BSOD Server 2012 R2 - Not too clean, unless its really a memory issue.

MINIDUMP
22: kd> !analyze -v
*                        Bugcheck Analysis                                    *
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8032da4f740, Address of the instruction which caused the bugcheck
Arg3: ffffd00033ec5b70, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP: 
nt!MiGetVadWakeList+180
fffff803`2da4f740 488b11          mov     rdx,qword ptr [rcx]
CONTEXT:  ffffd00033ec5b70 -- (.cxr 0xffffd00033ec5b70;r)
rax=00000000000c0315 rbx=ffffe000069e5880 rcx=800000083bd63021
rdx=800000083bd63021 rsi=000000000000003d rdi=ffffe000066dd9e8
rip=fffff8032da4f740 rsp=ffffd00033ec65a0 rbp=0000000000000000
 r8=000000000000003d  r9=fffff8032dca9d80 r10=0000000000000002
r11=0000000000000001 r12=0000000000000002 r13=00000038ece20000
r14=0000000000000000 r15=ffffc000025718f0
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!MiGetVadWakeList+0x180:
fffff803`2da4f740 488b11          mov     rdx,qword ptr [rcx] ds:002b:80000008`3bd63021=????????????????
Last set context:
rax=00000000000c0315 rbx=ffffe000069e5880 rcx=800000083bd63021
rdx=800000083bd63021 rsi=000000000000003d rdi=ffffe000066dd9e8
rip=fffff8032da4f740 rsp=ffffd00033ec65a0 rbp=0000000000000000
 r8=000000000000003d  r9=fffff8032dca9d80 r10=0000000000000002
r11=0000000000000001 r12=0000000000000002 r13=00000038ece20000
r14=0000000000000000 r15=ffffc000025718f0
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!MiGetVadWakeList+0x180:
fffff803`2da4f740 488b11          mov     rdx,qword ptr [rcx] ds:002b:80000008`3bd63021=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT_SERVER
BUGCHECK_STR:  0x3B
PROCESS_NAME:  splwow64.exe
CURRENT_IRQL:  0
ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre
LAST_CONTROL_TRANSFER:  from fffff8032ddbcd43 to fffff8032da4f740
STACK_TEXT:  
ffffd000`33ec65a0 fffff803`2ddbcd43 : 00000000`0000003d ffffe000`479fb710 00000000`00000001 00000000`0000003d : nt!MiGetVadWakeList+0x180
ffffd000`33ec65e0 fffff803`2da4eb73 : ffffffff`ffffffff ffffe000`069e5880 00000000`0003d000 ffffe000`066dd500 : nt!MiRemoveVadCharges+0x213
ffffd000`33ec6620 fffff803`2ddc0591 : ffffe000`479fb710 ffffe000`479fb710 ffffe000`00000000 ffffe000`00000000 : nt!MiDeleteVad+0x8f3
ffffd000`33ec6710 fffff803`2ddfb440 : 00000000`00040000 ffffd000`33ec6840 00000000`00000000 fffff803`2de188f2 : nt!MmCleanProcessAddressSpace+0x8d
ffffd000`33ec6770 fffff803`2de2e820 : ffffe000`066dd500 ffffc001`8b2ba060 ffffd000`33ec6840 00000000`00000000 : nt!PspRundownSingleProcess+0xac
ffffd000`33ec6800 fffff803`2deb7334 : 00007ffe`40010004 ffffe000`069e5880 ffffd000`33ec6b00 ffffe000`069e5928 : nt!PspExitThread+0x4c8
ffffd000`33ec6910 fffff803`2daaf37a : 00000000`00000001 ffffa57a`702a872b 00000000`00000000 ffffe000`066dd500 : nt!KiSchedulerApcTerminate+0x18
ffffd000`33ec6940 fffff803`2db5bbc0 : 00000000`000000a0 ffffd000`33ec69c0 fffff803`2dafddd0 00000000`00000000 : nt!KiDeliverApc+0x2fa
ffffd000`33ec69c0 fffff803`2db6255a : ffffe000`069e5880 00000000`ffffffff 00000000`00000000 ffffe000`40ccbe90 : nt!KiInitiateUserApc+0x70
ffffd000`33ec6b00 00007ffe`9d2f65ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f
00000038`e8f6f718 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`9d2f65ba
FOLLOWUP_IP: 
nt!MiGetVadWakeList+180
fffff803`2da4f740 488b11          mov     rdx,qword ptr [rcx]
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  nt!MiGetVadWakeList+180
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP:  52718d9c
IMAGE_VERSION:  6.3.9600.16452
STACK_COMMAND:  .cxr 0xffffd00033ec5b70 ; kb
IMAGE_NAME:  memory_corruption
BUCKET_ID_FUNC_OFFSET:  180
FAILURE_BUCKET_ID:  0x3B_nt!MiGetVadWakeList
BUCKET_ID:  0x3B_nt!MiGetVadWakeList
ANALYSIS_SOURCE:  KM
FAILURE_ID_HASH_STRING:  km:0x3b_nt!migetvadwakelist
FAILURE_ID_HASH:  {89f10555-061f-eab8-c95d-da0ab622d7bc}
Followup: MachineOwner
1: kd> !analyze -v
*                        Bugcheck Analysis                                    *
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 0000000000001205, (reserved)
Arg3: 0000000000040115, Memory contents of the pool block
Arg4: ffffe00043a96a60, Address of the block of pool being deallocated
Debugging Details:
POOL_ADDRESS:  ffffe00043a96a60 Nonpaged pool
FREED_POOL_TAG:  NpFR
BUGCHECK_STR:  0xc2_7_NpFR
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT_SERVER
PROCESS_NAME:  splwow64.exe
CURRENT_IRQL:  0
ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre
LAST_CONTROL_TRANSFER:  from fffff8002eca83ca to fffff8002eb63ca0
STACK_TEXT:  
ffffd000`23714638 fffff800`2eca83ca : 00000000`000000c2 00000000`00000007 00000000`00001205 00000000`00040115 : nt!KeBugCheckEx
ffffd000`23714640 fffff800`2ea5ca4f : ffffffff`ffffffff ffffe000`0a5c2880 00000000`00000000 ffffe000`42cf2cf0 : nt!ExFreePoolWithTag+0x10fa
ffffd000`23714710 fffff800`2edc9c51 : 00000000`00000000 ffffe000`21fa7080 00000000`0000003d 00000000`0000003d : nt!MiFreePhysicalView+0x1c3
ffffd000`23714760 fffff800`2ea5bb73 : ffffffff`ffffffff ffffe000`0a5c2880 00000000`0003d000 ffffe000`21fa7080 : nt!MiRemoveVadCharges+0x121
ffffd000`237147a0 fffff800`2edcd591 : ffffe000`42cf2cf0 ffffe000`42cf2cf0 ffffe000`00000000 ffffe000`00000000 : nt!MiDeleteVad+0x8f3
ffffd000`23714890 fffff800`2ee08440 : 00000000`00040000 ffffd000`237149c0 00000000`00000000 fffff800`2ee258f2 : nt!MmCleanProcessAddressSpace+0x8d
ffffd000`237148f0 fffff800`2ee3b820 : ffffe000`21fa7080 ffffc001`9ed7d710 ffffd000`237149c0 00000000`00000000 : nt!PspRundownSingleProcess+0xac
ffffd000`23714980 fffff800`2ee0824d : 00000000`00000000 00000000`00000000 ffffe000`21fa7080 ffffe000`0a5c2880 : nt!PspExitThread+0x4c8
ffffd000`23714a90 fffff800`2eb6f4b3 : ffffe000`21fa7080 ffffe000`0a5c2880 ffffd000`23714b80 000000aa`89291220 : nt!NtTerminateProcess+0xfd
ffffd000`23714b00 00007ffe`d0e3683a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
000000aa`88f6fb18 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`d0e3683a
STACK_COMMAND:  kb
FOLLOWUP_IP: 
nt!ExFreePoolWithTag+10fa
fffff800`2eca83ca cc              int     3
SYMBOL_STACK_INDEX:  1
SYMBOL_NAME:  nt!ExFreePoolWithTag+10fa
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
IMAGE_NAME:  ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  52718d9c
IMAGE_VERSION:  6.3.9600.16452
BUCKET_ID_FUNC_OFFSET:  10fa
FAILURE_BUCKET_ID:  0xc2_7_NpFR_nt!ExFreePoolWithTag
BUCKET_ID:  0xc2_7_NpFR_nt!ExFreePoolWithTag
ANALYSIS_SOURCE:  KM
FAILURE_ID_HASH_STRING:  km:0xc2_7_npfr_nt!exfreepoolwithtag
FAILURE_ID_HASH:  {4ae3ec46-0ffb-eaa7-30a7-9bf000b1673f}
Followup: MachineOwner
and finally 
Followup: MachineOwner
22: kd> !analyze -v
*                        Bugcheck Analysis                                    *
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8032da4f740, Address of the instruction which caused the bugcheck
Arg3: ffffd00033ec5b70, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
Page 7dab4f not present in the dump file. Type ".hh dbgerr004" for details
Page 7dab4f not present in the dump file. Type ".hh dbgerr004" for details
Page 7dab4f not present in the dump file. Type ".hh dbgerr004" for details
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP: 
nt!MiGetVadWakeList+180
fffff803`2da4f740 488b11          mov     rdx,qword ptr [rcx]
CONTEXT:  ffffd00033ec5b70 -- (.cxr 0xffffd00033ec5b70;r)
rax=00000000000c0315 rbx=ffffe000069e5880 rcx=800000083bd63021
rdx=800000083bd63021 rsi=000000000000003d rdi=ffffe000066dd9e8
rip=fffff8032da4f740 rsp=ffffd00033ec65a0 rbp=0000000000000000
 r8=000000000000003d  r9=fffff8032dca9d80 r10=0000000000000002
r11=0000000000000001 r12=0000000000000002 r13=00000038ece20000
r14=0000000000000000 r15=ffffc000025718f0
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!MiGetVadWakeList+0x180:
fffff803`2da4f740 488b11          mov     rdx,qword ptr [rcx] ds:002b:80000008`3bd63021=????????????????
Last set context:
rax=00000000000c0315 rbx=ffffe000069e5880 rcx=800000083bd63021
rdx=800000083bd63021 rsi=000000000000003d rdi=ffffe000066dd9e8
rip=fffff8032da4f740 rsp=ffffd00033ec65a0 rbp=0000000000000000
 r8=000000000000003d  r9=fffff8032dca9d80 r10=0000000000000002
r11=0000000000000001 r12=0000000000000002 r13=00000038ece20000
r14=0000000000000000 r15=ffffc000025718f0
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!MiGetVadWakeList+0x180:
fffff803`2da4f740 488b11          mov     rdx,qword ptr [rcx] ds:002b:80000008`3bd63021=????????????????
Resetting default scope
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  splwow64.exe
CURRENT_IRQL:  0
ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre
LAST_CONTROL_TRANSFER:  from fffff8032ddbcd43 to fffff8032da4f740
STACK_TEXT:  
ffffd000`33ec65a0 fffff803`2ddbcd43 : 00000000`0000003d ffffe000`479fb710 00000000`00000001 00000000`0000003d : nt!MiGetVadWakeList+0x180
ffffd000`33ec65e0 fffff803`2da4eb73 : ffffffff`ffffffff ffffe000`069e5880 00000000`0003d000 ffffe000`066dd500 : nt!MiRemoveVadCharges+0x213
ffffd000`33ec6620 fffff803`2ddc0591 : ffffe000`479fb710 ffffe000`479fb710 ffffe000`00000000 ffffe000`00000000 : nt!MiDeleteVad+0x8f3
ffffd000`33ec6710 fffff803`2ddfb440 : 00000000`00040000 ffffd000`33ec6840 00000000`00000000 fffff803`2de188f2 : nt!MmCleanProcessAddressSpace+0x8d
ffffd000`33ec6770 fffff803`2de2e820 : ffffe000`066dd500 ffffc001`8b2ba060 ffffd000`33ec6840 00000000`00000000 : nt!PspRundownSingleProcess+0xac
ffffd000`33ec6800 fffff803`2deb7334 : 00007ffe`40010004 ffffe000`069e5880 ffffd000`33ec6b00 ffffe000`069e5928 : nt!PspExitThread+0x4c8
ffffd000`33ec6910 fffff803`2daaf37a : 00000000`00000001 ffffa57a`702a872b 00000000`00000000 ffffe000`066dd500 : nt!KiSchedulerApcTerminate+0x18
ffffd000`33ec6940 fffff803`2db5bbc0 : 00000000`000000a0 ffffd000`33ec69c0 fffff803`2dafddd0 00000000`00000000 : nt!KiDeliverApc+0x2fa
ffffd000`33ec69c0 fffff803`2db6255a : ffffe000`069e5880 00000000`ffffffff 00000000`00000000 ffffe000`40ccbe90 : nt!KiInitiateUserApc+0x70
ffffd000`33ec6b00 00007ffe`9d2f65ba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f
00000038`e8f6f718 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`9d2f65ba
FOLLOWUP_IP: 
nt!MiGetVadWakeList+180
fffff803`2da4f740 488b11          mov     rdx,qword ptr [rcx]
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  nt!MiGetVadWakeList+180
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP:  52718d9c
STACK_COMMAND:  .cxr 0xffffd00033ec5b70 ; kb
IMAGE_NAME:  memory_corruption
BUCKET_ID_FUNC_OFFSET:  180
FAILURE_BUCKET_ID:  0x3B_nt!MiGetVadWakeList
BUCKET_ID:  0x3B_nt!MiGetVadWakeList
ANALYSIS_SOURCE:  KM
FAILURE_ID_HASH_STRING:  km:0x3b_nt!migetvadwakelist
FAILURE_ID_HASH:  {89f10555-061f-eab8-c95d-da0ab622d7bc}
Followup: MachineOwner

Jon
If you can run driver verifier on it (unsure if it is in production) it will probably give you the underlying cause.  There is a hint in the DMP file pointing to
Splwow64.exe with description Print driver host for 32bit applications from company Microsoft Corporation  but verifier will be much more accurate.
These crashes were related to memory corruption (probably caused by a driver). 
Please run these tests to verify your memory and find which driver is causing the problem.  
If you are overclocking (pushing the components beyond their design) you should revert to default at least until the crashing is solved. If you don't
know what it is you probably are not overclocking.
Since it is more likely to be a driver please run verifier first.
1-Driver verifier (for complete directions see our wiki here)
2-Memtest. (You can read more about running memtest here)
Co-Authored by  JMH3143
Wanikiya and Dyami--Team Zigzag

Similar Messages

  • Windows Server 2012 Essentials (not R2) - all client computers offline

    The server is Windows Server 2012 Essentials (not R2). I have had this problem ever since I first installed the Windows Server 2012 Essentials server in the summer of 2013 (before R2 was released). The Windows Server 2012 Essentials server shows offline
    for all Devices under Dashboard. (Allow me to add that I just installed another site with Windows Server 2012 Essentials R2, and it was a breeze - all of the computers at the second install site are online.) I have one Windows 8.1 Pro client and the rest
    are Windows 7 Pro clients. The problem occurs on ALL client computers.
    I have removed computers from Devices in Dashboard on the server, rebooted the server, changed the client computer to a workgroup, rebooted the client computer, and reinstalled the connector software on the client computer. Same result. I
    have tried this on a Windows 7 Pro client and a Windows 8.1 Pro client with the same results.
    After running the connector on a client computer and waiting for the server to update its Devices status, if I look under Devices on the server Dashboard, the Windows 8.1 client computer will say online but within 24 hours it goes offline again. The
    Windows 7 client computers never show online. Both computers stay offline - they NEVER show an online status (referring to the status under Devices in Dashboard).
    I should make it clear that the clients can access the server shares with no problem. File synchronization works great. The clients can ping the server and the server can ping the clients. But client backups on the server fail.
    One of the most troublesome things about this problem is that it prevents the client computers from being accessed remotely using the website setup by Anywhere Access. I can login to get remote access to the shared files on the server, but
    the only computer that says "online" is the server. All of the other computers are "offline".
    The server and clients are only using Windows firewall. The clients all use Microsoft Security Essentials for their anti-virus.
    I used a troubleshooting tool that tells me that there are problems with port 6602 on the server, but the clients are all fine with port 6602. I know port 6602 is important for using Anywhere Access but I am still trying to find out more details on that.
    I have checked all of the firewall settings related to port 6602 on the server, and the firewall settings look like the standard Windows settings for this port. I used netstat to find the PID associated with the port, and I looked up the PID to find the service.
    That all looked standard, too.
    I have been working on this problem since the summer of 2013!! Does anyone have ANY suggestions?!!
    HELP!

    Hi,
    Just addition, please check if all necessary Windows updates are installed on those
    “Offline” client computer.
    When connect client computers to the Windows Server 2012 Essentials server by using the Connector software, there
    will be LAUNCHPAD on the client computer. Was this LAUNCHPAD grayed out? Please check if can access Shared Folders via this LAUNCHPAD. Meanwhile, please ping the Windows Server 2012 Essentials via IP address and server name when client computers show as
    Offline. Any find?
    Get Connected in Windows Server Essentials
    In addition, please follow the path on Server and client computer:
    %programdata%\Microsoft\Windows Server\Logs. Did you check any relevant Server-side logs and
    Client-side Logs if find more clues?
    Windows
    Server Essentials 2012/2012 R2 Log Files
    If any update, please feel free to let us know.
    Hope this helps.
    Best regards,
    Justin Gu
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • SharePoint server 2013 Search Service App on Windows server 2012 R2 not working

    Hi all,
    I installed SharePoint server 2013 on Windows  server 2012 R2 using VirtualBox.  I created a DC(domain controller) server with a domain set up on one VM and it has SQL server 2012 SP1 installed. Then SharePoint 2013 on another VM
    was set up to access the DC server.  Everything seems working except Search Service App which cannot be sucessfully set up. Creation process for Search service app says Successful and 4 search databases were created and look fine. But when I navigate
    to search service app admin page, it gives error info:
    System status:  The search service is not able to connect to the machine that hosts the administration component. Verify that the administration component '386f2cd6-47ca-4b3a-aeb5-d9116772ef16' in search application 'Search Service Application 1' is
    in a good state and try again.
    Search Application Topology:  Unable to retrieve topology component health states. This may be because the admin component is not up and running.
    From event viewer, I see following errors:
    (1) Error From source: SharePoint Server
    Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The object you are trying to create already exists. Try again using a different name. 
    Technical Support Details:
    System.Runtime.InteropServices.COMException (0x80040D02): The object you are trying to create already exists. Try again using a different name. 
       at Microsoft.Office.Server.Search.Administration.SearchServiceInstance.Synchronize()
       at Microsoft.Office.Server.Administration.ApplicationServerJob.ProvisionLocalSharedServiceInstances(Boolean isAdministrationServiceJob)
    (2) Error From source: SharePoint Server Search
    Could not access the Search database. A generic error occurred while trying to access the database to obtain the schema version info.
    Context: Application '386f2cd6-47ca-4b3a-aeb5-d9116772ef16'
    (3) Warning from source: SharePoint Server Search
    A database error occurred. Source: .Net SqlClient Data Provider Code: 8169 occurred 0 time(s) Description:  Error ordinal: 1 Message: Conversion failed when converting from a character string to uniqueidentifier., Class: 16, Number: 8169, State: 2   
    at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
    (4) Error From source: SharePoint Server
    Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The gatherer application could not be mounted because the search administration database schema version does not match the expected backwards compatibility schema version. The database might not have been upgraded. 
    Technical Support Details:
    System.Runtime.InteropServices.COMException (0xC0041235): The gatherer application could not be mounted because the search administration database schema version does not match the expected backwards compatibility schema version. The database might not have
    been upgraded. 
    Since separate DC server and SharePoint server do not work, I installed SharePoint 2013 on DC server ( so DC server has everything on it now ) but it gives exactly same result. Later I installed SharePoint 2013 SP1 and still have the same problem
    with Search Service app. I spent two weeks tried all suggestions available from Web and Google but SharePoint Search Service simply does not work. Config and other databases work but why Search Service has this issue seemingly related to search DB.
    Could anybody please help out? You deserve a top SharePoint consultant award if you could find a solution. I am so frustrated and so tired by this issue.    
    Thanks a lot.

    Hi,
    According to your post, my understanding is that  SharePoint server 2013 Search Service App did not work on Windows server 2012 R2.
    Please make sure you configure Search Service Application correctly. You can refer to:Create and configure a Search service application in SharePoint Server 2013
    I recommend to created new Search Service Application, and made a full crawl. Then assigned the new SSA as the default SSA for webapplications. Finnlay checked  the issue doesnt occur now,
    If all search related components now are online, to keep the enviroonment clean, you can delete the old SSA.
    Thank you for your understanding.
    Best Regards,
    Linda Li
    Linda Li
    TechNet Community Support

  • Windows 8 and Server 2012. Not detecting network is a domain.

    Hi Guys,
    I hope I have posted this to the correct forum.
    I have 2 x Windows 8 PCs that do not detect that they are connected to a domain (network location awareness not working). I can join them to the domain but they still don't recognise the network as a domain. Instead they identify it as "private".
    Other PCs on the network (Win XP and Win 7) work prefectly, just the windows 8 machines don't work.
    Also, when I do join them to domain I also receive this message.
    "changing the Primary Domain DNS name of this computer to "" failed. The name will remain xxxx.local. The error was: the specified domain either does not exist or could not be contacted. "
    I have tried the following
     - DHCP and DNS has being tried both as static and dynamic (can ping DNS server which is the domain controller Windows Server 2012) .
     - Updated PC NIC drivers.
     - No AV is installed on either server or PC.
     - Updated PC to windows 8.1.
     - Disabled both server and PC firewalls.
     - Check NLA service and all dependent services are running.
     - Disabled all adapters on server except for one.
    I am really hoping someone can help with this as I would really appreciate it.
    Thanks.
    Shaun

    Hi Guys,
    I managed to find a solution to the problem. I noticed that the DNS server zones did not look quite right. The _msdcs zone was missing the subfolders (dc, domains, gc, pdc).
    To fix this issue: on the NIC adapter I had to tick the box "register this connection's addresses in DNS" (found under TCP/IP v4 > advanced > DNS tab).
    I then had to remove the DNS role, reboot then re-add the role. Problem solved. Hopefully this saves someone else pulling their hair out for an entire day.

  • Set up Search Service App For SharePoint server 2013 on Windows server 2012 R2 not working

    Hi all,
    I installed SharePoint server 2013 on Windows  server 2012 R2 using VirtualBox.  I created a DC(domain controller) server with a domain set up on one VM and it has SQL server 2012 SP1 installed. Then SharePoint 2013 on another VM was set up to access
    the DC server.  Everything seems working except Search Service App which cannot be sucessfully set up. Creation process for Search service app says Successful and 4 search databases were created and look fine. But when I navigate to search service app
    admin page, it gives error info:
    System status:  The search service is not able to connect to the machine that hosts the administration component. Verify that the administration component '386f2cd6-47ca-4b3a-aeb5-d9116772ef16' in search application 'Search Service Application 1' is in
    a good state and try again.
    Search Application Topology:  Unable to retrieve topology component health states. This may be because the admin component is not up and running.
    From event viewer, I see following errors:
    (1) Error From source: SharePoint Server
    Application Server Administration job failed for service instance  Microsoft.Office.Server.Search.Administration.SearchServiceInstance
    (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The object you are trying to create already exists. Try again using a different name.  
    Technical Support Details:
    System.Runtime.InteropServices.COMException (0x80040D02): The object you are trying to create already exists. Try again using a different name.  
       at Microsoft.Office.Server.Search.Administration.SearchServiceInstance.Synchronize()
       at Microsoft.Office.Server.Administration.ApplicationServerJob.ProvisionLocalSharedServiceInstances(Boolean
    isAdministrationServiceJob)
    (2) Error From source: SharePoint Server Search
    Could not access the Search database. A generic error occurred while trying to access the database to obtain the schema version info.
    Context: Application '386f2cd6-47ca-4b3a-aeb5-d9116772ef16'
    (3) Warning from source: SharePoint Server Search
    A database error occurred. Source: .Net SqlClient Data Provider Code: 8169 occurred 0 time(s) Description:  Error ordinal: 1 Message:
    Conversion failed when converting from a character string to uniqueidentifier., Class: 16, Number: 8169, State: 2    at
    System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
    (4) Error From source: SharePoint Server
    Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance
    (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The gatherer application could not be mounted because the search administration database schema version does not match the expected backwards compatibility schema version. The database might not have been upgraded.  
    Technical Support Details:
    System.Runtime.InteropServices.COMException (0xC0041235): The gatherer application could not be mounted because the search administration database schema version does not match the expected backwards compatibility schema version. The database might not have
    been upgraded.  
    Since separate DC server and SharePoint server do not work, I installed SharePoint 2013 on DC server ( so DC server has everything on it now ) but it gives exactly same result. Later I installed SharePoint 2013 SP1 and still have the same problem with Search
    Service app. I spent two weeks tried all suggestions available from Web and Google but SharePoint Search Service simply does not work. Config and other databases work but why Search Service has this issue seemingly related to search DB.
    Could anybody please help out? You deserve a top SharePoint consultant award if you could find a solution. I am so frustrated and so tired by this issue.    This seems also to be a SP set up issue.
    Thanks a lot.

    Using new Search Service App wizard to create SSA is always a success. I could delete existing SSA and recreate it and no problem. It says successful but when I open Search Admin page from CA, it gives me errors as mentioned.
    Now I used the following PS script for creating SSA from Max Mercher, but it stays at the last setps in following script:
    Add-PsSnapin Microsoft.SharePoint.PowerShell -ErrorAction SilentlyContinue
    $IndexLocation = "C:\Search"  #Location must be empty, will be deleted during the process!
    $SearchAppPoolName = "SSAPool"
    $SearchAppPoolAccountName = "mydomain\admin"
    $SearchServiceName = "SSA"
    $SearchServiceProxyName = "SSA Proxy"
    $DatabaseServer = "W12R2DC1"
    $DatabaseName = "SSA"
    $spAppPool = Get-SPServiceApplicationPool -Identity $SearchAppPoolName -ErrorAction SilentlyContinue
    if (!$spAppPool)
     $spAppPool = New-SPServiceApplicationPool -Name $SearchAppPoolName -Account $SearchAppPoolAccountName -Verbose
    $ServiceApplication = Get-SPEnterpriseSearchServiceApplication -Identity $SearchServiceName -ErrorAction SilentlyContinue
    if (!$ServiceApplication)
    # process stays at the following step forever, already one hour now.  
    $ServiceApplication = New-SPEnterpriseSearchServiceApplication -Name $SearchServiceName -ApplicationPool $spAppPool.Name -DatabaseServer  $DatabaseServer -DatabaseName $DatabaseName
    Account mydomain\admin is an farm managed account, domain admin account, in WG_ADMIN role, It is in all SQL server roles and is DBO. I see search DBs are already on SQL server. From Event viewer, I got following errors in sequence:
    (1) Crawler:Content Plugin under source Crawler:Content Plugin 
    Content Plugin can not be initialized - list of CSS addresses is not set.
    (2) Warning for SharePoint Server Search
    A database error occurred. Source: .Net SqlClient Data Provider Code: 8169 occurred 0 time(s) Description:  Error ordinal: 1 Message: Conversion failed when converting from a character string to uniqueidentifier., Class: 16, Number: 8169, State: 2   
    at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
    (3) Error for SharePoint Server Search
    Could not access the Search database. A generic error occurred while trying to access the database to obtain the schema version info.
    Context: Application 'cbc5a055-996b-44a7-9cbc-404322f9cfdf'
    (4) Error for SharePoint Server
    Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The gatherer application could not be mounted because the search administration database schema version does not match the expected backwards compatibility schema version. The database might not have been upgraded. 
    (5) Error Shared Services for SharePoint Server Search 
    Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (b7c72eb8-cbaf-435e-b4c9-963cb6e4e745).
    Reason: The object you are trying to create already exists. Try again using a different name. 
    Technical Support Details:
    System.Runtime.InteropServices.COMException (0x80040D02): The object you are trying to create already exists. Try again using a different name. 
       at Microsoft.Office.Server.Search.Administration.SearchServiceInstance.Synchronize()
       at Microsoft.Office.Server.Administration.ApplicationServerJob.ProvisionLocalSharedServiceInstances(Boolean isAdministrationServiceJob
    Above errors keep being generated. Last step for SSA creation stay there forever.  Any clue what is really going on?  Thanks.

  • Server 2012 std not able to see Domain, DC and DNS on Win SBS 2008 std Domain

    Hi There
    I have a HP ML 110 G5 SBS 2008 std server as my DC on my network. I recently added a HP Microserver running Server 2012 std (with no roles or features installed) to act solely as a file server for a 3rd party program as the program was not running efficiently
    on the main server.
    The problem I am having now is that the 2012 server keeps falling off the domain and cannot contact DNS server. I have also had to re-enable remote desktop several times. It also shows the 2012 Server as being on a private firewall profile and not on the
    domain firewall profile but I suspect that this is part of the same problem. 
    the resulting problem that this is causing is that the local machines that need to contact an SQL database on the 2012 fileserver intermittently either time out or are very slow to connect.  
    So far I have tried: 
    Switching from Static IP to DHCP. 
    Re-adding the server to the domain. 
    Stopping and restarting DNS services on the DC.
    Checking physical Network connections and routing.
    Putting the 2012 server into the same Organizational Unit as the 2008 DC. 
    Has anyone else encountered this problem when adding a 2012 server to a 2008 domain?  I have a feeling that the solution is probably something simple that I've overlooked, but I can't think what.  Any help would be greatly appreciated. 
    Regards
    Russ
    Also, as some additional info -
    Event viewer gives the following errors:
    Group Policy Error:
    Log Name:      System
    Source:        Microsoft-Windows-GroupPolicy
    Date:          2015-04-27 01:17:51 PM
    Event ID:      1129
    Task Category: None
    Level:         Error
    Keywords:      
    User:          SYSTEM
    Computer:      [SERVERNAME].[DOMAIN].local
    Description:
    The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has
    successfully processed. If you do not see a success message for several hours, then contact your administrator.
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
    <EventID>1129</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2015-04-27T11:17:51.111942100Z" />
    <EventRecordID>19056</EventRecordID>
    <Correlation ActivityID="{C0CBAF2B-1E93-49C0-B910-069AE43F74B2}" />
    <Execution ProcessID="732" ThreadID="1336" />
    <Channel>System</Channel>
    <Computer>[SERVERNAME].[DOMAIN].local</Computer>
    <Security UserID="S-1-5-18" />
    </System>
    <EventData>
    <Data Name="SupportInfo1">1</Data>
    <Data Name="SupportInfo2">1548</Data>
    <Data Name="ProcessingMode">0</Data>
    <Data Name="ProcessingTimeInMilliseconds">0</Data>
    <Data Name="ErrorCode">1222</Data>
    <Data Name="ErrorDescription">The network is not present or not started. </Data>
    </EventData>
    </Event>
    DNS Error:
    Log Name:      System
    Source:        Microsoft-Windows-DNS-Client
    Date:          2015-04-27 04:54:58 PM
    Event ID:      8015
    Task Category: (1028)
    Level:         Warning
    Keywords:      
    User:          NETWORK SERVICE
    Computer:      [SERVERNAME].[DOMAIN].local
    Description:
    The system failed to register host (A or AAAA) resource records (RRs) for network adapter with settings:
               Adapter Name : {3DDD0E46-D879-48C0-9DF6-5FAC0F1A56C4}
               Host Name : [SERVERNAME]
               Primary Domain Suffix : [DOMAIN].local
               DNS server list :
    192.168.2.10
               Sent update to server : <?>
               IP Address(es) :
                 192.168.2.15
    The reason the system could not register these RRs was because the update request it sent to the DNS server timed out. The most likely cause of this is that the DNS server authoritative for the name it was attempting to register or update is not running
    at this time. You can manually retry DNS registration of the network adapter and its settings by typing 'ipconfig /registerdns' at the command prompt. If problems still persist, contact your DNS server or network systems administrator.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Microsoft-Windows-DNS-Client" Guid="{1C95126E-7EEA-49A9-A3FE-A378B03DDB4D}" />
    <EventID>8015</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>1028</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2015-04-27T14:54:58.599130300Z" />
    <EventRecordID>19105</EventRecordID>
    <Correlation />
    <Execution ProcessID="856" ThreadID="952" />
    <Channel>System</Channel>
    <Computer>[SERVERNAME].[DOMAIN].local</Computer>
    <Security UserID="S-1-5-20" />
    </System>
    <EventData>
    <Data Name="AdapterName">{3DDD0E46-D879-48C0-9DF6-5FAC0F1A56C4}</Data>
    <Data Name="HostName">[SERVERNAME]</Data>
    <Data Name="AdapterSuffixName">[DOMAIN].local</Data>
    <Data Name="DnsServerList"> 192.168.2.10</Data>
    <Data Name="Sent UpdateServer">&lt;?&gt;</Data>
    <Data Name="Ipaddress">192.168.2.15</Data>
    <Data Name="ErrorCode">1460</Data>
    </EventData>
    </Event>

    Can you post an ipconfig /all from the server and the DC?
    Robert Pearman SBS MVP
    itauthority.co.uk |
    Title(Required)
    Facebook |
    Twitter |
    Linked in |
    Google+

  • Windows storage server 2012 share not connecting by share name but connecting thru IP address from windows XP machines

    We have a windows storage server 2012 (HP storage server) in our domain. All of sudden We had a issue, connecting the server shares using the share name only from XP machines, but it is connecting through IP address with a delayed response. We are getting
    the below error message from all the windows XP SP2 machines in our domain.
    "\\<share name> is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have a access permissions.
    Login Failure: The target account name is incorrect."
    But it is connecting while we are trying from windows 7 machines.  Also the other server shares (Windows 2003 server) are connecting without any issues using the share name. In addition to this we gave everyone permission for this share. And it worked
    well before but not now. Could you please suggest any solution for this complex issue?
    Thanks,
    UdayaKumar S

    Hi,
    We are getting the below critical alert mail often from our storage server. This could be the problem? 
    vent from Blade NODE01.*****.com, In Enclosure: EM-E83935ED70F6, Network Interface Lost Connectivity.
    Description: "A network interface has failed. An Ethernet adapter's status changed from OK to Error, or an Ethernet team's status changed to Error from another state."
    Source: CIM Indication from CSP Provider
    Date: 02-06-2014 Time: 18:52:26
    Blade: NODE01.****.com
    NetworkAddresses:
    Severity is Critical
    Recommended Actions: Check the network cables, switches, and hubs for the cause of the failure.
    Note: For More information please refer the Windows System Logs in the Event Viewer

  • Windows Server 2012 Essentials not listed in EasyStartu​p 3.8.1d for TS140

    Recently purchased a TS140 (70A4 001RUS). Came factory installed RAID 1 with Windows Server 2012 Essentials pre-installed. Needed to reinstall, however:
    - Windows Server 2012 Essentials does not show up in EasyStartup 3.8.1c DVD that came with server
    - Downloaded latest EasyStartup 3.8.1d and created bootable DVD and ran with same result
    - "Windows Server 2012" is listed (but not Essentials). Running this installation, it does not recognize the Windows Server 2012 Essentials External Recovery DVD that came with server. Continually asks to insert "Windows Server 2012" disk.
    - "Windows Small Business Server 2011 Essentials" is listed (but not 2012 Essentials). Running this installation, it does not recognize the Windows Server 2012 Essentials External Recovery DVD that came with server. Continually asks to insert "Windows Small Business Server 2011 Essentials" disk.
    - Have booted using UEFI, Legacy and Auto with no difference
    - Ran lastest Firmware Updater v1.8.1013 - no updates listed as required
    - Have updated BIOS to latest 70A
    - Server will also not boot directly from Windows Server 2012 Essentials External Recovery DVD (dvd is set 1st in boot order in bios)
    - Windows Server 2012 Essentials External Recovery DVD is readable on other machines - can copy to bootable USB key and run regular Windows installation on server (this is current workaround)
    - using the above workaround, drivers must be installed manually.
    - EasyStartup 3.8.1d Readme specificly lists Windows Server 2012 Essentials as supported on the TS140 in UEFI and Legacy mode here
    As mentioned, the above workaround can work. However, this server may not always be maintained by myself and I would prefer the supplied software to acutally work properly for ease of use by others in the future.

    I have several TS140s running WSE 2012 R2.  Like you said, the easystart does not recognize properly the WSE R2 os, so I just did the basic from disc or USB install after I configured the boot drives or RAID1 array.
    The main reason to load the easy start is for drivers, however WSE found and recognized all the hardware in the unit.

  • SQL server 2012 does not see local disks other than C being started under domain account (which is local admin on the server)

    Hi all. We have a SQL Server 2012 installed to a fresh Windows Server 2012 Server. There is a service account domain\rusystem01 created to run SQL services. It is added as a Local administrator on this server.
    The issue is that SQL Server does not see any local drives (other than C drive) on the server if we run it from this domain service account (for example, we cannot move any databases to any other drives or setup backup).
    It works fine (and other drives ARE available) if SQL Services are started from Network service account or Local service account (which is not recommended by Microsoft). But does not work from domain account.
    Any ideas how to fix this?
    MCP

    >Any ideas how to fix this?
    Apply NTFS ACLs for the folders (and perhaps volumes*) for SQL Server.  Use the Per-Service SID, rather than the Service Account for the ACLs so they survive changing the service account. 
    The per-service SID is "NT Service\MSSQLSERVER" for a default instance and "NT Service\MSSQL$InstanceName" for a named instance.
    *Volume ACLs are set in Disk Management.
    David
    David http://blogs.msdn.com/b/dbrowne/
    David, would you please clarify what do you propose? I open D: volume on the Disk management and grant NT Service\MSSQL$DEV account with Full control permissions. Restarted SQL - no effect. Still only C: is visible for SQL.
    MCP

  • RemoteFX Server 2012 R2 (Not Working?)

    Hi Guys,
    I have a 2012 server r2 for testing, trying to get a smooth connection. We have fixed one issue by enabling UDP, and I can now confirm this is working. However, the connection locally (100mbit) when playing youtube videos still seems to be laggy.
    Am I missing something? RemoteFX is on by default in 2012.
    The only thing I can find is in the Event Log I have the following:
    "The connection is not using advanced RemoteFX RemoteApp Graphics"
    Is there anyway I can work out if it's working correctly?

    Hi,
    Firstly, I would like you to check the version of graphics card you are using for RemoteFX feature. To get full benefits of RemoteFX on server 2012 R2, you must requires a compatible graphics card. At a minimum, the requirements for graphics cards to be used
    with RemoteFX are: 
    -  DirectX 11.0 or later
    -  WDDM 1.2 driver or later
    More information:
    GPU Requirements for RemoteFX on Windows Server 2012 R2
    In addition, there are policy settings with which you can try to configure RemoteFX graphics with server scalability or bandwidth usage. You can change for “Configure RemoteFX Adaptive Graphics” under below mention
    path:
    ComputerConfiguration\AdministrativeTemplates\WindowsComponents\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment
    Additional Information:
    RemoteFX Adaptive Graphics in Windows Server 2012 and Windows 8
    Hope it helps!
    Thanks.

  • BSOD - Server 2012 R2 - SESSION_HAS_VALID_POOL_ON_EXIT

    We have a 2012 R2 RDS at one of our clients. Today it rebooted randomly, output from the memory.dmp is below. The server itself is a virtual machine running on Hyper-V
    We have researched the issue, and while we found similar occurrences, there was nothing that matches.  We do not have update 2862768 installed on the server as per:
    http://social.technet.microsoft.com/Forums/en-US/528782e7-30a3-41d8-a79a-38b3eafa2d19/sessionhasvalidpoolonexit-blue-screen-server-2012-r2?forum=winserver8gen
    Opened log file 'c:\debuglog.txt'
    3: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols
    Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
    Expanded Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
    ************* Symbol Path validation summary **************
    Response                         Time (ms)     Location
    Deferred                                       srv*c:\symbols*http://msdl.microsoft.com/download/symbols
    3: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
    Loading Kernel Symbols
    Loading User Symbols
    PEB is paged out (Peb.Ldr = 00007ff6`7738b018).  Type ".hh dbgerr001" for details
    Loading unloaded module list
    *                        Bugcheck Analysis                                   
    SESSION_HAS_VALID_POOL_ON_EXIT (ab)
    Caused by a session driver not freeing its pool allocations prior to a
    session unload.  This indicates a bug in win32k.sys, atmfd.dll,
    rdpdd.dll or a video driver.
    Arguments:
    Arg1: 0000000000000008, session ID
    Arg2: 0000000000000000, number of paged pool bytes that are leaking
    Arg3: 0000000000000020, number of nonpaged pool bytes that are leaking
    Arg4: 0000000100000000, total number of paged and nonpaged allocations that are leaking.
     nonpaged allocations are in the upper half of this word,
     paged allocations are in the lower half of this word.
    Debugging Details:
    Use !poolused 8 to dump allocation info for leaked session pooltags.
    TAG_NOT_DEFINED_405: Dfsm
    BUGCHECK_STR:  0xAB_Dfsm
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  csrss.exe
    CURRENT_IRQL:  0
    ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre
    LAST_CONTROL_TRANSFER:  from fffff800ca1aff7e to fffff800c9d6cfa0
    STACK_TEXT: 
    ffffd000`58fa3958 fffff800`ca1aff7e : 00000000`000000ab 00000000`00000008 00000000`00000000 00000000`00000020 : nt!KeBugCheckEx
    ffffd000`58fa3960 fffff800`ca0f282a : ffffd000`5b757000 00000000`00000000 ffffd000`5b757b40 ffffd000`5b757b40 : nt! ?? ::NNGAKEGL::`string'+0x6c90e
    ffffd000`58fa39b0 fffff800`ca0ba4b8 : 00000000`00000008 ffffe000`d7882900 00000000`00000000 ffffe000`d7c90080 : nt!MiDereferenceSessionFinal+0x12e
    ffffd000`58fa3a00 fffff800`ca01c0b8 : 00000000`001a5a41 ffffe000`d7c90080 ffffe000`d7c90080 ffffe000`d7882900 : nt!MiDereferenceSession+0x38
    ffffd000`58fa3a30 fffff800`ca0363b8 : 00000000`00040000 ffffd000`58fa3b80 00000000`00000000 fffff800`ca037dea : nt!MmCleanProcessAddressSpace+0x1b0
    ffffd000`58fa3a90 fffff800`c9ff83ce : ffffe000`d7882900 ffffc000`d5a06ae0 ffffd000`58fa3b80 00000000`00000000 : nt!PspRundownSingleProcess+0xac
    ffffd000`58fa3b20 fffff800`c9fa862b : 00000000`00000000 ffffe000`d7c90080 ffffe000`d7c90001 00000000`00000000 : nt!PspExitThread+0x52e
    ffffd000`58fa3c30 fffff800`c9d735c6 : ffffd000`52fac180 ffffe000`d7c90080 ffffe000`d65d7080 00000000`00000000 : nt!PspTerminateThreadByPointer+0x47
    ffffd000`58fa3c60 00000000`00000000 : ffffd000`58fa4000 ffffd000`58f9e000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
    STACK_COMMAND:  kb
    FOLLOWUP_IP:
    nt! ?? ::NNGAKEGL::`string'+6c90e
    fffff800`ca1aff7e cc              int     3
    SYMBOL_STACK_INDEX:  1
    SYMBOL_NAME:  nt! ?? ::NNGAKEGL::`string'+6c90e
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: nt
    IMAGE_NAME:  ntkrnlmp.exe
    DEBUG_FLR_IMAGE_TIMESTAMP:  53388e13
    FAILURE_BUCKET_ID:  LEAKED_SESSION_POOLTAG_Dfsm
    BUCKET_ID:  LEAKED_SESSION_POOLTAG_Dfsm
    ANALYSIS_SOURCE:  KM
    FAILURE_ID_HASH_STRING:  km:leaked_session_pooltag_dfsm
    FAILURE_ID_HASH:  {f5abb35a-f9e8-cce7-0cb1-4bd9b597b503}
    Followup: MachineOwner
    rax=0000000000000000 rbx=ffffd0005b757000 rcx=00000000000000ab
    rdx=0000000000000008 rsi=0000000000000020 rdi=0000000000000000
    rip=fffff800c9d6cfa0 rsp=ffffd00058fa3958 rbp=0000000000000000
     r8=0000000000000000  r9=0000000000000020 r10=0000000000000003
    r11=0000000000000003 r12=0000000000000000 r13=fffff800c9ed0b20
    r14=0000000000000001 r15=0000000000000001
    iopl=0         nv up ei pl nz na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000206
    nt!KeBugCheckEx:
    fffff800`c9d6cfa0 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffd000`58fa3960=00000000000000ab
    Child-SP          RetAddr           : Args to Child                                                          
    : Call Site
    ffffd000`58fa3958 fffff800`ca1aff7e : 00000000`000000ab 00000000`00000008 00000000`00000000 00000000`00000020 : nt!KeBugCheckEx
    ffffd000`58fa3960 fffff800`ca0f282a : ffffd000`5b757000 00000000`00000000 ffffd000`5b757b40 ffffd000`5b757b40 : nt! ?? ::NNGAKEGL::`string'+0x6c90e
    ffffd000`58fa39b0 fffff800`ca0ba4b8 : 00000000`00000008 ffffe000`d7882900 00000000`00000000 ffffe000`d7c90080 : nt!MiDereferenceSessionFinal+0x12e
    ffffd000`58fa3a00 fffff800`ca01c0b8 : 00000000`001a5a41 ffffe000`d7c90080 ffffe000`d7c90080 ffffe000`d7882900 : nt!MiDereferenceSession+0x38
    ffffd000`58fa3a30 fffff800`ca0363b8 : 00000000`00040000 ffffd000`58fa3b80 00000000`00000000 fffff800`ca037dea : nt!MmCleanProcessAddressSpace+0x1b0
    ffffd000`58fa3a90 fffff800`c9ff83ce : ffffe000`d7882900 ffffc000`d5a06ae0 ffffd000`58fa3b80 00000000`00000000 : nt!PspRundownSingleProcess+0xac
    ffffd000`58fa3b20 fffff800`c9fa862b : 00000000`00000000 ffffe000`d7c90080 ffffe000`d7c90001 00000000`00000000 : nt!PspExitThread+0x52e
    ffffd000`58fa3c30 fffff800`c9d735c6 : ffffd000`52fac180 ffffe000`d7c90080 ffffe000`d65d7080 00000000`00000000 : nt!PspTerminateThreadByPointer+0x47
    ffffd000`58fa3c60 00000000`00000000 : ffffd000`58fa4000 ffffd000`58f9e000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
    start             end                 module name
    fffff800`c8e93000 fffff800`c8e9c000   kd       kd.dll       Thu Aug 22 05:40:43 2013 (5215F8BB)
    fffff800`c9c19000 fffff800`ca3a2000   nt       ntkrnlmp.exe Sun Mar 30 15:35:15 2014 (53388E13)
    fffff800`ca3a2000 fffff800`ca412000   hal      hal.dll      Sun Jun 01 16:49:12 2014 (538BADE8)
    fffff801`5cc00000 fffff801`5cc88000   CI       CI.dll       Sat Feb 22 05:12:12 2014 (5308941C)
    fffff801`5cc88000 fffff801`5ccd0000   msiscsi  msiscsi.sys  Sun Apr 06 08:04:00 2014 (53415ED0)
    fffff801`5ccd1000 fffff801`5cd37000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Thu Aug 22 05:40:16 2013 (5215F8A0)
    fffff801`5cd37000 fffff801`5cd45000   werkernel werkernel.sys Thu Aug 22 05:40:24 2013 (5215F8A8)
    fffff801`5cd45000 fffff801`5cda6000   CLFS     CLFS.SYS     Wed Mar 19 02:12:20 2014 (53295164)
    fffff801`5cda6000 fffff801`5cdc8000   tm       tm.sys       Thu Aug 22 05:39:33 2013 (5215F875)
    fffff801`5cdc8000 fffff801`5cddd000   PSHED    PSHED.dll    Sat Sep 14 07:57:19 2013 (52346B3F)
    fffff801`5cddd000 fffff801`5cde7000   BOOTVID  BOOTVID.dll  Thu Aug 22 05:40:26 2013 (5215F8AA)
    fffff801`5cde7000 fffff801`5cdf5000   fdc      fdc.sys      Thu Aug 22 05:40:18 2013 (5215F8A2)
    fffff801`5ce00000 fffff801`5ce18000   acpiex   acpiex.sys   Thu Aug 22 05:37:47 2013 (5215F80B)
    fffff801`5ce18000 fffff801`5ce23000   WppRecorder WppRecorder.sys Thu Aug 22 05:39:40 2013 (5215F87C)
    fffff801`5ce23000 fffff801`5cead000   ACPI     ACPI.sys     Sat Feb 22 05:13:57 2014 (53089485)
    fffff801`5cead000 fffff801`5ceb7000   WMILIB   WMILIB.SYS   Thu Aug 22 05:40:23 2013 (5215F8A7)
    fffff801`5cec3000 fffff801`5cf20000   msrpc    msrpc.sys    Thu Aug 22 05:39:22 2013 (5215F86A)
    fffff801`5cf20000 fffff801`5cfef000   Wdf01000 Wdf01000.sys Thu Aug 22 05:38:56 2013 (5215F850)
    fffff801`5cfef000 fffff801`5d000000   WDFLDR   WDFLDR.SYS   Thu Aug 22 05:39:03 2013 (5215F857)
    fffff801`5d000000 fffff801`5d010000   kbdclass kbdclass.sys Thu Aug 22 05:39:23 2013 (5215F86B)
    fffff801`5d010000 fffff801`5d020000   mouclass mouclass.sys Thu Aug 22 05:39:13 2013 (5215F861)
    fffff801`5d020000 fffff801`5d02d000   serenum  serenum.sys  Thu Aug 22 05:40:17 2013 (5215F8A1)
    fffff801`5d037000 fffff801`5d0c3000   cng      cng.sys      Thu May 29 01:45:47 2014 (5386E5AB)
    fffff801`5d0c3000 fffff801`5d0dd000   serial   serial.sys   Thu Aug 22 05:40:08 2013 (5215F898)
    fffff801`5d0de000 fffff801`5d1f6000   NDIS     NDIS.SYS     Sat Feb 22 05:12:58 2014 (5308944A)
    fffff801`5d200000 fffff801`5d21f000   AgileVpn AgileVpn.sys Wed Apr 30 00:41:07 2014 (53609B03)
    fffff801`5d21f000 fffff801`5d23e000   i8042prt i8042prt.sys Thu Aug 22 05:39:15 2013 (5215F863)
    fffff801`5d23e000 fffff801`5d2b7000   NETIO    NETIO.SYS    Thu Aug 22 05:37:08 2013 (5215F7E4)
    fffff801`5d2b7000 fffff801`5d2c1000   msisadrv msisadrv.sys Thu Aug 22 05:39:03 2013 (5215F857)
    fffff801`5d2c1000 fffff801`5d309000   pci      pci.sys      Sat Feb 22 05:12:41 2014 (53089439)
    fffff801`5d309000 fffff801`5d316000   vdrvroot vdrvroot.sys Thu Aug 22 05:38:49 2013 (5215F849)
    fffff801`5d316000 fffff801`5d332000   pdc      pdc.sys      Thu Oct 31 22:58:42 2013 (52733502)
    fffff801`5d332000 fffff801`5d34a000   partmgr  partmgr.sys  Thu Aug 22 05:40:20 2013 (5215F8A4)
    fffff801`5d34a000 fffff801`5d3ab000   spaceport spaceport.sys Mon Mar 31 22:16:52 2014 (533A3DB4)
    fffff801`5d3ab000 fffff801`5d3c0000   volmgr   volmgr.sys   Thu Aug 22 05:39:53 2013 (5215F889)
    fffff801`5d3c0000 fffff801`5d3fd000   ndiswan  ndiswan.sys  Thu Aug 22 05:35:55 2013 (5215F79B)
    fffff801`5d400000 fffff801`5d44b000   stcvsm   stcvsm.sys   Tue Jan 15 13:26:37 2013 (50F5BB7D)
    fffff801`5d44b000 fffff801`5d45c000   umbus    umbus.sys    Thu Aug 22 05:38:59 2013 (5215F853)
    fffff801`5d467000 fffff801`5d4c6000   volmgrx  volmgrx.sys  Thu Aug 22 05:40:23 2013 (5215F8A7)
    fffff801`5d4c6000 fffff801`5d4cf000   intelide intelide.sys Thu Aug 22 05:40:03 2013 (5215F893)
    fffff801`5d4cf000 fffff801`5d4de000   PCIIDEX  PCIIDEX.SYS  Thu Aug 22 05:39:41 2013 (5215F87D)
    fffff801`5d4de000 fffff801`5d4fb000   vmbus    vmbus.sys    Thu Aug 22 05:36:39 2013 (5215F7C7)
    fffff801`5d4fb000 fffff801`5d512000   vmbkmcl  vmbkmcl.sys  Thu Aug 22 05:38:58 2013 (5215F852)
    fffff801`5d512000 fffff801`5d527000   winhv    winhv.sys    Thu Aug 22 05:40:00 2013 (5215F890)
    fffff801`5d527000 fffff801`5d542000   mountmgr mountmgr.sys Thu Aug 22 05:40:04 2013 (5215F894)
    fffff801`5d542000 fffff801`5d54c000   atapi    atapi.sys    Thu Aug 22 05:40:39 2013 (5215F8B7)
    fffff801`5d54c000 fffff801`5d581000   ataport  ataport.SYS  Thu Aug 22 05:39:38 2013 (5215F87A)
    fffff801`5d581000 fffff801`5d5dd000   fltmgr   fltmgr.sys   Sun Apr 06 08:10:42 2014 (53416062)
    fffff801`5d5dd000 fffff801`5d5fa000   rassstp  rassstp.sys  Thu Aug 22 05:36:10 2013 (5215F7AA)
    fffff801`5d600000 fffff801`5d626000   dfsc     dfsc.sys     Thu Mar 06 02:22:50 2014 (53183E6A)
    fffff801`5d626000 fffff801`5d63d000   ahcache  ahcache.sys  Thu Aug 22 05:39:54 2013 (5215F88A)
    fffff801`5d63d000 fffff801`5d833000   Ntfs     Ntfs.sys     Tue Mar 18 21:58:52 2014 (532915FC)
    fffff801`5d833000 fffff801`5d84f000   ksecdd   ksecdd.sys   Sat Sep 21 01:59:44 2013 (523D51F0)
    fffff801`5d84f000 fffff801`5d85b000   storvsc  storvsc.sys  Thu Aug 22 05:37:34 2013 (5215F7FE)
    fffff801`5d85b000 fffff801`5d8ba000   storport storport.sys Sun Apr 06 08:08:55 2014 (53415FF7)
    fffff801`5d8ba000 fffff801`5d8ca000   pcw      pcw.sys      Thu Aug 22 02:46:34 2013 (5215CFEA)
    fffff801`5d8ca000 fffff801`5d8d5000   Fs_Rec   Fs_Rec.sys   Thu Aug 22 02:46:33 2013 (5215CFE9)
    fffff801`5d8d5000 fffff801`5d906000   ksecpkg  ksecpkg.sys  Sat Mar 08 02:24:07 2014 (531AE1B7)
    fffff801`5d906000 fffff801`5d95b000   CLASSPNP CLASSPNP.SYS Wed Apr 09 00:53:25 2014 (5344EE65)
    fffff801`5d95b000 fffff801`5d989000   cdrom    cdrom.sys    Thu Aug 22 02:46:35 2013 (5215CFEB)
    fffff801`5d989000 fffff801`5d9f9000   rdbss    rdbss.sys    Tue Dec 17 00:21:22 2013 (52AFFB72)
    fffff801`5da05000 fffff801`5dc79000   tcpip    tcpip.sys    Tue May 27 07:19:14 2014 (538490D2)
    fffff801`5dc79000 fffff801`5dce5000   fwpkclnt fwpkclnt.sys Sun Mar 30 19:39:34 2014 (5338C756)
    fffff801`5dce5000 fffff801`5dd0a000   wfplwfs  wfplwfs.sys  Sat Mar 08 02:22:45 2014 (531AE165)
    fffff801`5dd0a000 fffff801`5dd19000   vmstorfl vmstorfl.sys Thu Aug 22 05:37:06 2013 (5215F7E2)
    fffff801`5dd19000 fffff801`5dd69000   volsnap  volsnap.sys  Thu Mar 06 02:26:33 2014 (53183F49)
    fffff801`5dd69000 fffff801`5dd7e000   crashdmp crashdmp.sys Thu Aug 22 05:40:03 2013 (5215F893)
    fffff801`5dd7e000 fffff801`5dd92000   lltdio   lltdio.sys   Thu Aug 22 05:36:18 2013 (5215F7B2)
    fffff801`5dd95000 fffff801`5dd9e000   Null     Null.SYS     Thu Aug 22 05:40:24 2013 (5215F8A8)
    fffff801`5dd9e000 fffff801`5ddac000   BasicRender BasicRender.sys Sat Feb 22 05:14:02 2014 (5308948A)
    fffff801`5ddaf000 fffff801`5ddc6000   mup      mup.sys      Thu Aug 22 05:40:28 2013 (5215F8AC)
    fffff801`5ddc6000 fffff801`5ddcb500   VMBusHID VMBusHID.sys Thu Aug 22 05:37:50 2013 (5215F80E)
    fffff801`5ddd2000 fffff801`5ddee000   disk     disk.sys     Thu Aug 22 05:39:47 2013 (5215F883)
    fffff801`5ddee000 fffff801`5ddfd000   CompositeBus CompositeBus.sys Thu Aug 22 05:38:48 2013 (5215F848)
    fffff801`5e000000 fffff801`5e092000   afd      afd.sys      Thu May 29 21:03:01 2014 (5387F4E5)
    fffff801`5e092000 fffff801`5e09e000   npsvctrig npsvctrig.sys Thu Aug 22 05:38:22 2013 (5215F82E)
    fffff801`5e09e000 fffff801`5e0aa000   mssmbios mssmbios.sys Thu Aug 22 05:39:41 2013 (5215F87D)
    fffff801`5e0aa000 fffff801`5e0b6000   ndistapi ndistapi.sys Thu Aug 22 05:39:16 2013 (5215F864)
    fffff801`5e0b8000 fffff801`5e239000   dxgkrnl  dxgkrnl.sys  Thu Jun 12 16:32:12 2014 (539A2A6C)
    fffff801`5e239000 fffff801`5e24b000   watchdog watchdog.sys Sat Feb 22 05:14:39 2014 (530894AF)
    fffff801`5e24b000 fffff801`5e2ac000   dxgmms1  dxgmms1.sys  Thu Mar 06 02:22:14 2014 (53183E46)
    fffff801`5e2ac000 fffff801`5e2be000   BasicDisplay BasicDisplay.sys Thu Aug 22 05:39:31 2013 (5215F873)
    fffff801`5e2be000 fffff801`5e2c5000   lmimirr  lmimirr.sys  Tue Apr 10 16:32:45 2007 (461C108D)
    fffff801`5e2c5000 fffff801`5e2d8000   VIDEOPRT VIDEOPRT.SYS Thu Aug 22 05:39:31 2013 (5215F873)
    fffff801`5e2d8000 fffff801`5e2ec000   Npfs     Npfs.SYS     Thu Aug 22 05:40:25 2013 (5215F8A9)
    fffff801`5e2ec000 fffff801`5e2f8000   Msfs     Msfs.SYS     Thu Aug 22 05:40:24 2013 (5215F8A8)
    fffff801`5e2f8000 fffff801`5e318000   tdx      tdx.sys      Thu Aug 22 05:36:34 2013 (5215F7C2)
    fffff801`5e318000 fffff801`5e326000   TDI      TDI.SYS      Thu Aug 22 05:39:01 2013 (5215F855)
    fffff801`5e326000 fffff801`5e372000   netbt    netbt.sys    Thu Aug 22 05:37:01 2013 (5215F7DD)
    fffff801`5e372000 fffff801`5e39c000   pacer    pacer.sys    Thu Aug 22 05:36:06 2013 (5215F7A6)
    fffff801`5e39c000 fffff801`5e3ad000   netbios  netbios.sys  Thu Aug 22 05:38:58 2013 (5215F852)
    fffff801`5e3ad000 fffff801`5e3c6000   wanarp   wanarp.sys   Thu Aug 22 05:35:45 2013 (5215F791)
    fffff801`5e3c6000 fffff801`5e3e7000   sbmount  sbmount.SYS  Tue Jan 15 14:09:48 2013 (50F5C59C)
    fffff801`5e3e7000 fffff801`5e3f5000   nsiproxy nsiproxy.sys Thu Aug 22 05:36:34 2013 (5215F7C2)
    fffff801`5e3f5000 fffff801`5e400000   kdnic    kdnic.sys    Thu Aug 22 05:38:26 2013 (5215F832)
    fffff801`5e400000 fffff801`5e40a000   dump_atapi dump_atapi.sys Thu Aug 22 05:40:39 2013 (5215F8B7)
    fffff801`5e40a000 fffff801`5e418000   monitor  monitor.sys  Thu Aug 22 05:36:37 2013 (5215F7C5)
    fffff801`5e418000 fffff801`5e43c000   luafv    luafv.sys    Sat Feb 22 05:14:25 2014 (530894A1)
    fffff801`5e43c000 fffff801`5e45a000   sbapifs  sbapifs.sys  Tue Nov 06 19:07:02 2012 (5099C246)
    fffff801`5e463000 fffff801`5e482000   HIDCLASS HIDCLASS.SYS Thu Mar 06 02:24:40 2014 (53183ED8)
    fffff801`5e482000 fffff801`5e489f00   HIDPARSE HIDPARSE.SYS Thu Aug 22 05:40:26 2013 (5215F8AA)
    fffff801`5e48a000 fffff801`5e494000   hyperkbd hyperkbd.sys Thu Aug 22 05:37:49 2013 (5215F80D)
    fffff801`5e494000 fffff801`5e4a2000   dmvsc    dmvsc.sys    Thu Aug 22 05:37:14 2013 (5215F7EA)
    fffff801`5e4a2000 fffff801`5e4ae000   HyperVideo HyperVideo.sys Thu Aug 22 05:39:20 2013 (5215F868)
    fffff801`5e4ae000 fffff801`5e4ca000   netvsc63 netvsc63.sys Thu Aug 22 05:36:43 2013 (5215F7CB)
    fffff801`5e4ca000 fffff801`5e4d3000   vms3cap  vms3cap.sys  Thu Aug 22 05:38:37 2013 (5215F83D)
    fffff801`5e4d3000 fffff801`5e4f1000   intelppm intelppm.sys Thu Aug 22 02:46:35 2013 (5215CFEB)
    fffff801`5e4f1000 fffff801`5e4fb000   vmgencounter vmgencounter.sys Thu Aug 22 05:38:23 2013 (5215F82F)
    fffff801`5e4fb000 fffff801`5e51c000   raspptp  raspptp.sys  Thu Aug 22 05:35:51 2013 (5215F797)
    fffff801`5e51c000 fffff801`5e540000   rasl2tp  rasl2tp.sys  Thu Aug 22 05:35:51 2013 (5215F797)
    fffff801`5e540000 fffff801`5e54b000   NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 05:36:25 2013 (5215F7B9)
    fffff801`5e54b000 fffff801`5e566000   raspppoe raspppoe.sys Thu Aug 22 05:36:37 2013 (5215F7C5)
    fffff801`5e566000 fffff801`5e567600   swenum   swenum.sys   Thu Aug 22 05:39:29 2013 (5215F871)
    fffff801`5e568000 fffff801`5e5b6000   ks       ks.sys       Thu May 08 17:06:38 2014 (536C0DFE)
    fffff801`5e5b6000 fffff801`5e5c1000   rdpbus   rdpbus.sys   Thu Aug 22 05:38:52 2013 (5215F84C)
    fffff801`5e5c1000 fffff801`5e5d8000   NDProxy  NDProxy.SYS  Thu Aug 22 05:38:15 2013 (5215F827)
    fffff801`5e5d8000 fffff801`5e5e4000   flpydisk flpydisk.sys Thu Aug 22 05:40:18 2013 (5215F8A2)
    fffff801`5e5e4000 fffff801`5e5f1000   mouhid   mouhid.sys   Thu Aug 22 05:39:13 2013 (5215F861)
    fffff801`5e5f1000 fffff801`5e5fe000   dump_dumpata dump_dumpata.sys Thu Aug 22 05:39:53 2013 (5215F889)
    fffff801`5e651000 fffff801`5e669000   rspndr   rspndr.sys   Thu Aug 22 05:36:34 2013 (5215F7C2)
    fffff801`5e669000 fffff801`5e689000   bowser   bowser.sys   Thu Aug 22 05:38:38 2013 (5215F83E)
    fffff801`5e689000 fffff801`5e6a0000   mpsdrv   mpsdrv.sys   Thu Aug 22 05:36:06 2013 (5215F7A6)
    fffff801`5e6a0000 fffff801`5e70c000   mrxsmb   mrxsmb.sys   Wed Apr 30 00:41:44 2014 (53609B28)
    fffff801`5e70c000 fffff801`5e745000   mrxsmb20 mrxsmb20.sys Sat May 31 00:27:45 2014 (53897661)
    fffff801`5e745000 fffff801`5e7ee000   peauth   peauth.sys   Sat Feb 22 05:09:37 2014 (53089381)
    fffff801`5e805000 fffff801`5e8ff000   HTTP     HTTP.sys     Mon Jan 27 12:48:02 2014 (52E6B7F2)
    fffff801`5e8ff000 fffff801`5e906000   RaInfo   RaInfo.sys   Fri Jan 11 05:19:28 2013 (50F00350)
    fffff801`5e906000 fffff801`5e919000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 10:26:56 2008 (487B7E50)
    fffff801`5e919000 fffff801`5e964000   mrxsmb10 mrxsmb10.sys Thu Mar 06 02:19:36 2014 (53183DA8)
    fffff801`5e964000 fffff801`5e96f000   secdrv   secdrv.SYS   Wed Sep 13 07:18:38 2006 (4508052E)
    fffff801`5e96f000 fffff801`5e9b2000   srvnet   srvnet.sys   Thu Mar 27 00:16:13 2014 (5333C22D)
    fffff801`5e9b2000 fffff801`5e9c2000   condrv   condrv.sys   Thu Aug 22 05:40:17 2013 (5215F8A1)
    fffff801`5e9c2000 fffff801`5e9d4000   tcpipreg tcpipreg.sys Thu Mar 06 02:19:59 2014 (53183DBF)
    fffff801`5e9d4000 fffff801`5e9ef000   TSFairShare TSFairShare.sys Thu Aug 22 05:36:31 2013 (5215F7BF)
    fffff801`5ea00000 fffff801`5ea98000   srv      srv.sys      Sat Oct 05 05:01:15 2013 (524FF17B)
    fffff801`5ea98000 fffff801`5eaa3000   rdpvideominiport rdpvideominiport.sys Thu Aug 22 05:38:52 2013 (5215F84C)
    fffff801`5eaa3000 fffff801`5ead7000   rdpdr    rdpdr.sys    Thu Aug 22 05:36:46 2013 (5215F7CE)
    fffff801`5eadc000 fffff801`5eb89000   srv2     srv2.sys     Wed Apr 02 20:53:54 2014 (533CCD42)
    fffff801`5eb89000 fffff801`5ebb6000   tunnel   tunnel.sys   Thu Aug 22 05:35:45 2013 (5215F791)
    fffff801`5ebb6000 fffff801`5ebd9000   tsusbhub tsusbhub.sys Thu Aug 22 05:35:58 2013 (5215F79E)
    fffff801`5ebd9000 fffff801`5ebe6000   terminpt terminpt.sys Thu Aug 22 05:39:16 2013 (5215F864)
    fffff801`5ebe6000 fffff801`5ebf3000   gfiark   gfiark.sys   Thu May 23 06:39:22 2013 (519E0DFA)
    fffff801`5ebf3000 fffff801`5ebfe000   gfiutil  gfiutil.sys  Wed Sep 04 12:57:40 2013 (522782A4)
    fffff960`000f1000 fffff960`00500000   win32k   win32k.sys   Fri Aug 22 18:41:48 2014 (53F7E34C)
    fffff960`006f1000 fffff960`006fa000   TSDDD    TSDDD.dll    Thu Aug 22 05:40:32 2013 (5215F8B0)
    fffff960`008da000 fffff960`00915000   cdd      cdd.dll      Thu Mar 06 05:39:53 2014 (53186C99)
    fffff960`00a16000 fffff960`00a3c000   RDPUDD   RDPUDD.dll   Thu Aug 22 05:40:31 2013 (5215F8AF)
    Unloaded modules:
    fffff801`5f09b000 fffff801`5f102000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f072000 fffff801`5f0d9000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f02a000 fffff801`5f091000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f061000 fffff801`5f0c8000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f003000 fffff801`5f06a000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f008000 fffff801`5f06f000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f045000 fffff801`5f0ac000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f01c000 fffff801`5f083000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f058000 fffff801`5f0bf000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f08d000 fffff801`5f0f4000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f0b9000 fffff801`5f120000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ece7000 fffff801`5ed4e000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec29000 fffff801`5ec90000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec8b000 fffff801`5ecf2000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec6d000 fffff801`5ecd4000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec81000 fffff801`5ece8000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecaf000 fffff801`5ed16000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecfa000 fffff801`5ed61000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec66000 fffff801`5eccd000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec66000 fffff801`5eccd000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecf7000 fffff801`5ed5e000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec59000 fffff801`5ecc0000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec8a000 fffff801`5ecf1000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecd8000 fffff801`5ed3f000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecfb000 fffff801`5ed62000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec7a000 fffff801`5ece1000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ece6000 fffff801`5ed4d000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecb5000 fffff801`5ed1c000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecdc000 fffff801`5ed43000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec5b000 fffff801`5ecc2000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecc3000 fffff801`5ed2a000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecd3000 fffff801`5ed3a000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecb5000 fffff801`5ed1c000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec67000 fffff801`5ecce000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec21000 fffff801`5ec88000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecea000 fffff801`5ed51000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec77000 fffff801`5ecde000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecc6000 fffff801`5ed2d000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec06000 fffff801`5ec6d000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5eca1000 fffff801`5ed08000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec05000 fffff801`5ec6c000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec20000 fffff801`5ec87000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec59000 fffff801`5ecc0000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecde000 fffff801`5ed45000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec1c000 fffff801`5ec83000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5eca1000 fffff801`5ed08000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec71000 fffff801`5ecd8000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec00000 fffff801`5ec67000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec44000 fffff801`5ecab000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec34000 fffff801`5ec9b000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    Closing open log file c:\debuglog.txt

    Hi,
    Regarding to Bug Check 0xAB, it may indicate that a session unload occurred while a session driver still held
    memory. For more details, please refer to following article and check if can help you.
    Bug Check 0xAB: SESSION_HAS_VALID_POOL_ON_EXIT
    à
    We do not have update 2862768 installed on the server as per
    Please check if you have installed
    KB2982791 in the Windows Server 2012 R2. I noticed similar threads that some similar issues were related to the KB2982791. Just a confirmation. Thanks for your understanding.
    à
    This indicates a bug in win32k.sys, atmfd.dll, rdpdd.dll or a video driver.
    Please use
    sfc /scannow command to scan all protected system files. Meanwhile, please update necessary drivers and then monitor the result.
    By the way, troubleshoot this kind of kernel crash issue, we need to analyze the crash dump file to narrow down the root cause of the issue. However, it is not effective
    for us to debug the crash dump file here in the forum. If this issues is a state of emergency for you. Please contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request.
    To obtain the phone numbers for specific technology request, please refer to the web site listed below:
    http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
    Hope this helps.
    Best regards,
    Justin Gu

  • Need assistance how to configure RDS on a standalone Server 2012 R2 not joined to a domain

    Hi,
    I need help on how to configure RDS on my standalone server 2012 R2 that is not joined to a domain.  I would also like to see the counterpart of Terminal Services Manager.
    I am familiar with Terminal Services on my old Server 2003 which I migrating.
    Thank you for your assistance.
    Sincerely,
    Ramon

    Hi,
    the dedicated RDS/TS forum is here:
    http://social.technet.microsoft.com/Forums/en-US/home?forum=winserverTS
    Some useful articles, which seem to answer your questions:
    http://support.microsoft.com/kb/2833839
    http://ryanmangansitblog.com/2013/10/30/deploying-a-rdsh-server-in-a-workgroup-rds-2012-r2/
    http://support.risualblogs.com/blog/2014/03/10/setting-up-a-2012-r2-rds-gateway-for-a-workgroup/
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • Some of the SQL Server 2012 are not getting monitored in SCOM 2012 SP1.( basics monitoring is happening, expect SQL role)

    Found that all the SQL servers are getting monitored, expect few servers which are having SQL server 2012 role.
    proxy is enabled for these servers, when I checked discovered inventory for SQL 2012 database unable to find these servers in that list.
    and other servers having SQL Server 2012 monitoring properly issue is with only few servers.

    Hi,
    thanks for the all the input, we are using service account as windows account instead of action account !!
    will that also affect discovery of SQL role?
    and also found that there are many alerts in SCOM console, with alert description :
    SQL Server cannot authenticate using Kerberos because the Service Principal Name
    (SPN) is missing, misplaced, or duplicated.
    please let me know how we can resolve this issue, will it affect SQL discovery as well ?

  • Server 2012 fresh install - Running at a crawl. Possible hardware issue?

    Hello All,
    I have recently purchased a used server and just fresh installed Server 2012 to evaluate it, and I am experiencing a issue with it running very slow.   So far nothing has been setup or installed besides the OS, hard drives, and a external usb drive,
    so it is pushing me to believe my issue is hardware related.
    First let me describe the issue more.   Basically everything is slow to load.  Control panel takes 20 seconds...  trying to load disk management and other snap in from administrative tools all take 15-20secs+ and first come up in
    a greyed out window or the administrative tools window goes to "Not Responding" for a few seconds then loads it.
    I do not think it is due to the fact the server is used with slightly dated hardware as it has Dual Quad-Core 2.66 Xeons & 16gb ECC Ram, so I was thinking their must be a bad piece of hardware in there?  Maybe bad ram?
    Anyway I plan to start hardware diagnostics, but I just wanted to see if anyone had any insight or suggestions for me.  And to verify if this sounds like a hardware issue to you as well.
    Thanks!

    Windows 2008 R2 that is on top of the list of supported operating systems. It is a good choice for some testing with M350 G5. Then you can test the in-place upgrade and application compatibility test will tell you, which component makes the problem.
    If for example onboard NIC is not compatible, then you can use another NIC card that is compatible. When it is RAID controller (very often), then either use another RAID or single HDD (it is test only, not for production environment).
    You can explore the virtualization path. Get know if appropriate hypervisor from VMvare is compatible with this hardware is also compatible with Windows Server 2012 R2. VMware forum may answer your question on virtualization. Working in virtual environment
    will provide some experience too.
    Majority of current desktop equipment allows you for testing Windows Server 2012 R2. There are some exceptions, namely "high end game machines" that make you to find remedy for drivers (example
    MAXIMUS IV GENE-Z - here is a need to adapt inf file for NIC, because of there is low end NIC on motherboard.)
    For low performance issues use native tools like Performace Monitor and diagnostics - Event logs and Device Manager. For detailed analysis consider Sysinternals tools.
    HTH
    Milos 

  • After installing Yosemite, my Photoshop cs5 will not open. Says its experienced an unrecoverable issue. Any ideas?

    Anybody know why photoshop won't open afetr installing Yosemite?

    Yes. Yosemite's installers breaks Photoshop CS5 installs. You will need to reinstall and update.  If a message pops up requiring Java, get it from this link: Java for OS X 2014-001
    Gene

Maybe you are looking for

  • ICloud with Outlook 2007 problems

    The latest update for iCloud would appear to cause a problem with sending email using Outlook 2007 on a PC. I use iCloud to sync my Calendars and Contacts in Outlook. But Outlook will no longer date messages sent to its Outbox, and therefore won't se

  • 15inch macbook pro w/ retina display not connecting to tv

    Hi All, I'm trying to connect my new macbook pro with retina display to my HD TV via the HDMI port on my computer.  I connect the the cable to my computer and plug it into my TV, the screen flickers blue on my computer and then goes back to normal bu

  • Outlook 2010 won't sync with iCloud on the web

    Outlook 2010 Calendar syncs with the iCloud Calendar in Outlook. Both are visible in Outlook, both are ticked. Calendar Sync is set up in iCloud Control Panel 2 and on settings on my iPhone & iPad. However, appointments don't show in iPhone, iPad or

  • Spam error in xpra_execution phase

    hello experts,          I am applying SAP BASIS PATCH (SAPKB70011) , I got stuck in EPRA_EXECUTION phase.          It is going on running for more then 10 hours.          i had restarted the import but still it is showing the same status.          it

  • Looking for small ext.Mic for iPhone 4! Purpose: Liverecording ex.Sony ECM DS30P?

    I need a small electret condenser mic that gets enough power from the jackinput on my iPhone 4! for live recording of concerts etc. I heard that the Dony ECM DS30P DOES NOT WORK.? Also suitable software for recording. Aka. Field Recorder/Blue or simi