Ntoskrnl.exe Consuming System Resources on Windows Server 2008 R2
-
Sunday, April 15, 2012 2:29 AMThe past two days, we experienced very slow responding Windows Server 2008 R2 systems. They each have the ntoskrnl.exe consuming all of the system resources. If I restart the server then let it run for a few hours, the systems seem to return to normal. All of the articles found on the web predate SP1. Can someone give me some suggestions on this issue? Nothing has changed on these systems for several months.
Jason
All Replies
-
Sunday, April 15, 2012 5:51 AM
To narrow down the problem and to know whats causing NTOSKRNL.EXE is consuming system resources you may try using using the process explorer
http://technet.microsoft.com/en-us/sysinternals/bb896653
In addition to the above suggestion I strongly advice to stop the Av and give a clean boot.
http://www.windowsmaven.com/How_to_Clean_Boot_with_msconfig.htm
http://www.arabitpro.com
- Proposed As Answer by Arthur_LiMicrosoft Contingent Staff, Moderator Monday, April 16, 2012 6:36 AM
- Marked As Answer by Arthur_LiMicrosoft Contingent Staff, Moderator Monday, April 23, 2012 5:35 AM
- Unmarked As Answer by Jason B. Williams Tuesday, June 12, 2012 4:02 PM
-
Sunday, April 15, 2012 8:05 PM
Hello,
Process Monitor is the option to go for monitoring processes like Syed already mentioned.
Please proceed like that:
- Update all possible drivers
- Uninstall all unused programs
- Perform a clean boot: http://support.microsoft.com/kb/929135
- Run chkdsk /r /f and sfc /scannow
- Disable temporary all security softwares you have
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.Microsoft Student Partner 2010 / 2011
Microsoft Certified Professional
Microsoft Certified Systems Administrator: Security
Microsoft Certified Systems Engineer: Security
Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Microsoft Certified Technology Specialist: Windows 7, Configuring
Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
Microsoft Certified IT Professional: Enterprise Administrator
Microsoft Certified IT Professional: Server Administrator
Microsoft Certified Trainer- Proposed As Answer by Arthur_LiMicrosoft Contingent Staff, Moderator Monday, April 16, 2012 6:36 AM
- Marked As Answer by Arthur_LiMicrosoft Contingent Staff, Moderator Monday, April 23, 2012 5:35 AM
- Unmarked As Answer by Jason B. Williams Tuesday, June 12, 2012 4:02 PM
-
Monday, April 16, 2012 6:36 AMModerator
Hi,
I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will be happy to help.
Arthur Li
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Arthur Li
TechNet Community Support
-
Monday, April 16, 2012 4:04 PMThanks for all of the replys. I am still investigating this issue and hope to reproduce by restarting one of the DR servers.
Jason
-
Tuesday, April 24, 2012 3:24 PMThanks for all of the updates but I have been unable to reproduce the issue at this time even after a restart of the server. I will continue to monitor.
Jason
-
Monday, May 14, 2012 3:33 PMOne thing I have noticed that every server where I have seen this issue are VMs on VMware. Will this make a difference?
Jason
-
Monday, May 14, 2012 5:36 PM
The Process Mon didn't do much good this morning but I did find this link which looks interesting. If anyone is still monitoring this thread, it appears Microsoft is aware of this issue. This is a link I found below and MS recently released a patch for this issue back in April.
Jason
- Edited by Jason B. Williams Tuesday, June 12, 2012 4:03 PM
.png)
