Event Viewer Error - spoolsrv.exe Faulting Module  - winspool.drv

Posted on 2011-10-19
Last Modified: 2012-05-12
I am having an issue on a terminal server 2008 R2 machine. The print spooler server will randomly shutdown. The error when looking at the application view in event viewer is below. I have traced it down to the following application spoolsv.exe and the following module winspool.drv. Any help would be greatly appreciated.

Log Name:      Application
Source:        Application Error
Date:          10/19/2011 8:04:48 AM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ENTTS01.ENTSAV.local
Faulting application name: spoolsv.exe, version: 6.1.7601.17514, time stamp: 0x4ce7b4e7
Faulting module name: winspool.drv, version: 6.1.7601.17514, time stamp: 0x4ce7ca38
Exception code: 0xc0000005
Fault offset: 0x000000000002c956
Faulting process id: 0x4b4
Faulting application start time: 0x01cc8c3eb94c8504
Faulting application path: C:\Windows\System32\spoolsv.exe
Faulting module path: C:\Windows\system32\winspool.drv
Report Id: 8a225be3-fa4a-11e0-93b5-00155d010a01
Event Xml:
<Event xmlns="">
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <TimeCreated SystemTime="2011-10-19T12:04:48.000000000Z" />
    <Security />
</Event> eventlog.txt
Question by:Jryals8900
    LVL 5

    Expert Comment

    Most likely a faulty printer driver. Have you added any new printer or updated drivers lately? I would check all the printers are compatible
    LVL 5

    Accepted Solution

    first can then see if its a certified hardware device. You can even search the name of the printer and it will tell you what is compatible with i.e. some are with server 2003 but not with 2008 etc


    Author Comment


    I will try this. They were all reporting as compatible via manufacturer's website, but I will double check.
    LVL 5

    Expert Comment

    Also something to try below. If you download widnows debugging tools and analyze the crash dump it will point you to the exact printer.

    Suggestion 1: Clear spool file
    Open Windows Explorer, refer to C:\windows\system32\spool\printers, and delete all of files in this folder (Do not delete the folder itself).
    If it is possible, please disable/uninstall Antivirus software on the printer server to test. It was reported that some Antivirus software, such as MacAfee, may cause this issue. If you are using any printer monitor software, please uninstall them too. Please also boot into Clean Boot environment to test.
    Suggestion 2: Change the spooling format
    Let us set the spooling format to RAW, and then try to print directly to the printer instead of spooling the print job. To do this:
          a.   Right-click the printer that you are using, and then click "Properties".
          b.   In the Advanced tab, click "Print Processor".
          c.   Set the default "Data type" to "RAW" for both "WinPrint" and "ModPrint".
          d.     Click OK.
          e.      In the Advanced tab, select “Print directly to the printer”
          f.    Click OK, and then close the Printers dialog box.

    Author Comment

    The error seems to have altered a bit. Now I am not recieving a message this specific. I am recieving errors that the spooler service timed out for 3000 ms, and then it terminates unexpectedly. I have attached both screenshots. Are you thinking the change the spooler format will fix the problem. We are using this in conjunction with Print Management to manage the site's printing. Image1 Image2

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    If you use a Brother DCP 130C or similar Brother printer, at some point you might encounter the following problem: after you change the ink cartridge, the printer displays an "ink empty" message. Sometimes you just need to follow the instructions…
    How to solve seemingly unsolvable printer issues. Users sometimes run into printing issues where all the normal steps do not seem to work. Well the steps below can show users how to take one extra step beyond the normal steps needed to remove old…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now