port 80 in use by NT Kernel & System; Win Server 2008 R2

[Guest bsenftner]

This issue seems to be getting a lot of people...

 

Fresh install of Windows Server 2008 R2, with 0 Roles installed, meaning I removed the Web Server (IIS) Role, and all it's dependencies were auto-removed at that time as well.

 

I read posts here describing similar situations, followed their advice, but still the issue persists.

 

I followed the advice here: http://hardforum.com/showthread.php?t=1362841

Where a post suggested disabling these services:

1) WebClient <- was running, I stopped & set for manual start

2) Web Deployment Agent Service <- does not exist as a service (perhaps removed when I removed the IIS role?)

3) Microsoft .NET Framework NGEN. <- was running, I stopped & set for manual start

 

After rebooting, these services are not running, but Start_as_program.exe still pops the dialog "Warning Ports in use!", reporting port number 80, PID=4, process name = System, Path to process = ?

 

Checking the Task Manager, "System", PID=4 is "NT Kernel & System".

 

This is a physical server intended as a WebAPI host, going into a colo ASAP, I would like it to run on port 80.

 

Here's the result of "Server Status":

Your Internet IP Address = 50.9.162.124

Accessible from Internet = No

Newer UniServer Version = Current

Cron run status = Not running

PHP INI: php.ini file = Production

Apache port = 80

Apache SSL port = 443

Apache executable name = httpd1.exe

Apache service name = US_ApacheS1

Apache SSL server = Disabled

Apache run status = Not running

Apache install status = Free to install

MySQL port = 3306

MySQL executable name = mysqld1.exe

MySQL service name = US_MySQLS1

MySQL run status = Not running

MySQL install status = Free to install

Apache port = 80 In use by another server

Apache SSL port = 443 Is free to use

MySQL port = 3306 Is free to use

 

FWIW: This is a fresh OS install. No Skype installed. Only software installed is Firefox, paint.net, notepad++, 7-Zip, and my own executable, purely a number crunching command line utility with no IO other than stdin/stdout.

 

Any idea how to move the System off port 80?

 

Also, Start_as_service.exe pops the same dialog...

[Yoni]

What is it running in port 80?

 

Open a command prompt window and type "netstat -aon"

 

What listing in port 80?

 

[Yoni]

The reason why I'm asking is because "Web Deployment Agent Service" will trigger this PID=4 SYSTEM

 

Additionally, SQL Server Reporting Services (MSSQLSERVER) will also trigger it.

 

And last but not least turn the Reporting Service off. I've seen Windows admins having issue running apache on port 80 because of it

 

Make sure those services are stopped and disabled. Reboot, try to run apache again and please let us know.

[Guest bsenftner]

The server is at work. I'll have info at first opportunity tomorrow.

[Guest bsenftner]

Here's the output "netstat -aon":

 

 

Active Connections

 

Proto Local Address Foreign Address State PID

TCP 0.0.0.0:7 0.0.0.0:0 LISTENING 1916

TCP 0.0.0.0:9 0.0.0.0:0 LISTENING 1916

TCP 0.0.0.0:13 0.0.0.0:0 LISTENING 1916

TCP 0.0.0.0:17 0.0.0.0:0 LISTENING 1916

TCP 0.0.0.0:19 0.0.0.0:0 LISTENING 1916

TCP 0.0.0.0:80 0.0.0.0:0 LISTENING 4

TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 768

TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4

TCP 0.0.0.0:2103 0.0.0.0:0 LISTENING 1532

TCP 0.0.0.0:2105 0.0.0.0:0 LISTENING 1532

TCP 0.0.0.0:2107 0.0.0.0:0 LISTENING 1532

TCP 0.0.0.0:3389 0.0.0.0:0 LISTENING 2748

TCP 0.0.0.0:47001 0.0.0.0:0 LISTENING 4

TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING 452

TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING 872

TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING 912

TCP 0.0.0.0:49155 0.0.0.0:0 LISTENING 556

TCP 0.0.0.0:49156 0.0.0.0:0 LISTENING 1532

TCP 0.0.0.0:49157 0.0.0.0:0 LISTENING 548

TCP 127.0.0.1:49165 127.0.0.1:49166 ESTABLISHED 3648

TCP 127.0.0.1:49166 127.0.0.1:49165 ESTABLISHED 3648

TCP 127.0.0.1:49167 127.0.0.1:49168 ESTABLISHED 3648

TCP 127.0.0.1:49168 127.0.0.1:49167 ESTABLISHED 3648

TCP 169.254.77.100:1801 0.0.0.0:0 LISTENING 1532

TCP 192.168.1.212:139 0.0.0.0:0 LISTENING 4

TCP 192.168.1.212:49209 199.119.202.195:80 TIME_WAIT 0

TCP 192.168.1.212:49210 216.34.181.60:80 TIME_WAIT 0

TCP 192.168.1.212:49213 216.34.181.60:80 TIME_WAIT 0

TCP 192.168.1.212:49215 63.245.209.149:443 TIME_WAIT 0

TCP 192.168.1.212:49216 199.119.202.195:80 TIME_WAIT 0

TCP 192.168.1.212:49217 216.34.181.60:80 TIME_WAIT 0

TCP 192.168.1.212:49220 216.34.181.60:80 TIME_WAIT 0

TCP 192.168.1.212:49222 199.119.202.195:80 TIME_WAIT 0

TCP 192.168.1.212:49223 216.34.181.60:80 TIME_WAIT 0

TCP [::]:7 [::]:0 LISTENING 1916

TCP [::]:9 [::]:0 LISTENING 1916

TCP [::]:13 [::]:0 LISTENING 1916

TCP [::]:17 [::]:0 LISTENING 1916

TCP [::]:19 [::]:0 LISTENING 1916

TCP [::]:80 [::]:0 LISTENING 4

TCP [::]:135 [::]:0 LISTENING 768

TCP [::]:445 [::]:0 LISTENING 4

TCP [::]:2103 [::]:0 LISTENING 1532

TCP [::]:2105 [::]:0 LISTENING 1532

TCP [::]:2107 [::]:0 LISTENING 1532

TCP [::]:3389 [::]:0 LISTENING 2748

TCP [::]:47001 [::]:0 LISTENING 4

TCP [::]:49152 [::]:0 LISTENING 452

TCP [::]:49153 [::]:0 LISTENING 872

TCP [::]:49154 [::]:0 LISTENING 912

TCP [::]:49155 [::]:0 LISTENING 556

TCP [::]:49156 [::]:0 LISTENING 1532

TCP [::]:49157 [::]:0 LISTENING 548

TCP [fe80::4dc7:afd9:901:4d64%11]:1801 [::]:0 LISTENING 1532

UDP 0.0.0.0:7 *:* 1916

UDP 0.0.0.0:9 *:* 1916

UDP 0.0.0.0:13 *:* 1916

UDP 0.0.0.0:17 *:* 1916

UDP 0.0.0.0:19 *:* 1916

UDP 0.0.0.0:161 *:* 1936

UDP 0.0.0.0:3702 *:* 2960

UDP 0.0.0.0:3702 *:* 2960

UDP 0.0.0.0:5355 *:* 304

UDP 192.168.1.212:137 *:* 4

UDP 192.168.1.212:138 *:* 4

UDP [::]:7 *:* 1916

UDP [::]:9 *:* 1916

UDP [::]:13 *:* 1916

UDP [::]:17 *:* 1916

UDP [::]:19 *:* 1916

UDP [::]:161 *:* 1936

UDP [::]:3702 *:* 2960

UDP [::]:3702 *:* 2960

UDP [::]:5355 *:* 304

UDP [fe80::4dc7:afd9:901:4d64%11]:546 *:* 872

 

 

I'm not sure if you noticed in my earlier post, I identified that PID #4 is the "System", PID=4 is "NT Kernel & System" according to the Task Manager.

 

Also, examining the Services running on this box, "Web deployment agent" is not installed - it does not appear in my Services list. SQL Server Reporting Services (MSSQLSERVER) also does not appear in my Services list, nor does the Reporting Service.

 

It appears the nincompoop I hired to set up this server ignored my request for nothing other than the barest OS install. Looks like every single "Feature" in the Server Manager is enabled and running. I'm trying turning off the obvious Features I don't need, like .Net, and rebooting.

[Guest bsenftner]

Yea! I'm past that "System" PID=4 grabbing port 80.

 

I removed every single "Feature" except the Telnet Client.

 

So: 0 Roles installed, and only the Telnet Client Feature installed. (Probably don't even need the Telnet Client, but for some reason I have that enabled on a similar RackSpace Cloud Server...)

 

All I want is my software, the Uniform Server, and whatever bare-bones necessary for remote desktop running. I think I've got that now.

[Guest bsenftner]

Now that I have it running, and had a chance to test drive for a bit... sweeeeet!

Thank you, bottom of my heart for making the Uniform Server. *standing ovation*

[Yoni]

Now that I have it running, and had a chance to test drive for a bit... sweeeeet!

Thank you, bottom of my heart for making the Uniform Server. *standing ovation*

Glad you figured it out. Ahhhhh he had a bunch of roles installed by default. Got it Good luck and happy serving.