Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

IIS application monitor on world wide web publishing service and IISLog, sent a stop command to the service.

Anyone had the monitor actually cause a service to go down? I am monitoring the IIS services and according to the windows event logs, the user that I have setup for the application monitor actually shut the service down?

I am trying to figure out how to limit this user now and have changed the password just in case but has anyone else had the monitor actually stop the service it is monitoring?

Object: Object Server: SC Manager Object Type: SERVICE OBJECT Object Name: W3SVC Handle ID: 0x1a403d0

Process Information: Process ID: 0x288 Process Name: C:\Windows\System32\services.exe

Access Request Information: Transaction ID: {00000000-0000-0000-0000-000000000000} Accesses: Stop the service

Find more posts tagged with

Accepted answers

All comments

bridgevine

Also does anyone know what permissions are needed for service monitoring. looks like it is either an administrator or a GP setting to grant this user read to the specific services I need monitored?

aLTeReGo

I posted an answer to a similar question earlier last week. It can be found here.

bridgevine

thanks, We are already using the performance monitor setting, however that does not give the user enough rights to monitor all the services. Example if you try to use the "basic IIS" template with those permission it does not work. Admin works, however I had issues with the application monitor actually stopping the service and/or starting it if it was stopped manually. I have opened a ticket on the monitor stopping the running service.