Windows 2008 CBS.log growing

Posted on 2016-09-04
Last Modified: 2016-09-15
I have run into a problem over the last couple of month or so were my Windows 2008 and 2008R2 will experience memory depletion and the only quick fix is a reboot for the short term. I know svchost is taking up a large part of the memory and handles and the svchost process in question is part of the "NetSvcs" group as listed in task manger. After using RamMap I see a lot of memory in standby by that the CBS.log file was very large 680MB. I know this is controlled by the Windows Moduler Installer and should be trunked and may not be truncated it the file is getting hammered. It appears to be a lot of Windows Update related items listed and after stopping the Windows update server clammed things down. Here is my problem I have a large environment were se still have ~200 Windows 2008 server and this issue is affecting ~85% of them and started around 7/18. We do use SCCM to push windows updates to devices. Any way  for me to tell if there is a corrupt update that is trying to install? In the logs I do not see one particular hat stands out so far.
Question by:compdigit44
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
LVL 25

Expert Comment

ID: 41787873
I had this happen on a Win 7 PC. I had to delete all of it. I think it is because Microsoft continues to push their junk on everyone--like Windows 10 upgrades behind the scenes. I also had some updates failing.  Here is a discussion of the problem on Microsoft's own technet
LVL 20

Author Comment

ID: 41788815
Thanks for the feedback I just think its odd how it is old affect Windows 2008 and 2008 R2 servers. What is the latest Windows Update Agent of for 2008? I keep reading conflicting information on the latest version.
LVL 25

Expert Comment

ID: 41789478
I suspect, that Microsoft purposely cripples old versions of Windows and slows them down so people will think, "Man my Windows is slow, I need to upgrade." It is a ridiculous game that we've all played for too many years.  The other day our user was told that they had to update their Windows Media player to view a video. Turned out to be a backdoor way of accepting Windows 10 upgrade.  They are pretty desperate and unscrupulous in trying to force everyone on Windows 10 where users no longer have any control over their own machine whatsoever.  That's why I made my primary machine Linux and abandon Microsoft technology as often as feasible.  I even tried a Mac, though I was sure I never would. (I went back to Linux) ;)

I do feel your pain as I have several Windows 2008 servers also. If you are going to stay with Windows then as the Borg from Star Trek Next Generation would say, "Resistance if futile, you will be assimilated."  You might as well just upgrade to 2012 or later and be prepared for the bumpy ride apparently.
Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

LVL 20

Author Comment

ID: 41789488
We are planning to upgrade but we are large organize and still have 200+ servers running Windows 2008.. This is crazy there has to be a "fix" for this
LVL 20

Accepted Solution

compdigit44 earned 0 total points
ID: 41792967
I believe I am on to something with this issue. I have narrowed it down to issues with WMI and the SCCM client.
LVL 20

Author Closing Comment

ID: 41799415
What to point my findings to help other in the future

Featured Post

Space-Age Communications Transitions to DevOps

ViaSat, a global provider of satellite and wireless communications, securely connects businesses, governments, and organizations to the Internet. Learn how ViaSat’s Network Solutions Engineer, drove the transition from a traditional network support to a DevOps-centric model.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Sync home folder not working- urgent 13 53
Copy user profile 6 32
VMWare 101 9 83
Making an existing Domain a Child of another Domain 4 28
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question