Jan 01

One of my domain controller stop functioning every 2-3 days. No users can logon to the server not even to say the file service. I realised this is caused by one of my HP printer that uses the HP Standard TCP/IP Port Monitor uses a host name in the port configuration.

Event ID: 2019
Source: Srv
Description: The server was unable to allocate from the system nonpaged pool because the pool was empty.

If you get this event in your event viewer, you will need to use poolmon from windows 2003 resource kit.

  1. How to Use Memory Pool Monitor (Poolmon.exe) to Troubleshoot Kernel Mode Memory Leaks.
    http://support.microsoft.com/kb/177415
  2. Poolmon Examples
    http://technet2.microsoft.com/windowsserver/en/library/00dede78-030c-4d5b-bebf-f5f35f17949e1033.mspx?mfr=true

  3. How to find pool tags that are used by third-party drivers
    http://support.microsoft.com/?id=298102

You can compare the 2 poolmon snapshot (capture from my domain controller during normal state and abnormal state) and see the difference for yourself.
Snapshot – Normal
Snapshot – Problem

Solution:
Event ID: 2019 is logged in the System log, and you experience decreased performance on a computer that is running Windows Server 2003
http://support.microsoft.com/kb/933999/en-us

written by coppermine \\ tags: , , , ,