The IIS 7 Team Rocks!

I recently wrote about some 503 Service Unavailable Errors with IIS 7 that had me completely stumped. I tried everything I could think of to no avail.

Fortunately, a few of the members of the IIS 7 team stepped in to help. First, I received an email from Bill Staples, the group program manager of the IIS 7 team, kindly offered his assistance.

Meanwhile, Mike Volodarsky, a Program Manager on the IIS team in charge of the IIS 7 Web Server engine started offering help in my comments. Mike has a great blog with many useful troubleshooting tips for IIS 7. Highly recommended.

Mike brought in Chun Ye, a member of the http.sys team, who helped me get to the bottom of the problem. Here is the command he had me run.

netsh http show urlacl

The result showed that I had reserved http://+:80/ which takes precedence over all other URLs on port 80.

Reserved URL : http://+:80/
    User: METAVERSE\Phil
       Listen: Yes
Delegate: No SDDL: D:(A;;GX;;;S-1-5-21-1527697538-1582451445-1978546337-1000)

The solution was to run this command:

netsh http delete urlacl url=http://+:80/

Which removed the reservation.

To be honest, I have no idea why that reservation exists. Most likely it was something dumb I did a long time ago trying to debug some other long forgotten problem. I probably forgot to revert my change or didn’t even realized I had made a change.

I don’t have a real deep understanding of http.sys reservations. What I do know about it mostly comes from this post by security guru Keith Brown.

In any case, many thanks to the IIS 7 team for your help. You rock in my book.

Technorati tags: , ,

What others have said

Requesting Gravatar... Scott May 21, 2007 8:54 PM
# re: The IIS 7 Team Rocks!
Would my suggestion of trying to bind something to port 80, like Apache, have helped in this case?
Requesting Gravatar... Haacked May 21, 2007 11:04 PM
# re: The IIS 7 Team Rocks!
Not sure. It would've failed I believe. But I wouldn't have thought, "Oh! Must be http.sys reservations!" ;)
Requesting Gravatar... Rick Strahl May 23, 2007 12:25 AM
# re: The IIS 7 Team Rocks!
I'll second that the IIS team has really been all out in scouring blogs and pitching in with any issues at all! Both Bill and Mike have bailed me out a couple of times as well and posted follow ups to questions with extended blog entries which is awesome. Kudos and a big thank you to those guys!!!
Requesting Gravatar... Joe Brinkman May 23, 2007 3:07 AM
# re: The IIS 7 Team Rocks!
Oh sure. Just show off your inside connections. Don't mind us who must suffer our Vista nightmare's in obscurity ;-)

I do have to commend Microsoft for spending more time in the community the last year or two. Compared to 3 or 4 years ago, I think Microsoft has gotten more in touch with what is going on and is actively out working in the community to try and identify and solve our problems, if not always on a personal level, certainly on a global one.
Requesting Gravatar... Haacked May 23, 2007 8:47 AM
# re: The IIS 7 Team Rocks!
@Joe - ha ha. No inside connection. I posted it on my blog and they found it.
Requesting Gravatar... Mike Volodarsky May 27, 2007 2:18 PM
# re: The IIS 7 Team Rocks!
Thanks for the warm regards - glad to help out :) I have to say, a lot of time, we take something away that helps us improve IIS7 or understand where we can do more to help people use it.

Please be sure to blog or post your issues on forums.iis.net, and we'll try to help you out ... especially if its something tricky that is not already covered by a google, I mean, MSN search :)

Mike
Requesting Gravatar... RBertora Aug 22, 2007 5:13 AM
# re: The IIS 7 Team Rocks!
Help Please!


I followed the above suggestions and ran:

netsh http show urlacl

and found I had:

Reserved URL : http://+:80/wsman/
and
Reserved URL : http://+:80/Temporary_Listen_Address/

trying to remove these I get the error:
URL reservation delete failed, Error: 5
The requested operation requires elevation.

Any ideas?

Also I have created a new website on Port 8001 (not reserved), and get the same damn error in the browser:

Service Unavailable

--------------------------------------------------------------------------------

HTTP Error 503. The service is unavailable

Any ideas?

Rob


Requesting Gravatar... Me Sep 04, 2007 4:07 PM
# re: The IIS 7 Team Rocks!
I didn't erase reservation on port 80... and tried to put my web on port 133... so i acess "http://localhost:133" and what a surprise i keep on having the same error "HTTP Error 503. The service is unavailable." so this demonstrates that's not the solution, maybe it is to your problem not to mine
Requesting Gravatar... Scott Feb 26, 2008 11:53 AM
# re: The IIS 7 Team Rocks!
I am not sure if I would say that the IIS 7 team rocks. If they rocked there would have been an error in the event log explaining exactly what was going on. However *you* rock for posting this, because I had a very similar problem and you helped me to fix it. I was converting from a WCF Service hosted in an NT Service (which needs the namespace reservation) to hosting it in IIS which apparently barfs with a 503 and no event log error if there is a namespace reservation. What was a little wierd was that the app pool was running under Network Service (NS), and that was the account the namespace reservation was under:
Reserved URL : http://+:80/Echo/
User: NT AUTHORITY\NETWORK SERVICE
Listen: Yes
Delegate: No
SDDL: D:(A;;GX;;;NS)
I even considered that the namespace reservation could be causing it, but for some reason I dismissed the thought.

Anyway thanks a ton for your help, if only I had read this 3 hours ago...
Requesting Gravatar... Joe Walters Sep 24, 2008 12:42 AM
# re: The IIS 7 Team Rocks!
I think I can confirm that the reservation was not something you did because this fixed it for me too and I have never touched anything like that directly. My guess that this is the default setting for something or other.

What I know about networking and ports etc. would fit inside this O but I have spent two full days trying to resolve this.

Thanks a bunch .........
Requesting Gravatar... John Clark Oct 31, 2008 4:34 AM
# re: The IIS 7 Team Rocks!
Just wanted to say thanks - I've just spent a day tracking a bizarre problem which had the same symptoms, and happened to be a result of the same thing. You've saved my Friday.

What do you have to say?

(will show your gravatar)
Please add 3 and 8 and type the answer here: