[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Event Viewer Error - spoolsrv.exe Faulting Module  - winspool.drv

Posted on 2011-10-19
5
Medium Priority
?
2,427 Views
Last Modified: 2012-05-12
I am having an issue on a terminal server 2008 R2 machine. The print spooler server will randomly shutdown. The error when looking at the application view in event viewer is below. I have traced it down to the following application spoolsv.exe and the following module winspool.drv. Any help would be greatly appreciated.

Log Name:      Application
Source:        Application Error
Date:          10/19/2011 8:04:48 AM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ENTTS01.ENTSAV.local
Description:
Faulting application name: spoolsv.exe, version: 6.1.7601.17514, time stamp: 0x4ce7b4e7
Faulting module name: winspool.drv, version: 6.1.7601.17514, time stamp: 0x4ce7ca38
Exception code: 0xc0000005
Fault offset: 0x000000000002c956
Faulting process id: 0x4b4
Faulting application start time: 0x01cc8c3eb94c8504
Faulting application path: C:\Windows\System32\spoolsv.exe
Faulting module path: C:\Windows\system32\winspool.drv
Report Id: 8a225be3-fa4a-11e0-93b5-00155d010a01
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-10-19T12:04:48.000000000Z" />
    <EventRecordID>12890</EventRecordID>
    <Channel>Application</Channel>
    <Computer>ENTTS01.ENTSAV.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>spoolsv.exe</Data>
    <Data>6.1.7601.17514</Data>
    <Data>4ce7b4e7</Data>
    <Data>winspool.drv</Data>
    <Data>6.1.7601.17514</Data>
    <Data>4ce7ca38</Data>
    <Data>c0000005</Data>
    <Data>000000000002c956</Data>
    <Data>4b4</Data>
    <Data>01cc8c3eb94c8504</Data>
    <Data>C:\Windows\System32\spoolsv.exe</Data>
    <Data>C:\Windows\system32\winspool.drv</Data>
    <Data>8a225be3-fa4a-11e0-93b5-00155d010a01</Data>
  </EventData>
</Event> eventlog.txt
0
Comment
Question by:Jryals8900
  • 3
  • 2
5 Comments
 
LVL 6

Expert Comment

by:Sid_F
ID: 36993303
Most likely a faulty printer driver. Have you added any new printer or updated drivers lately? I would check all the printers are compatible
0
 
LVL 6

Accepted Solution

by:
Sid_F earned 2000 total points
ID: 36993317
first http://www.windowsservercatalog.com/results.aspx?&chtext=&cstext=&csttext=&chbtext=&bCatID=1326&cpID=0&avc=11&ava=0&avq=0&OR=1&PGS=25&ready=0you can then see if its a certified hardware device. You can even search the name of the printer and it will tell you what is compatible with i.e. some are with server 2003 but not with 2008 etc

0
 

Author Comment

by:Jryals8900
ID: 36999623
Thanks,

I will try this. They were all reporting as compatible via manufacturer's website, but I will double check.
0
 
LVL 6

Expert Comment

by:Sid_F
ID: 36999827
Also something to try below. If you download widnows debugging tools and analyze the crash dump it will point you to the exact printer.


Suggestion 1: Clear spool file
---------------------------------
Open Windows Explorer, refer to C:\windows\system32\spool\printers, and delete all of files in this folder (Do not delete the folder itself).
 
If it is possible, please disable/uninstall Antivirus software on the printer server to test. It was reported that some Antivirus software, such as MacAfee, may cause this issue. If you are using any printer monitor software, please uninstall them too. Please also boot into Clean Boot environment to test.
 
Suggestion 2: Change the spooling format
-----------------------------------
Let us set the spooling format to RAW, and then try to print directly to the printer instead of spooling the print job. To do this:
 
      a.   Right-click the printer that you are using, and then click "Properties".
      b.   In the Advanced tab, click "Print Processor".
      c.   Set the default "Data type" to "RAW" for both "WinPrint" and "ModPrint".
      d.     Click OK.
      e.      In the Advanced tab, select “Print directly to the printer”
      f.    Click OK, and then close the Printers dialog box.
0
 

Author Comment

by:Jryals8900
ID: 37070129
The error seems to have altered a bit. Now I am not recieving a message this specific. I am recieving errors that the spooler service timed out for 3000 ms, and then it terminates unexpectedly. I have attached both screenshots. Are you thinking the change the spooler format will fix the problem. We are using this in conjunction with Print Management to manage the site's printing. Image1 Image2
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Printers have changed substantially in the last 30 or so years, not just in technical capabilities but in cost and usage as well.  Printers were originally used for interfacing with the operator, not necessarily for printing copy or pictures. In …
This article shows how to get a list of available printers for display in a drop-down list, and then to use the selected printer to print an Access report or a Word document filled with Access data, using different syntax as needed for working with …
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…
Suggested Courses

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question