Solved

Windows 2012 server out of memory, nonpaged pool size big

Posted on 2014-12-10
6
2,636 Views
Last Modified: 2014-12-19
I'm running a Windows 2012 RDS guest on a Hyper-V host.
Windows 2012 RDS has 12GB memory and 4 vCPU's.
Only 7 users, primarily using Office 2007 SP3.

After a few days the Windows 2012 RDS becomes almost unresponsive. At that moment 99% of the 12GB memory is used. When I look at RamMap (see screen1.jpg), I can clearly see that the nonpaged pool is using 52% of the 12GB of memory. I think 6,1GB is too much, as the usage on similar setups are much much lower. I have attached a dump from poolmon (dump01.txt) showing the nonpaged pool.

Where to start?
C--temp2-screen1.JPG
C--temp2-dump01.txt
0
Comment
Question by:nazg82
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 28

Expert Comment

by:Dan McFadden
ID: 40491508
In 64bit OS, the non-paged-pool memory can hit as much as128GB RAM if available.  Here's the defacto standard explanation of paged pool  and nonpaged pool RAM:

http://blogs.technet.com/b/markrussinovich/archive/2009/03/26/3211216.aspx

Now, have you established a baseline of a typical user's resource utilization?  Minimum guestimate goes something like:

( #-of-users * 64) + 2000 = required RAM in GB for general use.

reference link:  http://blogs.technet.com/b/iftekhar/archive/2010/02/10/rds-hardware-sizing-and-capacity-planning-guidance.aspx

Are there any event log entries associated with resource exhaustion?  Are all your system drivers updated?  OS fully patched?  Are your users using printers during there sessions? Are the print drivers up-to-date?

reference link:  https://social.technet.microsoft.com/Forums/windowsserver/en-US/971a6470-7e5c-4bd6-85bb-82228aa7c55c/rds-insufficient-system-resources-exist-to-complete-the-requested-service-for-users-ntuserdat?forum=winserverTS

My guess is that your user sessions are probably running between 0.5GB to 1GB of RAM each during use.  The system is then pulling as much RAM as it can to handle pooled memory.  At 0.5GB each session plus OS, your looking at 5.5GB which works out pretty close to your 12GB on the server.

I would look at the last article link above and consider a few of the recommendations there. I would also consider adding more RAM to the server.

I highly recommend doing some performance monitoring to try to develop a baseline for resource utilization.  This will help in determining if your server is correctly sized for your usage scenario.

Dan
0
 
LVL 5

Accepted Solution

by:
nazg82 earned 0 total points
ID: 40499828
Hi Dan,

Thank you for giving me an answer.
We indeed created a base profile. We Always add an extra 25% to the base profile so we can handle some excesses.

As we've never seen a nogpaged pool this large on a virtualized Windows 2012 Remote Desktop Server and only 7 users doing simple Microsoft Office work, we did some extra research to the applications running in the background. We created a memory dump manually, so we could do some debugging. The problem was the antivirus software. After removing the antivirus software in a sandboxed version of the virtual machine, the problem has disappeared.

Just adding extra memory, because memory seems exausted is only a solution after you checked the memory usage, if there are no memory leaks and made sure your baseline is correct. In the sandboxed version of the virtual machine, we added 8GB of extra memory just to see what happen. After 3,5 days the memory was exausted.
0
 
LVL 39

Expert Comment

by:Philip Elder
ID: 40500399
What A/V product caused the problem please?
0
How Do You Stack Up Against Your Peers?

With today’s modern enterprise so dependent on digital infrastructures, the impact of major incidents has increased dramatically. Grab the report now to gain insight into how your organization ranks against your peers and learn best-in-class strategies to resolve incidents.

 
LVL 5

Author Comment

by:nazg82
ID: 40500526
Vipre Antivirus Business Premium.
We replaced it with Webroot endpoint protection.
0
 
LVL 5

Author Closing Comment

by:nazg82
ID: 40508804
We did some extra research by creating a memory dump manually and debug the information. All was pointing to the antivirus software. We removed the antivirus software and replaced it with another solution.
0
 
LVL 39

Expert Comment

by:Philip Elder
ID: 40509422
Just a thought but we put A/V clients on endpoints where users work not on servers. Why double scan plus all of the exceptions that need to be made for various server workloads?
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Resolve DNS query failed errors for Exchange
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question