none
Windows 2008 R2 Terminal Server crash event 1000 svchost.exe_ProfSvc ntdll.dll RRS feed

  • Вопрос

  • Коллеги, нужна помошь!

    Терминальный сервер Windows 2008 R2 SP1 ent установлены все последние обновления +KB981156.

    Работает на HP DL360 G8

    Средняя нагрузка сервера онлайн 150 пользователей, 90% это RemoteApp. Нагрузка на память и процы незначительная примерно 25%

    У пользователей перемещаемые профили и перенаправление папок Мои документы итд..

    Проблема:

    Сервер падает примерно после 11 часов работы. В эвентах:

    Applicatin Error 1000

    Faulting application name: svchost.exe_ProfSvc, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
    Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521eaf24
    Exception code: 0xc0000374
    Fault offset: 0x00000000000c4102
    Faulting process id: 0xfc
    Faulting application start time: 0x01cf4328a034a8f2
    Faulting application path: C:\Windows\system32\svchost.exe
    Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report Id: 45ac7d96-af79-11e3-b9de-2c44fd806207

    После этого события отваливаются службы:

    The Application Information service terminated unexpectedly.  It has done this 1 time(s).

    The Certificate Propagation service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

    The Group Policy Client service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

    The IP Helper service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

    The Server service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

    The User Profile Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

    The Task Scheduler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

    The System Event Notification Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

    The Remote Desktop Configuration service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

    The Shell Hardware Detection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

    The Windows Management Instrumentation service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

    The Windows Update service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

    Далее нестабильная работа сервера, итог подвисание всех служб и ресет.

    Заметил, что переда самым отвалом некоторые сессии пользователей начинают дисконнектиться по таймауту установленному в локальных ГП.

    Нашел такой http://support.microsoft.com/kb/2799035 кноладж, но симптомы не совпадают с моими.

    Дополнение:

    За секунды до 1000 эвента, в систему логинится система:

    An account was successfully logged on.

    Subject:
    Security ID: SYSTEM
    Account Name: имя сервера$
    Account Domain: ччч
    Logon ID: 0x3e7

    Logon Type: 5

    Затем идет событие в логе Microsoft-Windows-WER-Diagnostics/Operational

    Possible heap corruption detected (exception code 3221226356). Initiating further diagnostics.

    • Изменено BingoMaster 20 марта 2014 г. 5:53 Дополнение
    20 марта 2014 г. 5:25

Ответы

Все ответы