Finding Application Pool name from w3wp.exe PID

-
Recently I handled a case that process "IIS Worker Process"    (c:\windows\system32\inetsrv\w3wp.exe) continueously writing to a log file in c:\temp\tracing/log, this was found using process monitor.

I wanted to narrow down what application pool exactly writes this log file and below information was provided by MSFT.

http://blogs.msdn.com/b/jb/archive/2006/02/22/536693.aspx

C:\WINDOWS\system32>cscript iisapp.vbs
Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.

W3WP.exe PID: 15924   AppPoolId: DefaultAppPool

I found the application pool id as "DefaultAppPool"


Another process Content Index service (C:\WINDOWS\system32\cisvc.exe) was writing to C:\inetpub\catalog.wci\0010002.ci and the solution was Indexing Service supposed to be disabled as standard in the environment :)

Comments

Post a Comment

Popular posts from this blog

vRA/vRO workflows

-
Image
 Types of workflows:  Type  Example  Screenshot   vRealize Orchestrator Workflow   Assign Backup Tag to VM                           Publish a Blueprint You can publish a blueprint for use in machine provisioning and optionally for reuse in another blueprint. To use the blueprint for requesting machine provisioning, you must entitle the blueprint after publishing it. Blueprints that are consumed as components in other blueprints do not required entitlement. Prerequisites Log in to  vRealize Automation  as an  infrastructure architect . Create a blueprint. See  Checklist for Creating vRealize Automation Blueprints . Procedure Click the  Design  tab. Click  Blueprints . Point to the blueprint to publish and click  Publish . Click  OK . Results The blueprint is published as a catalog item but you must fir
Read more

How to generate HPS Report for Windows

-
Image
[ps] this is copy paste from:http://www.sysadminblog.info/tag/hps-report-for-windows/ - thanks to the admin out there :) HPS Reports is an information gathering tool for Windows servers.HPS Reports is similar to the Microsoft MPS Report, except it collects additional HP specific Hardware content. If you have a blue screen on a ProLiant Server running Windows and you have Windows support with HP, or you want HP to determine if the blue screen is hardware related. It’s possible that the systems specialist who takes your call may request an HPS Report. Download Link http://update.external.hp.com/HPS/HPSreports/ Note that there are currently four different variants of the tool. 1.HPSRPT_Enhanced_v9.1.00-x86.EXE – ProLiant –x86 – Running Windows NT/2000/2003/2008 32bit 2.HPSRPT_Enhanced_v9.1.00-ia64.EXE – Integrety – Running Windows 2003/2008 64 bit Itanium 3.HPSRPT_Enhanced_v9.1.00-x64.EXE – AMD64/Intel EM64T or Intel64 – Running Windows 2003/2008 64 bit And finally.. 4. HPSRPT_E
Read more