locked
SessionEnv Memory Leak Issue RRS feed

  • Question

  • Hello all,

    We have been having an issue with a memory leak on our Windows Server 2008 R2 servers.  Svchost (netsvcs) will slowly increase it's memory usage about 15mb at a time every hour or so.  This memory is never released and we've seen that svchost process get as high as 6GB of ram usage.  We separated the svchost processes to host services individually and have identified Remote Desktop Configuration (SessionEnv) as the culprit.  We rebooted the server Friday and now on Monday that svchost hosting SessionEnv is already using 768MB of RAM.

    Initially I thought this might be a problem with Group Policy because I would see Group Policy settings being applied in the system logs right when memory usage increased.  Another indicator of Group Policy being the issue was that half of our servers are on one domain and half on another, they all experience this memory leak issue but one domain is much worse and has group policy settings pushed about 15 times a day.  The other domain only has group policy pushed about 10 times a month.

    The only other thing of note in event viewer when the memory goes up is Event ID 1063: "A new template-based certificate to be used by the terminal server for Transport Layer Security (TLS) 1.0\Secure Sockets Layer (SSL) authentication and encryption has been installed. " 

    Anyone have any idea what is going on here to cause SessionEnv to continuously take up more ram?  I appreciate any thoughts and insight you have to share.
    Monday, August 8, 2016 3:03 PM

Answers

  • Hi,

    >>We have been having an issue with a memory leak on our Windows Server 2008 R2 servers.  Svchost (netsvcs) will slowly increase it's memory usage about 15mb at a time every hour or so.  

    It looks like a known problem in windows 7 and window server 2008.This issue occurs because some allocated memory is not freed when the WMI service runs the "associator" queries.The WMI service runs in a Svchost.exe process. You could follow this KB:

    A memory leak issue occurs in the Windows Management Instrumentation service on a computer that is running Windows Server 2008 R2 or Windows 7

    https://support.microsoft.com/en-us/kb/977357#bookmark-ss

    ________________________________________
    Best Regards,
    Cartman
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact
    tnmff@microsoft.com.

    Wednesday, August 10, 2016 7:29 AM