Solved

Windows 2012 server out of memory, nonpaged pool size big

Posted on 2014-12-10
6
2,782 Views
Last Modified: 2014-12-19
I'm running a Windows 2012 RDS guest on a Hyper-V host.
Windows 2012 RDS has 12GB memory and 4 vCPU's.
Only 7 users, primarily using Office 2007 SP3.

After a few days the Windows 2012 RDS becomes almost unresponsive. At that moment 99% of the 12GB memory is used. When I look at RamMap (see screen1.jpg), I can clearly see that the nonpaged pool is using 52% of the 12GB of memory. I think 6,1GB is too much, as the usage on similar setups are much much lower. I have attached a dump from poolmon (dump01.txt) showing the nonpaged pool.

Where to start?
C--temp2-screen1.JPG
C--temp2-dump01.txt
0
Comment
Question by:nazg82
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 28

Expert Comment

by:Dan McFadden
ID: 40491508
In 64bit OS, the non-paged-pool memory can hit as much as128GB RAM if available.  Here's the defacto standard explanation of paged pool  and nonpaged pool RAM:

http://blogs.technet.com/b/markrussinovich/archive/2009/03/26/3211216.aspx

Now, have you established a baseline of a typical user's resource utilization?  Minimum guestimate goes something like:

( #-of-users * 64) + 2000 = required RAM in GB for general use.

reference link:  http://blogs.technet.com/b/iftekhar/archive/2010/02/10/rds-hardware-sizing-and-capacity-planning-guidance.aspx

Are there any event log entries associated with resource exhaustion?  Are all your system drivers updated?  OS fully patched?  Are your users using printers during there sessions? Are the print drivers up-to-date?

reference link:  https://social.technet.microsoft.com/Forums/windowsserver/en-US/971a6470-7e5c-4bd6-85bb-82228aa7c55c/rds-insufficient-system-resources-exist-to-complete-the-requested-service-for-users-ntuserdat?forum=winserverTS

My guess is that your user sessions are probably running between 0.5GB to 1GB of RAM each during use.  The system is then pulling as much RAM as it can to handle pooled memory.  At 0.5GB each session plus OS, your looking at 5.5GB which works out pretty close to your 12GB on the server.

I would look at the last article link above and consider a few of the recommendations there. I would also consider adding more RAM to the server.

I highly recommend doing some performance monitoring to try to develop a baseline for resource utilization.  This will help in determining if your server is correctly sized for your usage scenario.

Dan
0
 
LVL 5

Accepted Solution

by:
nazg82 earned 0 total points
ID: 40499828
Hi Dan,

Thank you for giving me an answer.
We indeed created a base profile. We Always add an extra 25% to the base profile so we can handle some excesses.

As we've never seen a nogpaged pool this large on a virtualized Windows 2012 Remote Desktop Server and only 7 users doing simple Microsoft Office work, we did some extra research to the applications running in the background. We created a memory dump manually, so we could do some debugging. The problem was the antivirus software. After removing the antivirus software in a sandboxed version of the virtual machine, the problem has disappeared.

Just adding extra memory, because memory seems exausted is only a solution after you checked the memory usage, if there are no memory leaks and made sure your baseline is correct. In the sandboxed version of the virtual machine, we added 8GB of extra memory just to see what happen. After 3,5 days the memory was exausted.
0
 
LVL 39

Expert Comment

by:Philip Elder
ID: 40500399
What A/V product caused the problem please?
0
Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

 
LVL 5

Author Comment

by:nazg82
ID: 40500526
Vipre Antivirus Business Premium.
We replaced it with Webroot endpoint protection.
0
 
LVL 5

Author Closing Comment

by:nazg82
ID: 40508804
We did some extra research by creating a memory dump manually and debug the information. All was pointing to the antivirus software. We removed the antivirus software and replaced it with another solution.
0
 
LVL 39

Expert Comment

by:Philip Elder
ID: 40509422
Just a thought but we put A/V clients on endpoints where users work not on servers. Why double scan plus all of the exceptions that need to be made for various server workloads?
0

Featured Post

Raise the IQ of Your IT Alerts

From IT major incidents to manufacturing line slowdowns, every business process generates insights that need to reach the people required to take action. You need a platform that integrates with your business tools to create fully enabled DevOps toolchains.

You need xMatters.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The following article is comprised of the pearls we have garnered deploying virtualization solutions since Virtual Server 2005 and subsequent 2008 RTM+ Hyper-V in standalone and clustered environments.
Every now and then, Microsoft does something that totally impresses me. It doesn't happen often, but in this case I must say I am thoroughly impressed with Windows Server Backup. One of the long time issues with Windows Backup has been the ability t…
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
In this Micro Tutorial viewers will learn how to restore single file or folder from Bare Metal backup image of their system. Tutorial shows how to restore files and folders from system backup. Often it is not needed to restore entire system when onl…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question