Link to home
Start Free TrialLog in
Avatar of Randy Couch
Randy CouchFlag for United States of America

asked on

Users get "Out of Resources" message when trying to access server shares Server 2008 R2

When users try to access a share on the server they get a message saying there are not enough resources available. If I reboot the server the issue goes away for a few days but soon returns. My research so far seems to point to some sort of stack or handle overflow. Any idea what may be happening here or how to further troubleshoot? A single Server 2008 R2 with about 10 users on Windows 10 with a couple still on Windows 7.
Avatar of Seth Simmons
Seth Simmons
Flag of United States of America image

what do the event logs state?
how many files/folders are on the share?  
Avatar of Randy Couch

ASKER

I can't remote in when it does this so I'll have to go check the error logs today. There are quite a few files/folders on the share. Safe to say a couple thousand.
Error Code, in the System section, is 2019 - The server was unable to allocate from the system nonpaged pool because the pool was empty.
This is the Task Manager Page sorted for highest number of Handles
User generated imageIt is my understanding that anything over 5000 handles is considered high but, as you can see, there is nothing there anywhere near that high.
However, it does look like DNS is taking quite a bit of memory also as well as Powershell. The above screenshot was taken in the evening with nobody at work in this office. Some may have not logged off but no one is there working.
However, it does look like DNS is taking quite a bit of memory also as well as Powershell.

dns service looks fine; need to identify what powershell is doing causing high memory/cpu usage
someone is running something that could be misbehaving.  check task scheduler
Don't see anything in Task Scheduler. Nothing that looks like it uses Powershell. Updates for Chrome and Acrobat Reader then just Carbonite backups.
User generated image
  1. Start Task Manager
  2. Click VIEW, SELECT COLUMNS
  3. add HANDLES
  4. then click HANDLES to sort by the largest to smallest number
  5. BINGO, your culprit is at the top of the list.
Probably Carbonite
The above screen shot of Task Manager is sorted highest to lowest on the "Handles" column. You can see that DNS is in the lead. Carbonite (csrss.exe) is a good ways down the list. I had thought of this as well. I'll put up a new screen shot of this screen as the server was rebooted today. Actually the power went out and no one bothered to call me and tell me until they couldn't connect. Well, no s@#t!
Here is the Taks Manager Process screen tonight:
User generated image
Carbonite is taking some resources now as it is actively backing up at this time.
Still see Powershell taking 270GB of Memory. Does anyone know if Carbonite uses Powershell for any of its scheduled tasks? I have asked Carbonite support directly but haven't received an answer yet.I can't find any reference to it in Scheduled Tasks.
Ha! Nevermind, Carbonite is NOT csrss.exe.
SOLUTION
Avatar of Seth Simmons
Seth Simmons
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
OK. I'll try that (command line column). I tried looking at each scheduled task and didn't find anything that called powershell.

Here is the result of the Powershell command line column in Task Manager
User generated image
This doesn't look to me like something I want on my server. 

So every time I kill this PowerShell process it restarts. Any ideas how to kill it permanently? I don't see where it is starting from.
I've stopped it in Task Manager and I've stopped it n PowerShell but it keeps coming back.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial