Solved

2008 R2 Domain controllers svchost has between 60 - 80'000 handles, memory leak??

Posted on 2014-02-05
4
1,378 Views
Last Modified: 2014-02-10
Hi All

We have been having intermittent issues with authentication for the last few days and I have been digging deeper into the domain controllers.

I have noticed on two of the DC's the handle count for svchost -k DcomLaunch are between 60 - 80'000 on each DC, this seems overly high.

Looking at the services on Sysinternals process Explorer tab I see this is responsible for DcomLaunch, PlugPlay and Power.

Where do I go from here to determine actually what is causing this high number.

Thanks
0
Comment
Question by:ncomper
4 Comments
 
LVL 11

Expert Comment

by:Manjunath Sullad
Comment Utility
Have you referred Sysinternals toubleshooting steps to identify and fix the handle issue ?

Refer : http://blogs.technet.com/b/markrussinovich/archive/2009/09/29/3283844.aspx


You an go through below link to identify which why svchost is using more handle count.

http://blogs.technet.com/b/yongrhee/archive/2011/12/19/how-to-troubleshoot-a-handle-leak.aspx

You can refer below EE artile also to identify if svchost is using more CPU /Memory
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/A_12862-SVCHOST-EXE-CONSUMING-HIGH-CPU-MEMORY.html
0
 
LVL 10

Accepted Solution

by:
Prashant Girennavar earned 500 total points
Comment Utility
If it is the memory leak issue , I recommand you to use RAMMAP sysinternal tool.

It exactly shows what is consuming more memory. It might so happen that , some processes don't release the memory . You need to identify those and see the web to get the resoultion or apply hot fixes for those.

See if below link help you

http://betanews.com/2013/06/07/troubleshoot-your-pcs-memory-problems-with-sysinternals-rammap/

http://blogs.technet.com/b/askperf/archive/2010/08/13/introduction-to-the-new-sysinternals-tool-rammap.aspx

Let us know if you need more information.


-Prashant Girennavar.
0
 
LVL 10

Expert Comment

by:Pramod Ubhe
Comment Utility
check if you can restart WMI service (if there is no dependency).
0
 
LVL 5

Author Closing Comment

by:ncomper
Comment Utility
Thanks, rebooted server which reset handle count but that tool is useful
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Learn about cloud computing and its benefits for small business owners.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now