at what point with that 1 service account are you getting the "Service Unavailable "error. Are all your Service Applications, (Usage/Search/UPS etc) all using the same Service Account?

    Paul Turner http://redmanta.co.uk/blog Twitter: @RedMantaUK MCTS:WSS,MOSS,2010 MCITP:2010.
    Please remember to click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.

     
  • Tuesday, May 08, 2012 9:31 AM
     
     
    Sign In to Vote
    1
    As an addition, the account might not be locked out but have you changed the password at all?

    Paul Turner http://redmanta.co.uk/blog Twitter: @RedMantaUK MCTS:WSS,MOSS,2010 MCITP:2010.
    Please remember to click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.

     
  • Tuesday, May 08, 2012 9:38 AM
     
     
    Sign In to Vote
    0

    Hey sry to say that it was misunderstood. I am 'trying' that menas I am opening the site in browser provided the app pool is running with the service account and I browse the site. thats what I meant.sry as I was unable to convey it completely and properly it was my bad. I haven't changed the password also . I am using this service account for the primary reason that I need not change the password. Is there any other idea? Previously it used to work fine before I deleted the program data folder but why not now? thats my question . Am I missing something or so..

    thanks,

    K.V.N.PAVAN

     
  • Tuesday, May 08, 2012 9:44 AM
     
     
    Sign In to Vote
    1

    OK, If you logon to the server with a new account that you've not logged on with before does it re-create the Program Data folders for you?  There's also the SharePoint logs to look at for some more information about exactly what is occuring when you try to access the site.

    Paul Turner http://redmanta.co.uk/blog Twitter: @RedMantaUK MCTS:WSS,MOSS,2010 MCITP:2010.
    Please remember to click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.

     
  • Tuesday, May 08, 2012 9:58 AM
     
     Proposed
    Sign In to Vote
    1

    Paul, and Pa1 Kumar.

    Made some research, its not the users Program Data folder that is deleted, its the hidden folder C:\ProgramData...! Never ever do that without knowing what you do...

    Found this that explains a bit about what the folder may contain:

    SharePoint 2010 – Clearing the Configuration Cache
    http://blogs.msdn.com/b/jamesway/archive/2011/05/23/sharepoint-2010-clearing-the-configuration-cache.aspx

    In addition, it holds for example all configuration settings for content deployment and more. Deleting it is like removing a part of SharePoint.

    So, how do you get back? I doubt that there is an easy way out, running the config wizard and removing the server from the farm, then rerunning it and adding it back to the farm could be one. Just running the config wizard could also be a way. Or rebooting the entire server.

    If none of that works, I would refer you to your backup/snapshot that was made prior to the unfortunate deletion was made.

    Good luck!

    Regards

    Thomas Balkeståhl - Technical Specialist - SharePoint - http://blog.blksthl.com
    Download the SharePoint Branding Project here

    • Proposed As Answer by Paul Turner _ Tuesday, May 08, 2012 10:09 AM
    •  
     
  • Tuesday, May 08, 2012 10:02 AM
     
     
    Sign In to Vote
    0
    Nice work Thomas, personally I would try the remove from farm.  Unless there's a possibility that Shadow volumes where setup on the server. http://technet.microsoft.com/en-us/magazine/dd637757.aspx

    Paul Turner http://redmanta.co.uk/blog Twitter: @RedMantaUK MCTS:WSS,MOSS,2010 MCITP:2010.
    Please remember to click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.

    • Proposed As Answer by Paul Turner _ Tuesday, May 08, 2012 10:09 AM
    • Unproposed As Answer by Paul Turner _ Tuesday, May 08, 2012 10:09 AM
    •  
     
  • Tuesday, May 08, 2012 10:07 AM
     
     
    Sign In to Vote
    0

    Thanks Paul. Feel free to 'propose as answer' if you think that it's the one :-) All of your input was helpful to this, and I credited you accordingly.

    Take care, 'til the next time we meet here :-)

    Regards

    Thomas Balkeståhl - Technical Specialist - SharePoint - http://blog.blksthl.com
    Download the SharePoint Branding Project here

     
  • Tuesday, May 08, 2012 10:11 AM
     
     
    Sign In to Vote
    0

    Initially It used to give a Cache.ini file has not been found. But now I have created a folder with GUID and all the files have been created by the SharePOint Timer Service. From the Event Viewer I can see the following 2 messages.

    1.Windows cannot load the user's profile but has logged you on with the default profile for the system.

     DETAIL - The system cannot find the path specified.

    2.Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.

    Secondly from ULS Logs I can see the following.

    05/08/2012 12:04:33.37     OWSTIMER.EXE (0x1108)                       0x15BC    SharePoint Foundation             Monitoring                        nasq    Medium      Entering monitored scope (Timer Job SharePoint BI Maintenance)    66881203-cc6b-443a-91a8-e6d9402eaeb2
    05/08/2012 12:04:33.37     OWSTIMER.EXE (0x1108)                       0x15BC    SharePoint Foundation             Topology                          e5mc    Medium      WcfSendRequest: RemoteAddress: 'http://deheremap4454:32843/46973e8054a7477aac83103636c5dc0f/PerformancePointService.svc' Channel: 'Microsoft.PerformancePoint.Scorecards.IBIMonitoringServiceApplication' Action: 'http://www.microsoft.com/performancepoint/scorecards/IBIMonitoringServiceApplication/MaintenanceJob' MessageId: 'urn:uuid:50da77e4-1c5c-489d-bfdc-8efa90c52f95'    66881203-cc6b-443a-91a8-e6d9402eaeb2
    05/08/2012 12:04:33.38     w3wp.exe (0x1408)                           0x2040    SharePoint Foundation             Topology                          e5mb    Medium      WcfReceiveRequest: LocalAddress: 'http://deheremap4454.emea.adsint.biz:32843/46973e8054a7477aac83103636c5dc0f/PerformancePointService.svc' Channel: 'System.ServiceModel.Channels.ServiceChannel' Action: 'http://www.microsoft.com/performancepoint/scorecards/IBIMonitoringServiceApplication/MaintenanceJob' MessageId: 'urn:uuid:50da77e4-1c5c-489d-bfdc-8efa90c52f95'    982c7a98-5f62-4b45-b683-8c2e8edfc350
    05/08/2012 12:04:33.38     w3wp.exe (0x1408)                           0x2040    SharePoint Foundation             Monitoring                        nasq    Medium      Entering monitored scope (ExecuteWcfServerOperation)    982c7a98-5f62-4b45-b683-8c2e8edfc350
    05/08/2012 12:04:33.38     w3wp.exe (0x1408)                           0x2040    SharePoint Foundation             Topology                          e5mc    Medium      WcfSendRequest: RemoteAddress: 'https://localhost:32844/SecurityTokenServiceApplication/WindowsTokenCache.svc' Channel: 'Microsoft.SharePoint.Administration.Claims.ISPWindowsTokenCacheServiceContract' Action: 'http://tempuri.org/ISPWindowsTokenCacheServiceContract/GetUserHandle' MessageId: 'urn:uuid:994e59a8-e74a-4a26-80a7-e24df6fe4f15'    982c7a98-5f62-4b45-b683-8c2e8edfc350
    05/08/2012 12:04:33.39     w3wp.exe (0x2588)                           0x2250    SharePoint Foundation             Topology                          e5mb    Medium      WcfReceiveRequest: LocalAddress: 'https://deheremap4454.emea.adsint.biz:32844/SecurityTokenServiceApplication/windowstokencache.svc' Channel: 'System.ServiceModel.Channels.ServiceChannel' Action: 'http://tempuri.org/ISPWindowsTokenCacheServiceContract/GetUserHandle' MessageId: 'urn:uuid:994e59a8-e74a-4a26-80a7-e24df6fe4f15'    44830f79-2972-4653-b9ab-9b290a389db9
    05/08/2012 12:04:33.39     w3wp.exe (0x2588)                           0x2250    SharePoint Foundation             Monitoring                        nasq    Medium      Entering monitored scope (ExecuteWcfServerOperation)    44830f79-2972-4653-b9ab-9b290a389db9
    05/08/2012 12:04:33.39     w3wp.exe (0x2588)                           0x2250    SharePoint Foundation             Claims Authentication             d52v    High        SPWindowsTokenCacheServiceApplication.GetUserHandle() could not find token for user '0#.w|nt authority\network service'.    44830f79-2972-4653-b9ab-9b290a389db9
    05/08/2012 12:04:33.39     w3wp.exe (0x2588)                           0x2250    SharePoint Foundation             Monitoring                        b4ly    Medium      Leaving Monitored Scope (ExecuteWcfServerOperation). Execution Time=0.440279420987863    44830f79-2972-4653-b9ab-9b290a389db9
    05/08/2012 12:04:33.39     w3wp.exe (0x1408)                           0x2040    SharePoint Foundation             Claims Authentication             fvx8    Medium      SPSecurityContext.WindowsIdentity: Could not retrieve a valid windows identity for NTName='NT AUTHORITY\NETWORK SERVICE' from the windows token cache service. Exception: System.ArgumentException: Token cannot be zero.     at System.Security.Principal.WindowsIdentity.CreateFromToken(IntPtr userToken)     at System.Security.Principal.WindowsIdentity..ctor(IntPtr userToken, String authType, Int32 isAuthenticated)     at System.Security.Principal.WindowsIdentity..ctor(IntPtr userToken)     at Microsoft.SharePoint.SPSecurityContext.GetWindowsIdentity().    982c7a98-5f62-4b45-b683-8c2e8edfc350
    05/08/2012 12:04:33.39     w3wp.exe (0x1408)                           0x2040    SharePoint Foundation             Claims Authentication             g220    Unexpected    No windows identity for nt authority\network service.    982c7a98-5f62-4b45-b683-8c2e8edfc350
    05/08/2012 12:04:33.40     w3wp.exe (0x1408)                           0x2040    SharePoint Foundation             Monitoring                        b4ly    Medium      Leaving Monitored Scope (ExecuteWcfServerOperation). Execution Time=23.6583141153415    982c7a98-5f62-4b45-b683-8c2e8edfc350
    05/08/2012 12:04:33.40     OWSTIMER.EXE (0x1108)                       0x15BC    SharePoint Foundation             Monitoring                        b4ly    Medium      Leaving Monitored Scope (Timer Job SharePoint BI Maintenance). Execution Time=34.6342901122908    66881203-cc6b-443a-91a8-e6d9402eaeb2
    05/08/2012 12:04:36.37     OWSTIMER.EXE (0x1108)                       0x17B8    SharePoint Foundation             Monitoring                        nasq    Medium      Entering monitored scope (Timer Job Health Statistics Updating)    80b57e6c-8338-467e-bdcf-39fd551072fc
    05/08/2012 12:04:36.37     OWSTIMER.EXE (0x1108)                       0x17B8    SharePoint Foundation             Topology                          8xqz    Medium      Updating SPPersistedObject SearchServiceApplicationMonitoring Name=Monitoring_7F19A5D194F942e6A9856FCFD6EE6F63. Version: 76773 Ensure: False, HashCode: 53168174, Id: d429ef62-b14e-4a6d-915b-8d172d8b5357, Stack:    at Microsoft.SharePoint.Administration.SPPersistedObject.BaseUpdate()     at Microsoft.Office.Server.Search.Monitoring.TraceDiagnosticsProvider.UpdateServiceApplicationHealthStats()     at Microsoft.SharePoint.Administration.SPTimerJobInvokeInternal.Invoke(SPJobDefinition jd, Guid targetInstanceId, Boolean isTimerService, Int32& result)     at Microsoft.SharePoint.Administration.SPTimerJobInvoke.Invoke(TimerJobExecuteData& data, Int32& result)      80b57e6c-8338-467e-bdcf-39fd551072fc
    05/08/2012 12:04:36.41     OWSTIMER.EXE (0x1108)                       0x17B8    SharePoint Foundation             Monitoring                        b4ly    Medium      Leaving Monitored Scope (Timer Job Health Statistics Updating). Execution Time=46.3670662053417    80b57e6c-8338-467e-bdcf-39fd551072fc
    05/08/2012 12:04:37.37     OWSTIMER.EXE (0x1108)                       0x23D4    SharePoint Foundation             Monitoring                        nasq    Medium      Entering monitored scope (Timer Job SchedulingUnpublish)    6169ab18-fd19-4566-a537-d68363ad53a0
    05/08/2012 12:04:37.37     OWSTIMER.EXE (0x1108)                       0x23D4    SharePoint Foundation             Monitoring                        b4ly    Medium      Leaving Monitored Scope (Timer Job SchedulingUnpublish). Execution Time=1.15210173360022    6169ab18-fd19-4566-a537-d68363ad53a0
    05/08/2012 12:04:38.37     OWSTIMER.EXE (0x1108)                       0x17F4    SharePoint Foundation             Monitoring                        nasq    Medium      Entering monitored scope (Timer Job job-application-server)    18d68a0d-6c13-4dc4-80ef-f934757e06a6
    05/08/2012 12:04:38.37     OWSTIMER.EXE (0x1108)                       0x17F4    SharePoint Server Search          Administration                    dkd5    High        synchronizing search service instance    18d68a0d-6c13-4dc4-80ef-f934757e06a6
    05/08/2012 12:04:38.37     OWSTIMER.EXE (0x1108)                       0x17F4    SharePoint Server Search          Administration                    eff0    High        synchronizing search data access service instance    18d68a0d-6c13-4dc4-80ef-f934757e06a6
    05/08/2012 12:04:38.44     OWSTIMER.EXE (0x1108)                       0x17F4    SharePoint Server Search          Administration                    dl2a    Medium      Search application 'Search Service Application': Verify correctness of incremental crawl schedule on content source 'Local SharePoint sites'.    18d68a0d-6c13-4dc4-80ef-f934757e06a6
    05/08/2012 12:04:38.44     OWSTIMER.EXE (0x1108)                       0x17F4    SharePoint Server Search          Administration                    dl2i    Medium      Search application 'Search Service Application': Provision start addresses in default content source.    18d68a0d-6c13-4dc4-80ef-f934757e06a6
     I cant see any relation from Event Viewer Messages and ULS Logs. do you have any direction now?

    Thanks,

    K.V.N.PAVAN