can srv event 2020 be related to new network cards?

Posted on 2009-04-15
Medium Priority
Last Modified: 2012-05-06
My W2k domain controller began logging event 2020 errors recently, and users are dropping network connections. The only significant change is that we installed gigabit network cards to 10 workstations on the LAN. (The office only has about 15 workstations total). At about the same time, the system reported the page file too small and the registry too small so I increased the size of the paging file and the registry.

Research showed causes all over the map for this problem.


This article suggests to me the file server is being overloaded somehow.  I am going to enable tagging tonight so I can start using poolmon to try to find the culprit. This DC is running a lot of services. In addition to file and print services, DNS, DHCP and its running as terminal server as well. I have new hardware coming in so I can offload some of these services to another machine. Any advice is welcome.
Question by:jn2112
  • 2
LVL 66

Expert Comment

ID: 24160958
To the cards directly, I dont think so... But the card's drivers, thats another story. You might have a driver corrupting the pool, therefore thinking the pool is empty.

Have you run the net session command to verify that part of the MS Article?

Accepted Solution

jn2112 earned 0 total points
ID: 24161778
I believe I found the source of the problem. It was a combination of things. Symantec Corporate Anti-virus, or some component of it was . I turned on pool tagging and used poolmon, sorted by bytes and found the tag "SavE" was taking the lions share of the paged pool (about 70MB).  The next largest consumer was tag "CM", which I found out was the registry. These articles were helpful, in case anyone else has this issue:

general explanation and steps to use poolmon to find the problem:

Windows 2000 terminal server issue and hotfix:

The registry key referred to had grown to about 10MB in size.

This article provided the most relevant information, despite the profanity in the title:

I removed the Symantec Corporate client, cleaned the HKU\.DEFAULT\Printers\DevModes2 registry key and applied the hotfix. paged Pool usage is now about 1/3 of its former value, and i have had no further issues as yet.  Now, i just need to find another enterprise anti-virus product.
LVL 66

Expert Comment

ID: 24162585
Great find..... Thanks for the update...

Expert Comment

ID: 25183756
I saw this message when trying to access mapped drives while a software mirror was being re-synched.

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Most folks would know the basics of how Dropbox works, so that’s not the purpose of this article. Security is what it’s all about, so here I’ll share how I choose to secure my Dropbox Account and the Data it contains.
Integration Management Part 2
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…
Suggested Courses

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question