Domain Controller becomes unresponsive after 7 days

  • Thread starter Thread starter Eric Guzman
  • Start date Start date
E

Eric Guzman

Guest
We have a specific printer shared on a Windows 2003 Domain Controller that
will not let us get into the properties of the printer. It is configured to
use a Static IP address for the printer port and is using the HP Laserjet
4300 PCL 6. I can just delete it and recreate it, but did not want to do
that. I will attempt to change the driver to another one.

In addition, this server is a file server and server every 7 days it becomes
unresponsive and gives out an error about being low in memory, but everyday
memory utilization averages 600MB and it has a total of 4GB of memory.

The following event ID is logged.

Event ID: 2019
The server was unable to allocate from the system nonpaged pool because the
pool was empty.

I have excluded McAfee AV from scanning the following directories to see if
this helps out the issue:

C:\windows\sysvol
C:\windows\system32\spool
C:\Windows\softwaredistribution\datastore
C:\pagefile.sys

I also researched event ID 2010 and will perform the following 2 methods to
pickup what is causing the memory leak.

Method #1 (easy):
Open Task Manager, and under

View->Select Columns

choose Virtual Memory Size.

Click on the column header to sort by VM usage. If the application isn't
freeing memory, this value will continue climbing until the system exhausts
the available memory, which causes the System Process - Out of Virtual
Memory dialog. Also look at Task Manager Processes > Mem Delta. A
consistently positive value here also indicates a memory leak. The only way
to free the memory would be to kill the process.

Method #2 (harder):
Obtain PMON from the Resource Kit then read this article:
How to Use PMON to Troubleshoot Kernel Mode Memory Leaks [Q177415]
http://support.microsoft.com/default...;EN-US;q177415
 
Re: Domain Controller becomes unresponsive after 7 days

Not sure what question you have, but is this a 32 or 64 bit system? The
reason that I ask is that under a 32bit system, there is only 256MB
allocated to the nonpaged pool. It can't be changed. Now with that said,
you might have to configure the MaxWorkItems value in the registery to a
value of 4096 or 8192. This will restrict nonpaged allocation to ~80MB or
~160MB respectively.

Registry stuff...

HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters

MaxWorkItems is a DWORD value. Values supplied above are in decimal.

A reboot of server is required for the change to take effect.

Other than that, it looks like you have some sort of memory leak. It may be
worth your time to open a call with Micorsoft Product Support because they
will look deeper than my best guess above based on limited info. (e.g. Are
storport drivers in use? If yes, have the recommended updates been applied?)


"Eric Guzman" <EricGuzman@discussions.microsoft.com> wrote in message
news:FB0873B4-850D-4073-9F6D-33A9BBB92568@microsoft.com...
> We have a specific printer shared on a Windows 2003 Domain Controller that
> will not let us get into the properties of the printer. It is configured
> to
> use a Static IP address for the printer port and is using the HP Laserjet
> 4300 PCL 6. I can just delete it and recreate it, but did not want to do
> that. I will attempt to change the driver to another one.
>
> In addition, this server is a file server and server every 7 days it
> becomes
> unresponsive and gives out an error about being low in memory, but
> everyday
> memory utilization averages 600MB and it has a total of 4GB of memory.
>
> The following event ID is logged.
>
> Event ID: 2019
> The server was unable to allocate from the system nonpaged pool because
> the
> pool was empty.
>
> I have excluded McAfee AV from scanning the following directories to see
> if
> this helps out the issue:
>
> C:\windows\sysvol
> C:\windows\system32\spool
> C:\Windows\softwaredistribution\datastore
> C:\pagefile.sys
>
> I also researched event ID 2010 and will perform the following 2 methods
> to
> pickup what is causing the memory leak.
>
> Method #1 (easy):
> Open Task Manager, and under
>
> View->Select Columns
>
> choose Virtual Memory Size.
>
> Click on the column header to sort by VM usage. If the application isn't
> freeing memory, this value will continue climbing until the system
> exhausts
> the available memory, which causes the System Process - Out of Virtual
> Memory dialog. Also look at Task Manager Processes > Mem Delta. A
> consistently positive value here also indicates a memory leak. The only
> way
> to free the memory would be to kill the process.
>
> Method #2 (harder):
> Obtain PMON from the Resource Kit then read this article:
> How to Use PMON to Troubleshoot Kernel Mode Memory Leaks [Q177415]
> http://support.microsoft.com/default...;EN-US;q177415
>
>
>
 
Re: Domain Controller becomes unresponsive after 7 days

how do I identify if I'm using storport of scsiport on my windows 2003 server?

"neo [mvp outlook]" wrote:

> Not sure what question you have, but is this a 32 or 64 bit system? The
> reason that I ask is that under a 32bit system, there is only 256MB
> allocated to the nonpaged pool. It can't be changed. Now with that said,
> you might have to configure the MaxWorkItems value in the registery to a
> value of 4096 or 8192. This will restrict nonpaged allocation to ~80MB or
> ~160MB respectively.
>
> Registry stuff...
>
> HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters
>
> MaxWorkItems is a DWORD value. Values supplied above are in decimal.
>
> A reboot of server is required for the change to take effect.
>
> Other than that, it looks like you have some sort of memory leak. It may be
> worth your time to open a call with Micorsoft Product Support because they
> will look deeper than my best guess above based on limited info. (e.g. Are
> storport drivers in use? If yes, have the recommended updates been applied?)
>
>
> "Eric Guzman" <EricGuzman@discussions.microsoft.com> wrote in message
> news:FB0873B4-850D-4073-9F6D-33A9BBB92568@microsoft.com...
> > We have a specific printer shared on a Windows 2003 Domain Controller that
> > will not let us get into the properties of the printer. It is configured
> > to
> > use a Static IP address for the printer port and is using the HP Laserjet
> > 4300 PCL 6. I can just delete it and recreate it, but did not want to do
> > that. I will attempt to change the driver to another one.
> >
> > In addition, this server is a file server and server every 7 days it
> > becomes
> > unresponsive and gives out an error about being low in memory, but
> > everyday
> > memory utilization averages 600MB and it has a total of 4GB of memory.
> >
> > The following event ID is logged.
> >
> > Event ID: 2019
> > The server was unable to allocate from the system nonpaged pool because
> > the
> > pool was empty.
> >
> > I have excluded McAfee AV from scanning the following directories to see
> > if
> > this helps out the issue:
> >
> > C:\windows\sysvol
> > C:\windows\system32\spool
> > C:\Windows\softwaredistribution\datastore
> > C:\pagefile.sys
> >
> > I also researched event ID 2010 and will perform the following 2 methods
> > to
> > pickup what is causing the memory leak.
> >
> > Method #1 (easy):
> > Open Task Manager, and under
> >
> > View->Select Columns
> >
> > choose Virtual Memory Size.
> >
> > Click on the column header to sort by VM usage. If the application isn't
> > freeing memory, this value will continue climbing until the system
> > exhausts
> > the available memory, which causes the System Process - Out of Virtual
> > Memory dialog. Also look at Task Manager Processes > Mem Delta. A
> > consistently positive value here also indicates a memory leak. The only
> > way
> > to free the memory would be to kill the process.
> >
> > Method #2 (harder):
> > Obtain PMON from the Resource Kit then read this article:
> > How to Use PMON to Troubleshoot Kernel Mode Memory Leaks [Q177415]
> > http://support.microsoft.com/default...;EN-US;q177415
> >
> >
> >
>
>
>
 
Re: Domain Controller becomes unresponsive after 7 days

You can try using MPS Reports or take a wild guess that you are if the
server is connected to a SAN. Other than that, I still urge you to open a
call with Microsoft PSS. If it is a memory leak, they will be able to help
identify if it is Microsoft, hardware/software vendor, and/or a little of
both.

"Eric Guzman" <EricGuzman@discussions.microsoft.com> wrote in message
news:DC994A0E-CA4E-45C9-8F55-5876A6231957@microsoft.com...
> how do I identify if I'm using storport of scsiport on my windows 2003
> server?
>
> "neo [mvp outlook]" wrote:
>
>> Not sure what question you have, but is this a 32 or 64 bit system? The
>> reason that I ask is that under a 32bit system, there is only 256MB
>> allocated to the nonpaged pool. It can't be changed. Now with that
>> said,
>> you might have to configure the MaxWorkItems value in the registery to a
>> value of 4096 or 8192. This will restrict nonpaged allocation to ~80MB
>> or
>> ~160MB respectively.
>>
>> Registry stuff...
>>
>> HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters
>>
>> MaxWorkItems is a DWORD value. Values supplied above are in decimal.
>>
>> A reboot of server is required for the change to take effect.
>>
>> Other than that, it looks like you have some sort of memory leak. It may
>> be
>> worth your time to open a call with Micorsoft Product Support because
>> they
>> will look deeper than my best guess above based on limited info. (e.g.
>> Are
>> storport drivers in use? If yes, have the recommended updates been
>> applied?)
>>
>>
>> "Eric Guzman" <EricGuzman@discussions.microsoft.com> wrote in message
>> news:FB0873B4-850D-4073-9F6D-33A9BBB92568@microsoft.com...
>> > We have a specific printer shared on a Windows 2003 Domain Controller
>> > that
>> > will not let us get into the properties of the printer. It is
>> > configured
>> > to
>> > use a Static IP address for the printer port and is using the HP
>> > Laserjet
>> > 4300 PCL 6. I can just delete it and recreate it, but did not want to
>> > do
>> > that. I will attempt to change the driver to another one.
>> >
>> > In addition, this server is a file server and server every 7 days it
>> > becomes
>> > unresponsive and gives out an error about being low in memory, but
>> > everyday
>> > memory utilization averages 600MB and it has a total of 4GB of memory.
>> >
>> > The following event ID is logged.
>> >
>> > Event ID: 2019
>> > The server was unable to allocate from the system nonpaged pool because
>> > the
>> > pool was empty.
>> >
>> > I have excluded McAfee AV from scanning the following directories to
>> > see
>> > if
>> > this helps out the issue:
>> >
>> > C:\windows\sysvol
>> > C:\windows\system32\spool
>> > C:\Windows\softwaredistribution\datastore
>> > C:\pagefile.sys
>> >
>> > I also researched event ID 2010 and will perform the following 2
>> > methods
>> > to
>> > pickup what is causing the memory leak.
>> >
>> > Method #1 (easy):
>> > Open Task Manager, and under
>> >
>> > View->Select Columns
>> >
>> > choose Virtual Memory Size.
>> >
>> > Click on the column header to sort by VM usage. If the application
>> > isn't
>> > freeing memory, this value will continue climbing until the system
>> > exhausts
>> > the available memory, which causes the System Process - Out of Virtual
>> > Memory dialog. Also look at Task Manager Processes > Mem Delta. A
>> > consistently positive value here also indicates a memory leak. The only
>> > way
>> > to free the memory would be to kill the process.
>> >
>> > Method #2 (harder):
>> > Obtain PMON from the Resource Kit then read this article:
>> > How to Use PMON to Troubleshoot Kernel Mode Memory Leaks [Q177415]
>> > http://support.microsoft.com/default...;EN-US;q177415
>> >
>> >
>> >
>>
>>
>>
 
Back
Top