Solved

Windows 2012 server out of memory, nonpaged pool size big

Posted on 2014-12-10
6
2,388 Views
Last Modified: 2014-12-19
I'm running a Windows 2012 RDS guest on a Hyper-V host.
Windows 2012 RDS has 12GB memory and 4 vCPU's.
Only 7 users, primarily using Office 2007 SP3.

After a few days the Windows 2012 RDS becomes almost unresponsive. At that moment 99% of the 12GB memory is used. When I look at RamMap (see screen1.jpg), I can clearly see that the nonpaged pool is using 52% of the 12GB of memory. I think 6,1GB is too much, as the usage on similar setups are much much lower. I have attached a dump from poolmon (dump01.txt) showing the nonpaged pool.

Where to start?
C--temp2-screen1.JPG
C--temp2-dump01.txt
0
Comment
Question by:nazg82
  • 3
  • 2
6 Comments
 
LVL 27

Expert Comment

by:Dan McFadden
ID: 40491508
In 64bit OS, the non-paged-pool memory can hit as much as128GB RAM if available.  Here's the defacto standard explanation of paged pool  and nonpaged pool RAM:

http://blogs.technet.com/b/markrussinovich/archive/2009/03/26/3211216.aspx

Now, have you established a baseline of a typical user's resource utilization?  Minimum guestimate goes something like:

( #-of-users * 64) + 2000 = required RAM in GB for general use.

reference link:  http://blogs.technet.com/b/iftekhar/archive/2010/02/10/rds-hardware-sizing-and-capacity-planning-guidance.aspx

Are there any event log entries associated with resource exhaustion?  Are all your system drivers updated?  OS fully patched?  Are your users using printers during there sessions? Are the print drivers up-to-date?

reference link:  https://social.technet.microsoft.com/Forums/windowsserver/en-US/971a6470-7e5c-4bd6-85bb-82228aa7c55c/rds-insufficient-system-resources-exist-to-complete-the-requested-service-for-users-ntuserdat?forum=winserverTS

My guess is that your user sessions are probably running between 0.5GB to 1GB of RAM each during use.  The system is then pulling as much RAM as it can to handle pooled memory.  At 0.5GB each session plus OS, your looking at 5.5GB which works out pretty close to your 12GB on the server.

I would look at the last article link above and consider a few of the recommendations there. I would also consider adding more RAM to the server.

I highly recommend doing some performance monitoring to try to develop a baseline for resource utilization.  This will help in determining if your server is correctly sized for your usage scenario.

Dan
0
 
LVL 5

Accepted Solution

by:
nazg82 earned 0 total points
ID: 40499828
Hi Dan,

Thank you for giving me an answer.
We indeed created a base profile. We Always add an extra 25% to the base profile so we can handle some excesses.

As we've never seen a nogpaged pool this large on a virtualized Windows 2012 Remote Desktop Server and only 7 users doing simple Microsoft Office work, we did some extra research to the applications running in the background. We created a memory dump manually, so we could do some debugging. The problem was the antivirus software. After removing the antivirus software in a sandboxed version of the virtual machine, the problem has disappeared.

Just adding extra memory, because memory seems exausted is only a solution after you checked the memory usage, if there are no memory leaks and made sure your baseline is correct. In the sandboxed version of the virtual machine, we added 8GB of extra memory just to see what happen. After 3,5 days the memory was exausted.
0
 
LVL 38

Expert Comment

by:Philip Elder
ID: 40500399
What A/V product caused the problem please?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 5

Author Comment

by:nazg82
ID: 40500526
Vipre Antivirus Business Premium.
We replaced it with Webroot endpoint protection.
0
 
LVL 5

Author Closing Comment

by:nazg82
ID: 40508804
We did some extra research by creating a memory dump manually and debug the information. All was pointing to the antivirus software. We removed the antivirus software and replaced it with another solution.
0
 
LVL 38

Expert Comment

by:Philip Elder
ID: 40509422
Just a thought but we put A/V clients on endpoints where users work not on servers. Why double scan plus all of the exceptions that need to be made for various server workloads?
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The reason that corporations and businesses use Windows servers is because it supports custom modifications to adapt to the business and what it needs. Most individual users won’t need such powerful options. Here I’ll explain how you can enable Wind…
Resolve DNS query failed errors for Exchange
In this Micro Tutorial viewers will learn how to restore single file or folder from Bare Metal backup image of their system. Tutorial shows how to restore files and folders from system backup. Often it is not needed to restore entire system when onl…
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question