Guest Eric Guzman Posted May 21, 2008 Posted May 21, 2008 We have a specific printer shared on a Windows 2003 Domain Controller that will not let us get into the properties of the printer. It is configured to use a Static IP address for the printer port and is using the HP Laserjet 4300 PCL 6. I can just delete it and recreate it, but did not want to do that. I will attempt to change the driver to another one. In addition, this server is a file server and server every 7 days it becomes unresponsive and gives out an error about being low in memory, but everyday memory utilization averages 600MB and it has a total of 4GB of memory. The following event ID is logged. Event ID: 2019 The server was unable to allocate from the system nonpaged pool because the pool was empty. I have excluded McAfee AV from scanning the following directories to see if this helps out the issue: C:\windows\sysvol C:\windows\system32\spool C:\Windows\softwaredistribution\datastore C:\pagefile.sys I also researched event ID 2010 and will perform the following 2 methods to pickup what is causing the memory leak. Method #1 (easy): Open Task Manager, and under View->Select Columns choose Virtual Memory Size. Click on the column header to sort by VM usage. If the application isn't freeing memory, this value will continue climbing until the system exhausts the available memory, which causes the System Process - Out of Virtual Memory dialog. Also look at Task Manager Processes > Mem Delta. A consistently positive value here also indicates a memory leak. The only way to free the memory would be to kill the process. Method #2 (harder): Obtain PMON from the Resource Kit then read this article: How to Use PMON to Troubleshoot Kernel Mode Memory Leaks [Q177415] http://support.microsoft.com/default...;EN-US;q177415
Guest neo [mvp outlook] Posted May 21, 2008 Posted May 21, 2008 Re: Domain Controller becomes unresponsive after 7 days Not sure what question you have, but is this a 32 or 64 bit system? The reason that I ask is that under a 32bit system, there is only 256MB allocated to the nonpaged pool. It can't be changed. Now with that said, you might have to configure the MaxWorkItems value in the registery to a value of 4096 or 8192. This will restrict nonpaged allocation to ~80MB or ~160MB respectively. Registry stuff... HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters MaxWorkItems is a DWORD value. Values supplied above are in decimal. A reboot of server is required for the change to take effect. Other than that, it looks like you have some sort of memory leak. It may be worth your time to open a call with Micorsoft Product Support because they will look deeper than my best guess above based on limited info. (e.g. Are storport drivers in use? If yes, have the recommended updates been applied?) "Eric Guzman" <EricGuzman@discussions.microsoft.com> wrote in message news:FB0873B4-850D-4073-9F6D-33A9BBB92568@microsoft.com... > We have a specific printer shared on a Windows 2003 Domain Controller that > will not let us get into the properties of the printer. It is configured > to > use a Static IP address for the printer port and is using the HP Laserjet > 4300 PCL 6. I can just delete it and recreate it, but did not want to do > that. I will attempt to change the driver to another one. > > In addition, this server is a file server and server every 7 days it > becomes > unresponsive and gives out an error about being low in memory, but > everyday > memory utilization averages 600MB and it has a total of 4GB of memory. > > The following event ID is logged. > > Event ID: 2019 > The server was unable to allocate from the system nonpaged pool because > the > pool was empty. > > I have excluded McAfee AV from scanning the following directories to see > if > this helps out the issue: > > C:\windows\sysvol > C:\windows\system32\spool > C:\Windows\softwaredistribution\datastore > C:\pagefile.sys > > I also researched event ID 2010 and will perform the following 2 methods > to > pickup what is causing the memory leak. > > Method #1 (easy): > Open Task Manager, and under > > View->Select Columns > > choose Virtual Memory Size. > > Click on the column header to sort by VM usage. If the application isn't > freeing memory, this value will continue climbing until the system > exhausts > the available memory, which causes the System Process - Out of Virtual > Memory dialog. Also look at Task Manager Processes > Mem Delta. A > consistently positive value here also indicates a memory leak. The only > way > to free the memory would be to kill the process. > > Method #2 (harder): > Obtain PMON from the Resource Kit then read this article: > How to Use PMON to Troubleshoot Kernel Mode Memory Leaks [Q177415] > http://support.microsoft.com/default...;EN-US;q177415 > > >
Guest Eric Guzman Posted May 21, 2008 Posted May 21, 2008 Re: Domain Controller becomes unresponsive after 7 days how do I identify if I'm using storport of scsiport on my windows 2003 server? "neo [mvp outlook]" wrote: > Not sure what question you have, but is this a 32 or 64 bit system? The > reason that I ask is that under a 32bit system, there is only 256MB > allocated to the nonpaged pool. It can't be changed. Now with that said, > you might have to configure the MaxWorkItems value in the registery to a > value of 4096 or 8192. This will restrict nonpaged allocation to ~80MB or > ~160MB respectively. > > Registry stuff... > > HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters > > MaxWorkItems is a DWORD value. Values supplied above are in decimal. > > A reboot of server is required for the change to take effect. > > Other than that, it looks like you have some sort of memory leak. It may be > worth your time to open a call with Micorsoft Product Support because they > will look deeper than my best guess above based on limited info. (e.g. Are > storport drivers in use? If yes, have the recommended updates been applied?) > > > "Eric Guzman" <EricGuzman@discussions.microsoft.com> wrote in message > news:FB0873B4-850D-4073-9F6D-33A9BBB92568@microsoft.com... > > We have a specific printer shared on a Windows 2003 Domain Controller that > > will not let us get into the properties of the printer. It is configured > > to > > use a Static IP address for the printer port and is using the HP Laserjet > > 4300 PCL 6. I can just delete it and recreate it, but did not want to do > > that. I will attempt to change the driver to another one. > > > > In addition, this server is a file server and server every 7 days it > > becomes > > unresponsive and gives out an error about being low in memory, but > > everyday > > memory utilization averages 600MB and it has a total of 4GB of memory. > > > > The following event ID is logged. > > > > Event ID: 2019 > > The server was unable to allocate from the system nonpaged pool because > > the > > pool was empty. > > > > I have excluded McAfee AV from scanning the following directories to see > > if > > this helps out the issue: > > > > C:\windows\sysvol > > C:\windows\system32\spool > > C:\Windows\softwaredistribution\datastore > > C:\pagefile.sys > > > > I also researched event ID 2010 and will perform the following 2 methods > > to > > pickup what is causing the memory leak. > > > > Method #1 (easy): > > Open Task Manager, and under > > > > View->Select Columns > > > > choose Virtual Memory Size. > > > > Click on the column header to sort by VM usage. If the application isn't > > freeing memory, this value will continue climbing until the system > > exhausts > > the available memory, which causes the System Process - Out of Virtual > > Memory dialog. Also look at Task Manager Processes > Mem Delta. A > > consistently positive value here also indicates a memory leak. The only > > way > > to free the memory would be to kill the process. > > > > Method #2 (harder): > > Obtain PMON from the Resource Kit then read this article: > > How to Use PMON to Troubleshoot Kernel Mode Memory Leaks [Q177415] > > http://support.microsoft.com/default...;EN-US;q177415 > > > > > > > > >
Guest neo [mvp outlook] Posted May 23, 2008 Posted May 23, 2008 Re: Domain Controller becomes unresponsive after 7 days You can try using MPS Reports or take a wild guess that you are if the server is connected to a SAN. Other than that, I still urge you to open a call with Microsoft PSS. If it is a memory leak, they will be able to help identify if it is Microsoft, hardware/software vendor, and/or a little of both. "Eric Guzman" <EricGuzman@discussions.microsoft.com> wrote in message news:DC994A0E-CA4E-45C9-8F55-5876A6231957@microsoft.com... > how do I identify if I'm using storport of scsiport on my windows 2003 > server? > > "neo [mvp outlook]" wrote: > >> Not sure what question you have, but is this a 32 or 64 bit system? The >> reason that I ask is that under a 32bit system, there is only 256MB >> allocated to the nonpaged pool. It can't be changed. Now with that >> said, >> you might have to configure the MaxWorkItems value in the registery to a >> value of 4096 or 8192. This will restrict nonpaged allocation to ~80MB >> or >> ~160MB respectively. >> >> Registry stuff... >> >> HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters >> >> MaxWorkItems is a DWORD value. Values supplied above are in decimal. >> >> A reboot of server is required for the change to take effect. >> >> Other than that, it looks like you have some sort of memory leak. It may >> be >> worth your time to open a call with Micorsoft Product Support because >> they >> will look deeper than my best guess above based on limited info. (e.g. >> Are >> storport drivers in use? If yes, have the recommended updates been >> applied?) >> >> >> "Eric Guzman" <EricGuzman@discussions.microsoft.com> wrote in message >> news:FB0873B4-850D-4073-9F6D-33A9BBB92568@microsoft.com... >> > We have a specific printer shared on a Windows 2003 Domain Controller >> > that >> > will not let us get into the properties of the printer. It is >> > configured >> > to >> > use a Static IP address for the printer port and is using the HP >> > Laserjet >> > 4300 PCL 6. I can just delete it and recreate it, but did not want to >> > do >> > that. I will attempt to change the driver to another one. >> > >> > In addition, this server is a file server and server every 7 days it >> > becomes >> > unresponsive and gives out an error about being low in memory, but >> > everyday >> > memory utilization averages 600MB and it has a total of 4GB of memory. >> > >> > The following event ID is logged. >> > >> > Event ID: 2019 >> > The server was unable to allocate from the system nonpaged pool because >> > the >> > pool was empty. >> > >> > I have excluded McAfee AV from scanning the following directories to >> > see >> > if >> > this helps out the issue: >> > >> > C:\windows\sysvol >> > C:\windows\system32\spool >> > C:\Windows\softwaredistribution\datastore >> > C:\pagefile.sys >> > >> > I also researched event ID 2010 and will perform the following 2 >> > methods >> > to >> > pickup what is causing the memory leak. >> > >> > Method #1 (easy): >> > Open Task Manager, and under >> > >> > View->Select Columns >> > >> > choose Virtual Memory Size. >> > >> > Click on the column header to sort by VM usage. If the application >> > isn't >> > freeing memory, this value will continue climbing until the system >> > exhausts >> > the available memory, which causes the System Process - Out of Virtual >> > Memory dialog. Also look at Task Manager Processes > Mem Delta. A >> > consistently positive value here also indicates a memory leak. The only >> > way >> > to free the memory would be to kill the process. >> > >> > Method #2 (harder): >> > Obtain PMON from the Resource Kit then read this article: >> > How to Use PMON to Troubleshoot Kernel Mode Memory Leaks [Q177415] >> > http://support.microsoft.com/default...;EN-US;q177415 >> > >> > >> > >> >> >>
Recommended Posts