Select Page

IIS error tracing – How to use Process Monitor to diagnose IIS errors in Windows servers

IIS error tracing – How to use Process Monitor to diagnose IIS errors in Windows servers

In our role as Outsourced Tech Support for web hosts, trouble-shooting and maintaining IIS web servers is something our engineers do on a regular basis.

We’ve seen that, in Windows dedicated servers and VPS, users sometimes request assistance in troubleshooting HTTP errors. The IIS errors may not be very descriptive, and the log files may not contain all necessary information.

What is Microsoft Process Monitor?

For such cases, we use Microsoft Process Monitor to exactly pin point what is causing the error. Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity.

You can download this from:

Process monitor can be used to capture what happens in the back-end when you access a web page in the browser. It has a convenient filter option, which you can customize to focus on only those events related to the domain or status you are investigating.

For example, if you have an “Access is denied” error, put a filter on the domain file path, and further focus with the status. The log will then display which process tried to access the file.

Now, right-click on the event, and select “Properties” to find out exactly what’s causing the error.

Note: It is very important to note that Process monitor is resource hungry! Never leave the “Capture” ON with the default settings as this could easily lead the server to go down.

You can either use the “Drop filtered events” option to capture only the events you want, or just run the capture for a very short time as explained below.

[ Running a hosting business doesn’t have to be hard, or costly. Get world class Hosting Support Specialists at $9.99/hour (bulk discounts available) ]

How to use process monitor to capture the events

1. Open Process Monitor.
2. Customize your filter options based on the error you are investigating.
3. Turn off “Capture” (Ensure the Red Cross mark on the Capture icon)
4. Keep the website you want to trace ready in the browser.
5. Turn on “Capture”
6. Immediately refresh the website
7. Once the loading of webpage is done, turn of “Capture”
8. You can see a list of what and all happened during the time when the site was accessed. Right-click on the relevant event, and select properties to see the reason for the error.

[ Use your time to build your business. We’ll take care of your customers. Hire Our Hosting Support Specialists at $9.99/hr. ]

If you’d like know how to perform IIS error tracing for your Windows web servers, feel free to contact us.



Do you spend all day answering technical support queries?

Wish you had more time to focus on your business? Let us help you.

We free up your time by taking care of your customers and servers. Our engineers monitor your servers 24/7, and support your customers over help desk, live chat and phone.


Bobcares is a server management company that helps businesses deliver uninterrupted and secure online services. Our engineers manage close to 51,500 servers that include virtualized servers, cloud infrastructure, physical server clusters, and more.

Privacy Preference Center


    Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

    PHPSESSID - Preserves user session state across page requests.

    gdpr[consent_types] - Used to store user consents.

    gdpr[allowed_cookies] - Used to store user allowed cookies.

    PHPSESSID, gdpr[consent_types], gdpr[allowed_cookies]


    Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

    _ga - Preserves user session state across page requests.

    _gat - Used by Google Analytics to throttle request rate

    _gid - Registers a unique ID that is used to generate statistical data on how you use the website.

    smartlookCookie - Used to collect user device and location information of the site visitors to improve the websites User Experience.

    _ga, _gat, _gid
    _ga, _gat, _gid


    Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

    IDE - Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.

    test_cookie - Used to check if the user's browser supports cookies.

    1P_JAR - Google cookie. These cookies are used to collect website statistics and track conversion rates.

    NID - Registers a unique ID that identifies a returning user's device. The ID is used for serving ads that are most relevant to the user.

    DV - Google ad personalisation

    IDE, test_cookie, 1P_JAR, NID, DV, NID
    IDE, test_cookie
    1P_JAR, NID, DV