[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


Kernel Paged Pool and Kernel Non-Paged Pool

Posted on 2012-08-14
Medium Priority
Last Modified: 2013-02-26

I'm attempting to diagnose what I suspect is a memory leak on windows server 2008 R2.  I'm closely monitoring the "Paged" and "Non-Paged" memory pools.

How can I figure out what the quota is set to for these pools?  Essentially this is what happens:

1.  Disk I/O drops to 0
2.  If you RDP into the server it will let the user in but explorer.exe crashes every 5 seconds
3.  30 Minutes later the server will stop responding completely

Log files show no specific error messages.  HP Insight Manager shows all hardware healthy.  I can only imagine that there is a memory leak to cause these types of server behaviors.

If I can determine what the quota is set to for those pools then I might be able to find the culprit.


Question by:bdeback
  • 2

Expert Comment

ID: 38292642
Can you provide some spec's on the system in question, also do you see anything in event logs relating to paged-pool memory out of resources or the like?    This can be a very technical thing to troubleshoot, so first we'd need to make sure this is definitely your issue.  Have any changes been made recently to the system, the user base increased drastically, or anything else we should know?  (Software installed?)

As far as quota's, Windows dynamically chooses the max size of the pools and allows a given pool to grow from its intial size to certain maximums....

64 bit system Nonpaged pool can get up to 75% of physical memory or 128GB, whichever is smaller.  Paged pool max is 128GB.

32 bit systems.  NPP, 75% or 2GB, whichever is smaller.  Paged 2GB.

To troubleshoot a memory leak the first thing you'll need to know how to do is use Process Explorer, Poolmon.exe, or Resource Monitor in 2008.  

Read this first:

Accepted Solution

bdeback earned 0 total points
ID: 38731126
I ran a chkdsk /f on the filesystem and the server no longer crashes.

Author Closing Comment

ID: 38743243
chkdsk /f is what fixed this issue.  We ran chkdsk /verifyonly which determined that filesystem check needed to be complete because it found errors.

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question