High Disk Actitiy


I've got a Windows Server 2003 SBS and its currently experiencing very high disk activity which is slowing down access for users.

Is there any way to discover which files are being accessed and who process, user or PC is causing the high level of disk activity?

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Performance monitor will help you verify it is the disk and not memory. Physical disk-% idle is the easiest one to read in my opinion. the lower the number, the harder it's working. From there, the Process sensor will help you a lot. Look at I/O data Bytes/sec, possibly some others, and then pick all instances *individually*, the one that's high will stick out clearly. Performance Monitor can be found under Administrative Tools. As for telling which client is causing it, I'm really not sure. That's where you should then see your network interface - Bytes Total/sec go up.

In my previous experience, this was caused by antivirus running on the server scanning inside of zip files.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DanJournoAuthor Commented:
I was already using Perfmon which is why i knew it was a disk activity issue.
And I guessed correctly that it is the main data drive. However, there is no antivirus running on the server. Only on the client machines.
Okay, well give the Process sensor a shot, it should tell you which program/process is causing the issue.
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

DanJournoAuthor Commented:
Sorry, where's the process sensor?
Is it consuming network bandwidth as well? You may be able to tell who is causing it if you have a program that monitors SNMP.
No problem, the process sensor is in the same drop down list as the 'physical disk' sensor.
EirmanChief Operations ManagerCommented:
Could fragmentation be a problem ?
DanJournoAuthor Commented:
Not that im aware of. It seems to be just today.
Levels have been normal up till now.
How does network activity on the box look?
DanJournoAuthor Commented:
Normal. Around 10 to 20kb at the moment. Nothing obvious.
Going to try a reboot tonight. Hopefully its just a process thats gotten stuck
Has the process sensor in performance monitor shown anything?
DanJournoAuthor Commented:
Reboot resolved the issue.
Nice! Glad it was an easy fix.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.