Solved

Windows 2008 CBS.log growing

Posted on 2016-09-04
6
35 Views
Last Modified: 2016-09-15
I have run into a problem over the last couple of month or so were my Windows 2008 and 2008R2 will experience memory depletion and the only quick fix is a reboot for the short term. I know svchost is taking up a large part of the memory and handles and the svchost process in question is part of the "NetSvcs" group as listed in task manger. After using RamMap I see a lot of memory in standby by that the CBS.log file was very large 680MB. I know this is controlled by the Windows Moduler Installer and should be trunked and may not be truncated it the file is getting hammered. It appears to be a lot of Windows Update related items listed and after stopping the Windows update server clammed things down. Here is my problem I have a large environment were se still have ~200 Windows 2008 server and this issue is affecting ~85% of them and started around 7/18. We do use SCCM to push windows updates to devices. Any way  for me to tell if there is a corrupt update that is trying to install? In the logs I do not see one particular hat stands out so far.
0
Comment
Question by:compdigit44
  • 4
  • 2
6 Comments
 
LVL 25

Expert Comment

by:SStory
ID: 41787873
I had this happen on a Win 7 PC. I had to delete all of it. I think it is because Microsoft continues to push their junk on everyone--like Windows 10 upgrades behind the scenes. I also had some updates failing.  Here is a discussion of the problem on Microsoft's own technet
https://social.technet.microsoft.com/Forums/windowsserver/en-US/997105d3-834c-48c0-929d-20389a0ed0f3/cbspersistlog-can-delete?forum=winservermanager
0
 
LVL 19

Author Comment

by:compdigit44
ID: 41788815
Thanks for the feedback I just think its odd how it is old affect Windows 2008 and 2008 R2 servers. What is the latest Windows Update Agent of for 2008? I keep reading conflicting information on the latest version.
0
 
LVL 25

Expert Comment

by:SStory
ID: 41789478
I suspect, that Microsoft purposely cripples old versions of Windows and slows them down so people will think, "Man my Windows is slow, I need to upgrade." It is a ridiculous game that we've all played for too many years.  The other day our user was told that they had to update their Windows Media player to view a video. Turned out to be a backdoor way of accepting Windows 10 upgrade.  They are pretty desperate and unscrupulous in trying to force everyone on Windows 10 where users no longer have any control over their own machine whatsoever.  That's why I made my primary machine Linux and abandon Microsoft technology as often as feasible.  I even tried a Mac, though I was sure I never would. (I went back to Linux) ;)

I do feel your pain as I have several Windows 2008 servers also. If you are going to stay with Windows then as the Borg from Star Trek Next Generation would say, "Resistance if futile, you will be assimilated."  You might as well just upgrade to 2012 or later and be prepared for the bumpy ride apparently.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 19

Author Comment

by:compdigit44
ID: 41789488
We are planning to upgrade but we are large organize and still have 200+ servers running Windows 2008.. This is crazy there has to be a "fix" for this
0
 
LVL 19

Accepted Solution

by:
compdigit44 earned 0 total points
ID: 41792967
I believe I am on to something with this issue. I have narrowed it down to issues with WMI and the SCCM client.
0
 
LVL 19

Author Closing Comment

by:compdigit44
ID: 41799415
What to point my findings to help other in the future
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question