can srv event 2020 be related to new network cards?

Posted on 2009-04-15
Last Modified: 2012-05-06
My W2k domain controller began logging event 2020 errors recently, and users are dropping network connections. The only significant change is that we installed gigabit network cards to 10 workstations on the LAN. (The office only has about 15 workstations total). At about the same time, the system reported the page file too small and the registry too small so I increased the size of the paging file and the registry.

Research showed causes all over the map for this problem.

This article suggests to me the file server is being overloaded somehow.  I am going to enable tagging tonight so I can start using poolmon to try to find the culprit. This DC is running a lot of services. In addition to file and print services, DNS, DHCP and its running as terminal server as well. I have new hardware coming in so I can offload some of these services to another machine. Any advice is welcome.
Question by:jn2112
    LVL 66

    Expert Comment

    To the cards directly, I dont think so... But the card's drivers, thats another story. You might have a driver corrupting the pool, therefore thinking the pool is empty.

    Have you run the net session command to verify that part of the MS Article?

    Accepted Solution

    I believe I found the source of the problem. It was a combination of things. Symantec Corporate Anti-virus, or some component of it was . I turned on pool tagging and used poolmon, sorted by bytes and found the tag "SavE" was taking the lions share of the paged pool (about 70MB).  The next largest consumer was tag "CM", which I found out was the registry. These articles were helpful, in case anyone else has this issue:

    general explanation and steps to use poolmon to find the problem:

    Windows 2000 terminal server issue and hotfix:

    The registry key referred to had grown to about 10MB in size.

    This article provided the most relevant information, despite the profanity in the title:

    I removed the Symantec Corporate client, cleaned the HKU\.DEFAULT\Printers\DevModes2 registry key and applied the hotfix. paged Pool usage is now about 1/3 of its former value, and i have had no further issues as yet.  Now, i just need to find another enterprise anti-virus product.
    LVL 66

    Expert Comment

    Great find..... Thanks for the update...

    Expert Comment

    I saw this message when trying to access mapped drives while a software mirror was being re-synched.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    This video discusses moving either the default database or any database to a new volume.

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now