Event ID 7023

KB ID 0000353 0

Problem

Event ID 7023

Source: Service Control Manager

Description: The Internet Authentication Service service terminated with the following error: Only one usage of each socket address (protocol/network address/port) is normally permitted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Cause: In my case the server (SBS2003) had recently been patched and updated. It was one of those updates that had stopped the IAS service from running, this was originally seen with MS KB 956189. But the update mentioned in that article (MS KB 953230) was not visible on the list of installed updates. However the fix is the same.

<palign=”left”>The Internet Authentication service was not running, and manually starting it, caused it to stall straight away.

1. On the affected server > Start > run regedit {Enter}.

2. Navigate to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParameters

3. Locate the ReservedPorts entry and double click it.

4. For IAS to run you need to have the following port ranges 1812-1813 and 1645-1646 (I was missing the second range) > OK.

Note: DO NOT remove or change any existing entries!

5. You MUST reboot the server for this to take effect.

Related Articles, References, Credits, or External Links

NA

Event ID 7023

KB ID 0000353 

Problem

Event ID 7023

Source: Service Control Manager

Description: The Internet Authentication Service service terminated with the following error:
Only one usage of each socket address (protocol/network address/port) is normally permitted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

In my case the server (SBS2003) had recently been patched and updated. It was one of those updates that had stopped the IAS service from running, this was originally seen with MS KB 956189. But the update mentioned in that article (MS KB 953230) was not visible on the list of installed updates. However the fix is the same.

The Internet Authentication service was not running, and manually starting it, caused it to stall straight away.

Solution

1. On the affected server > Start > run regedit {Enter}.

2. Navigate to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParameters

3. Locate the ReservedPorts entry and double click it.

4. For IAS to run you need to have the following port ranges 1812-1813 and 1645-1646 (I was missing the second range) > OK.

Note: DO NOT remove or change any existing entries!

5. You MUST reboot the server for this to take effect.

 

Related Articles, References, Credits, or External Links

NA

Event ID 7000 – SSPORT and DgiVecp Services Wont Start

KB ID 0000822 

Problem

Note: Event ID 7000 is a generic “unable to start a service” error, this article only deals with the SSPORT and DgiVecp services.

The SSPORT service failed to start due to the following error:
The system cannot find the file specified.
The DgiVecp service failed to start due to the following error:
The system cannot find the file specified.

I saw this with a clients print server this week, I’d just converted the server from physical to virtual, and these two services were complaining.

Solution

It seems that BOTH these services relate to Samsung printers. And removing the services does not affect the installed Samsung printer(s). But to be on the safe side we will back them up just in case.

1. On the affected machine > Windows Key+R > regedit {enter}.

2. Navigate to;

[box]
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSSPORT[/box]

3. Export the entire key to make a backup (simply double click the exported file to merge it back into the registry if you have a problem) > Then DELETE the key.

4. Navigate to;

[box]HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesDgiVecp[/box]

5. Export the entire key to make a backup (simply double click the exported file to merge it back into the registry if you have a problem) > Then DELETE the key.

Related Articles, References, Credits, or External Links

NA

World Wide Web Service Wont Start, Because Windows Process Activation Service Wont Start.

KB ID 0000878

Problem

This problem started when a client attempted to add a ‘distribution point’ for System Center onto the server. This process failed, then Outlook Web Access stopped working. First line found that the World Wide Web service was not running, when they attempted to start it, this happened;

Windows could not start the World Wide Web Publishing Service
service on Local Computer.
Error 1068: The dependency service or group failed to start.

Fair enough, the dependency in question was the Windows Process Activation Service. When they attempted to start that, this happened;

Windows could not start the Windows Process Activation Service
service on Local Computer.
Error 183: Cannot create a file when that file already exists.

Solution

This was a nightmare of a problem to troubleshoot, and IIS architecture is not my subject of choice. I was pretty much convinced the error was in a config file or a setting had been changed but where?

I restored the IIS config files from the servers own backup, and from before the error started, still the services refused to start.

Time to spin up Process Monitor. If you’re unfamiliar with Process Monitor, it is to Windows what Wireshark is to network traffic. Here I’m using it to get a ‘snapshot’ of everything that’s going on when the error occurs.

1. Run Process Monitor > Start it capturing data > Attempt to start the Windows Process Activation Service > Wait for the error > Stop the capture.

2. You will have a LOT of data, so lets narrow it down. On the properties of the service, you can see to launch, it runs ‘svchost.exe -k iissvcs’. Add in the Command Line Column, then add a filter to show only results for that command.

3. Normally at this point you would go through the results column and look for errors, e.g. access denied, not found, etc, but they all looked OK. However it was apparent that it was parsing the WebDAV_schema.xml file as it should, but before it did that, it also was reading WebDAV_schema – Copy.xml.

The copy was ‘moved elsewhere’.

4. At this point, the good folk at Microsoft came back and said they had been thought the applicationHost.config file and the bindings ‘didn’t look right either’. So we took a backup.

5. The bindings for port 80 (http) and 443 (https) were set to the default.

At this point the services could be started without error, and the problem was resolved.

Conclusion

Which of the two changes fixed the problem? The honest answer is “I don’t know”, what I do know is there was nothing I could find on the internet that helped in any way. As I had a backup of the applicationHost.config file I could compare the two see see what Microsoft meant by the bindings ‘not looking right’.

 

Related Articles, References, Credits, or External Links

Kudos to Mark Russinovich and Bryce Cogswell for Process Monitor