none
Server 2003 Stop Error Reason Code: 0x805000f

    Question

  • I don't know where to begin. I want to be very thorough but at the same time be to the point for a quick and easy answer. We have a Windows 2003 server that keeps giving us random reboots. This is the error after a reboot.

    The reason supplied by user ASISVR_BJ0509\Greg for the last unexpected shutdown of this computer is: System Failure: Stop error
    Reason Code: 0x805000f
    Bug ID:
    Bugcheck String: 0x000000ba (0x00000002, 0x00000001, 0xe2b7cca8, 0x0000001f)
    Comment: 0x000000ba (0x00000002, 0x00000001, 0xe2b7cca8, 0x0000001f)


    We have run memtest, harddrive scans, virus scans and read the Event Viewer. Nothing seems out of place so I started looking at the dump file. Here is the dump file.




    Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [F:\WINDOWS\Minidump\Mini061109-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: F:\WINDOWS\Symbols
    Executable search path is:
    Unable to load image \WINDOWS\system32\ntkrnlpa.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntkrnlpa.exe
    Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (4 procs) Free x86 compatible
    Product: Server, suite: TerminalServer SingleUserTS
    Machine Name:
    Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
    Debug session time: Thu Jun 11 10:44:23.640 2009 (GMT-7)
    System Uptime: 0 days 7:35:01.658
    Unable to load image \WINDOWS\system32\ntkrnlpa.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntkrnlpa.exe
    Loading Kernel Symbols
    ...............................................................
    ..................................................
    Loading User Symbols
    Loading unloaded module list
    ...
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck BA, {2, 1, e2b7cca8, 1f}

    Probably caused by : ntkrnlpa.exe ( nt!KeDelayExecutionThread+b9 )

    Followup: MachineOwner
    ---------

    3: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    SESSION_HAS_VALID_VIEWS_ON_EXIT (ba)
    Caused by a session driver not unmapping its mapped views prior to a
    session unload.  This indicates a bug in win32k.sys, atmfd.dll,
    rdpdd.dll or a video driver.
    Arguments:
    Arg1: 00000002, session ID
    Arg2: 00000001, number of mapped views that are leaking
    Arg3: e2b7cca8, address of this session's mapped views table
    Arg4: 0000001f, size of this session's mapped views table.

    Debugging Details:
    ------------------


    CUSTOMER_CRASH_COUNT:  1

    DEFAULT_BUCKET_ID:  DRIVER_FAULT_SERVER_MINIDUMP

    BUGCHECK_STR:  0xBA

    PROCESS_NAME:  csrss.exe

    CURRENT_IRQL:  0

    LAST_CONTROL_TRANSFER:  from 8092caae to 80827c83

    STACK_TEXT: 
    b1349bb0 8092caae 000000ba 00000002 00000001 nt!KeDelayExecutionThread+0xb9
    b1349bc0 e2b7cca8 0000001f 40000000 809ac0da nt!ObpTranslateGrantedAccessIndex+0xc
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    b1349c4c 8084c795 88d2bd88 00000000 8a7f4518 0xe2b7cca8
    b1349c68 8094c4eb 88d2bd88 8a5ba210 00000000 nt!MiDispatchFault+0x367
    b1349cf0 8094c569 00000000 b1349d4c 8082e0d6 nt!RtlUpcaseUnicodeToMultiByteN+0x7a1
    b1349cfc 8082e0d6 8a5ba210 b1349d48 b1349d3c nt!RtlUpcaseUnicodeToMultiByteN+0x81f
    b1349d14 b1349d64 b1349d64 00f5ff8c 00000000 nt!Ki386GetSelectorParameters+0x8
    b1349d4c 80889867 00000001 00000000 b1349d64 0xb1349d64
    b1349d64 7c82860c badb0d00 00f5ff7c 00000000 nt!MiReserveSystemPtes+0x2a5
    b1349d68 badb0d00 00f5ff7c 00000000 00000000 0x7c82860c
    b1349d6c 00f5ff7c 00000000 00000000 00000000 0xbadb0d00
    b1349d70 00000000 00000000 00000000 00000000 0xf5ff7c


    STACK_COMMAND:  kb

    FOLLOWUP_IP:
    nt!KeDelayExecutionThread+b9
    80827c83 5d              pop     ebp

    SYMBOL_STACK_INDEX:  0

    SYMBOL_NAME:  nt!KeDelayExecutionThread+b9

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME:  ntkrnlpa.exe

    DEBUG_FLR_IMAGE_TIMESTAMP:  49c21e56

    FAILURE_BUCKET_ID:  0xBA_nt!KeDelayExecutionThread+b9

    BUCKET_ID:  0xBA_nt!KeDelayExecutionThread+b9

    Followup: MachineOwner
    --------



    Any help fixing this problem would be greatly appreciated. Thank you

    Thursday, June 11, 2009 6:59 PM

Answers

  • Is it possible that you could have upgraded the video drivers at some point and maybe then started getting crashes?



    what service pack are you running?  Have you seen this:  http://support.microsoft.com/kb/961974

    It has the same symptoms you log shows i.e. SESSION_HAS_VALID_VIEWS_ON_EXIT, and it updates rdpdd.dll which is shown in that log snippet as well as one of the possibilities of a bug.....
     Hope that fixes your issue!


    Kristin L. Griffin
    Thursday, June 11, 2009 10:30 PM
    Moderator

All replies

  • NCP_Clancy,

    In your dump I saw:

    SESSION_HAS_VALID_VIEWS_ON_EXIT (ba)
    Caused by a session driver not unmapping its mapped views prior to a
    session unload.  This indicates a bug in win32k.sys, atmfd.dll,
    rdpdd.dll or a video driver.

    Have you tried to re-install the video driver?

    Thanks,

    Kristin L. Griffin

    Kristin L. Griffin
    Thursday, June 11, 2009 10:17 PM
    Moderator
  • Hello Kristin,
    I have the newest drivers for the video card installed on the server. I do knotice that most of the crashes are after somebody logs out of Terminal Services.
    Thanks for looking
    Clancy
    Thursday, June 11, 2009 10:21 PM
  • Is it possible that you could have upgraded the video drivers at some point and maybe then started getting crashes?



    what service pack are you running?  Have you seen this:  http://support.microsoft.com/kb/961974

    It has the same symptoms you log shows i.e. SESSION_HAS_VALID_VIEWS_ON_EXIT, and it updates rdpdd.dll which is shown in that log snippet as well as one of the possibilities of a bug.....
     Hope that fixes your issue!


    Kristin L. Griffin
    Thursday, June 11, 2009 10:30 PM
    Moderator