Kernel Paged Pool and Kernel Non-Paged Pool

Posted on 2012-08-14
Last Modified: 2013-02-26

I'm attempting to diagnose what I suspect is a memory leak on windows server 2008 R2.  I'm closely monitoring the "Paged" and "Non-Paged" memory pools.

How can I figure out what the quota is set to for these pools?  Essentially this is what happens:

1.  Disk I/O drops to 0
2.  If you RDP into the server it will let the user in but explorer.exe crashes every 5 seconds
3.  30 Minutes later the server will stop responding completely

Log files show no specific error messages.  HP Insight Manager shows all hardware healthy.  I can only imagine that there is a memory leak to cause these types of server behaviors.

If I can determine what the quota is set to for those pools then I might be able to find the culprit.


Question by:bdeback
    LVL 1

    Expert Comment

    Can you provide some spec's on the system in question, also do you see anything in event logs relating to paged-pool memory out of resources or the like?    This can be a very technical thing to troubleshoot, so first we'd need to make sure this is definitely your issue.  Have any changes been made recently to the system, the user base increased drastically, or anything else we should know?  (Software installed?)

    As far as quota's, Windows dynamically chooses the max size of the pools and allows a given pool to grow from its intial size to certain maximums....

    64 bit system Nonpaged pool can get up to 75% of physical memory or 128GB, whichever is smaller.  Paged pool max is 128GB.

    32 bit systems.  NPP, 75% or 2GB, whichever is smaller.  Paged 2GB.

    To troubleshoot a memory leak the first thing you'll need to know how to do is use Process Explorer, Poolmon.exe, or Resource Monitor in 2008.  

    Read this first:

    Accepted Solution

    I ran a chkdsk /f on the filesystem and the server no longer crashes.

    Author Closing Comment

    chkdsk /f is what fixed this issue.  We ran chkdsk /verifyonly which determined that filesystem check needed to be complete because it found errors.

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
    I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now