System stops and reboot occasionally after installing W2K3 SP1 [Terminal Services]

Prev: problem accessing TS
Next: tsadmin doesnt show some servers

From: Kurt on 27 May 2005 05:36

After installing SP1 on my 2 Windows 2003 Server Enterprise Edition, running
terminal services in App Mode, they have both stopped and rebooted several
times. In 8 weeks time there has been 4-5 such incidents per server.

In the system event log:

Event ID: 1001

The computer has rebooted from a bugcheck. The bugcheck was: 0x000000ab
(0x00000007, 0x00002e40, 0x00000000, 0x00000084). A dump was saved in:
C:\WINDOWS\MEMORY.DMP.

Event ID: 1003

Error code 000000ab, parameter1 00000007, parameter2 00002e40, parameter3
00000000, parameter4 00000084.

From Windbg:

Microsoft (R) Windows Debugger Version 6.1.0017.2
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\debug*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free
x86 compatible
Product: Server, suite: Enterprise TerminalServer
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Thu May 26 13:16:13 2005
System Uptime: 8 days 3:32:08.381
Loading Kernel Symbols
.......................................................................................................................
Loading unloaded module list
.....
Loading User Symbols
PEB is paged out (Peb = 7ffde00c). Type ".hh dbgerr001" for details
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck AB, {7, 2e40, 0, 84}

Probably caused by : ntkrpamp.exe ( nt!MiCheckSessionPoolAllocations+107 )

Followup: MachineOwner
---------

2: kd> !analyze -v;r;kv;lmtn;
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

SESSION_HAS_VALID_POOL_ON_EXIT (ab)
Caused by a session driver not freeing its pool allocations prior to a
session unload. This indicates a bug in win32k.sys, atmfd.dll,
rdpdd.dll or a video driver.
Arguments:
Arg1: 00000007, session ID
Arg2: 00002e40, number of paged pool bytes that are leaking
Arg3: 00000000, number of nonpaged pool bytes that are leaking
Arg4: 00000084, total number of paged and nonpaged allocations that are
leaking.
nonpaged allocations are in the upper half of this word,
paged allocations are in the lower half of this word.

Debugging Details:
------------------

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xAB

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8092ea6f to 80827451

STACK_TEXT:
b72d4c24 8092ea6f 000000ab 00000007 00002e40 nt!KeBugCheckEx+0x1b
b72d4c68 809ab017 8aa67aa8 8aa67aa8 00000000
nt!MiCheckSessionPoolAllocations+0x107
b72d4ce8 8084c1a7 8aa67aa8 00000000 8a172398
nt!MiDereferenceSessionFinal+0x183
b72d4d04 8094b539 8aa67aa8 8a172398 8a1725d8
nt!MmCleanProcessAddressSpace+0x6b
b72d4d8c 8094b68d 00000000 00000000 8a172398 nt!PspExitThread+0x5f1
b72d4da4 80948bc0 8a172398 00000000 00000001
nt!PspTerminateThreadByPointer+0x4b
b72d4ddc 8088d4d2 bf92b562 8a0abf30 00000000 nt!PspSystemThreadStartup+0x3c
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

FOLLOWUP_IP:
nt!MiCheckSessionPoolAllocations+107
8092ea6f 5f pop edi

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!MiCheckSessionPoolAllocations+107

MODULE_NAME: nt

IMAGE_NAME: ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42435b14

STACK_COMMAND: kb

BUCKET_ID: 0xAB_nt!MiCheckSessionPoolAllocations+107

Followup: MachineOwner
---------

eax=f772f13c ebx=00002e40 ecx=00000000 edx=c0602f80 esi=f772f120 edi=c0602f78
eip=80827451 esp=b72d4c0c ebp=b72d4c24 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+1b:
80827451 5d pop ebp
ChildEBP RetAddr Args to Child
b72d4c24 8092ea6f 000000ab 00000007 00002e40 nt!KeBugCheckEx+0x1b
b72d4c68 809ab017 8aa67aa8 8aa67aa8 00000000
nt!MiCheckSessionPoolAllocations+0x107
b72d4ce8 8084c1a7 8aa67aa8 00000000 8a172398
nt!MiDereferenceSessionFinal+0x183
b72d4d04 8094b539 8aa67aa8 8a172398 8a1725d8
nt!MmCleanProcessAddressSpace+0x6b
b72d4d8c 8094b68d 00000000 00000000 8a172398 nt!PspExitThread+0x5f1
b72d4da4 80948bc0 8a172398 00000000 00000001
nt!PspTerminateThreadByPointer+0x4b
b72d4ddc 8088d4d2 bf92b562 8a0abf30 00000000 nt!PspSystemThreadStartup+0x3c
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80800000 80a53000 nt Timestamp: Fri Mar 25 01:28:04 2005
(42435B14) Checksum: 0023D043
80a53000 80a7f000 hal Timestamp: Fri Mar 25 01:28:37 2005
(42435B35) Checksum: 0001FB39
b8c87000 b8cb2000 RDPWD Timestamp: Fri Mar 25 01:27:16 2005
(42435AE4) Checksum: 0002FD6D
b8d02000 b8d19700 nvcoaft51 Timestamp: Wed Dec 01 11:55:40 2004
(41ADA32C) Checksum: 000257A2
b8dc2000 b8dcd000 TDTCP Timestamp: Fri Mar 25 01:27:15 2005
(42435AE3) Checksum: 000102E8
b9102000 b912c000 Fastfat Timestamp: Fri Mar 25 01:40:20 2005
(42435DF4) Checksum: 0002934F
b9294000 b92f3000 srv Timestamp: Fri Mar 25 01:40:19 2005
(42435DF3) Checksum: 0005C6BC
b95cf000 b95d22c0 ndiskio Timestamp: Tue May 13 11:38:13 2003
(3EC0BD05) Checksum: 00007C02
b96b3000 b96c8000 Cdfs Timestamp: Fri Mar 25 01:40:55 2005
(42435E17) Checksum: 0001AFD3
b96c8000 b96d9000 Fips Timestamp: Fri Mar 25 01:40:33 2005
(42435E01) Checksum: 00015AC8
b96d9000 b974f000 mrxsmb Timestamp: Fri Mar 25 01:41:13 2005
(42435E29) Checksum: 00074260
b9777000 b97a7000 rdbss Timestamp: Fri Mar 25 01:40:49 2005
(42435E11) Checksum: 0002ED8F
b9847000 b9871000 afd Timestamp: Fri Mar 25 01:40:43 2005
(42435E0B) Checksum: 00025408
b9871000 b98a2000 netbt Timestamp: Fri Mar 25 01:40:31 2005
(42435DFF) Checksum: 0002C5B2
b98a2000 b9903000 tcpip Timestamp: Fri Mar 25 01:40:31 2005
(42435DFF) Checksum: 0005606F
b9903000 b991c000 ipsec Timestamp: Fri Mar 25 01:40:49 2005
(42435E11) Checksum: 00016439
b998c000 b99a0000 usbhub Timestamp: Fri Mar 25 01:30:46 2005
(42435BB6) Checksum: 00013E34
b9b08000 b9b48000 update Timestamp: Fri Mar 25 01:40:27 2005
(42435DFB) Checksum: 00042AB3
b9b70000 b9ba7000 rdpdr Timestamp: Fri Mar 25 01:30:20 2005
(42435B9C) Checksum: 00037A18
b9bd2000 b9c28000 wlbs Timestamp: Fri Mar 25 01:40:15 2005
(42435DEF) Checksum: 000317A6
b9c28000 b9c3b000 raspptp Timestamp: Fri Mar 25 01:40:43 2005
(42435E0B) Checksum: 00012D1F
b9c3b000 b9c55000 ndiswan Timestamp: Fri Mar 25 01:40:46 2005
(42435E0E) Checksum: 00024A0E
b9c55000 b9c6a000 rasl2tp Timestamp: Fri Mar 25 01:40:29 2005
(42435DFD) Checksum: 00015B39
b9c6a000 b9c97700 q57xp32 Timestamp: Thu May 20 18:44:36 2004
(40ACE074) Checksum: 0002E3AB
b9c98000 b9cc2000 USBPORT Timestamp: Fri Mar 25 01:30:43 2005
(42435BB3) Checksum: 00023E74
b9cc2000 b9cea000 ks Timestamp: Fri Mar 25 01:41:03 2005
(42435E1F) Checksum: 000250E7
b9cea000 b9cfe000 redbook Timestamp: Fri Mar 25 01:28:46 2005
(42435B3E) Checksum: 000165A1
b9cfe000 b9d13000 cdrom Timestamp: Fri Mar 25 01:28:57 2005
(42435B49) Checksum: 0000FC12
b9d13000 b9d28000 serial Timestamp: Fri Mar 25 01:28:29 2005
(42435B2D) Checksum: 0001EEE6
b9d28000 b9d3b000 i8042prt Timestamp: Fri Mar 25 01:41:05 2005
(42435E21) Checksum: 0001C2D6
b9d3b000 b9d85000 cpqasm2 Timestamp: Tue Oct 14 01:38:14 2003
(3F8B3766) Checksum: 00050676
b9d85000 b9da0000 VIDEOPRT Timestamp: Fri Mar 25 01:29:53 2005
(42435B81) Checksum: 0001BC4D
b9da0000 b9df3d80 ati2mpad Timestamp: Fri Jul 19 03:13:20 2002
(3D3767B0) Checksum: 0006029D
b9df7000 b9df7e00 nvcfsr Timestamp: Fri Nov 05 09:47:02 2004
(418B3E06) Checksum: 00003087
ba10d000 ba116000 mssmbios Timestamp: Fri Mar 25 01:34:14 2005
(42435C86) Checksum: 0000E2D1
ba11d000 ba12c000 termdd Timestamp: Fri Mar 25 01:27:15 2005
(42435AE3) Checksum: 00014808
ba12d000 ba136000 raspti Timestamp: Fri Mar 25 01:34:16 2005
(42435C88) Checksum: 0000D117
ba13d000 ba148000 ptilink Timestamp: Fri Mar 25 01:28:25 2005
(42435B29) Checksum: 0000DEA4
ba14d000 ba158000 TDI Timestamp: Fri Mar 25 01:35:34 2005
(42435CD6) Checksum: 00014D93
ba15d000 ba16c000 raspppoe Timestamp: Fri Mar 25 01:34:16 2005
(42435C88) Checksum: 00015D34
ba16d000 ba176000 ndistapi Timestamp: Fri Mar 25 01:34:11 2005
(42435C83) Checksum: 0000C04E
ba17d000 ba18bf80 CPQCISSE Timestamp: Mon Aug 04 21:57:42 2003
(3F2EBAB6) Checksum: 0000FBA6
ba18d000 ba198000 fdc Timestamp: Fri Mar 25 01:28:43 2005
(42435B3B) Checksum: 00009E2F
bf800000 bf9cf000 win32k Timestamp: Fri Mar 25 01:40:09 2005
(42435DE9) Checksum: 001C9EE0
bf9cf000 bf9e5000 dxg Timestamp: Fri Mar 25 01:27:25 2005
(42435AED) Checksum: 00017464
bf9e5000 bfa3b680 ati2drad Timestamp: Fri Mar 25 03:30:34 2005
(424377CA) Checksum: 000572D8
bff60000 bff7e000 RDPDD Timestamp: Fri Mar 25 03:30:48 2005
(424377D8) Checksum: 0001FF64
bffa0000 bffea000 ATMFD Timestamp: Fri Mar 25 03:30:36 2005
(424377CC) Checksum: 00047B1F
f7014000 f701e000 serenum Timestamp: Fri Mar 25 01:28:27 2005
(42435B2B) Checksum: 0000EFB0
f7024000 f702d000 watchdog Timestamp: Fri Mar 25 01:30:19 2005
(42435B9B) Checksum: 0000F8F5
f7044000 f7051000 wanarp Timestamp: Fri Mar 25 01:34:07 2005
(42435C7F) Checksum: 00016188
f7088000 f708bd40 dump_cpqcissm Timestamp: Mon Aug 18 20:54:24 2003
(3F4120E0) Checksum: 00004C54
f710c000 f7126000 CPQPHP Timestamp: Fri Aug 29 00:23:13 2003
(3F4E80D1) Checksum: 000183ED
f7126000 f7145000 Mup Timestamp: Fri Mar 25 01:40:49 2005
(42435E11) Checksum: 00022806
f7145000 f717b000 NDIS Timestamp: Fri Mar 25 01:40:26 2005
(42435DFA) Checksum: 00036E14
f717b000 f7210000 Ntfs Timestamp: Fri Mar 25 01:40:29 2005
(42435DFD) Checksum: 0009D398
f7210000 f7237000 KSecDD Timestamp: Fri Mar 25 01:28:53 2005
(42435B45) Checksum: 0002E4A7
f7237000 f725c000 fltmgr Timestamp: Fri Mar 25 01:30:25 2005
(42435BA1) Checksum: 000221C6
f725c000 f726f000 CLASSPNP Timestamp: Fri Mar 25 01:40:23 2005
(42435DF7) Checksum: 000138A3
f726f000 f7283e80 adpu160m Timestamp: Fri Jun 21 04:02:53 2002
(3D12894D) Checksum: 00017A0D
f7284000 f72a0000 atapi Timestamp: Fri Mar 25 01:28:49 2005
(42435B41) Checksum: 0001970F
f72a0000 f72bf000 SCSIPORT Timestamp: Fri Mar 25 01:40:26 2005
(42435DFA) Checksum: 00022852
f72bf000 f72e9000 volsnap Timestamp: Fri Mar 25 01:29:10 2005
(42435B56) Checksum: 00034973
f72e9000 f7315000 dmio Timestamp: Fri Mar 25 01:30:02 2005
(42435B8A) Checksum: 00033132
f7315000 f733c000 ftdisk Timestamp: Fri Mar 25 01:29:00 2005
(42435B4C) Checksum: 0002537D
f733c000 f7352000 pci Timestamp: Fri Mar 25 01:34:14 2005
(42435C86) Checksum: 000211F0
f7352000 f7386000 ACPI Timestamp: Fri Mar 25 01:34:09 2005
(42435C81) Checksum: 0003D903
f7487000 f7490000 WMILIB Timestamp: Tue Mar 25 08:13:00 2003
(3E80017C) Checksum: 00004365
f7497000 f74a6000 isapnp Timestamp: Tue Mar 25 08:16:35 2003
(3E800253) Checksum: 0001731C
f74a7000 f74b4000 PCIIDEX Timestamp: Fri Mar 25 01:28:48 2005
(42435B40) Checksum: 00008538
f74b7000 f74c7000 MountMgr Timestamp: Fri Mar 25 01:27:23 2005
(42435AEB) Checksum: 00015353
f74c7000 f74d2000 PartMgr Timestamp: Fri Mar 25 01:40:34 2005
(42435E02) Checksum: 0000E4EB
f74d7000 f74e6ae0 cpq32fs2 Timestamp: Tue Nov 19 00:47:47 2002
(3DD97C23) Checksum: 0001862F
f74e7000 f74f3000 symc8xx Timestamp: Thu Oct 14 23:29:38 2004
(416EEFC2) Checksum: 0000B596
f74f7000 f7502000 sym_hi Timestamp: Sat Oct 30 00:09:18 2004
(4182BF8E) Checksum: 00009102
f7507000 f7517000 disk Timestamp: Fri Mar 25 01:28:58 2005
(42435B4A) Checksum: 0000ABFE
f7517000 f7523000 Dfs Timestamp: Fri Mar 25 01:30:28 2005
(42435BA4) Checksum: 0000F0F4
f7527000 f7531000 crcdisk Timestamp: Fri Mar 25 01:29:40 2005
(42435B74) Checksum: 000055EB
f7567000 f7571000 mouclass Timestamp: Tue Mar 25 08:03:09 2003
(3E7FFF2D) Checksum: 000062DB
f7577000 f7583000 vga Timestamp: Fri Mar 25 01:29:54 2005
(42435B82) Checksum: 000061DC
f7597000 f75a1000 flpydisk Timestamp: Tue Mar 25 08:04:32 2003
(3E7FFF80) Checksum: 000132D1
f75b7000 f75c1000 Dxapi Timestamp: Tue Mar 25 08:06:01 2003
(3E7FFFD9) Checksum: 0001039A
f75c7000 f75d5000 HIDCLASS Timestamp: Tue Mar 25 08:10:17 2003
(3E8000D9) Checksum: 00016280
f75d7000 f75e1000 dump_diskdump Timestamp: Fri Mar 25 01:28:56 2005
(42435B48) Checksum: 00005A49
f75f7000 f7605000 msgpc Timestamp: Fri Mar 25 01:33:31 2005
(42435C5B) Checksum: 0000A8D8
f7607000 f7610000 hidusb Timestamp: Tue Mar 25 08:10:17 2003
(3E8000D9) Checksum: 0000BFEC
f7617000 f7622000 Msfs Timestamp: Fri Mar 25 01:30:04 2005
(42435B8C) Checksum: 000080A3
f7637000 f7640000 ndisuio Timestamp: Fri Mar 25 01:33:16 2005
(42435C4C) Checksum: 0001066B
f7647000 f7654000 netbios Timestamp: Fri Mar 25 01:33:21 2005
(42435C51) Checksum: 0000F537
f7667000 f7674000 Npfs Timestamp: Fri Mar 25 01:30:04 2005
(42435B8C) Checksum: 0000EF1C
f7677000 f7680000 kbdhid Timestamp: Fri Mar 25 01:27:27 2005
(42435AEF) Checksum: 00012D19
f7697000 f76a6000 intelppm Timestamp: Fri Mar 25 01:28:40 2005
(42435B38) Checksum: 0000B108
f76d7000 f76e1000 kbdclass Timestamp: Tue Mar 25 08:03:10 2003
(3E7FFF2E) Checksum: 0000D1CA
f76e7000 f76f5000 NDProxy Timestamp: Fri Mar 25 01:34:13 2005
(42435C85) Checksum: 00016B65
f7707000 f770f000 kdcom Timestamp: Tue Mar 25 08:08:00 2003
(3E800050) Checksum: 0000E3AA
f770f000 f7717000 BOOTVID Timestamp: Tue Mar 25 08:07:58 2003
(3E80004E) Checksum: 00008BE3
f7717000 f771e000 pciide Timestamp: Tue Mar 25 08:04:46 2003
(3E7FFF8E) Checksum: 00009478
f771f000 f7726000 dmload Timestamp: Tue Mar 25 08:08:08 2003
(3E800058) Checksum: 00004F35
f773f000 f7747000 Fs_Rec Timestamp: Tue Mar 25 08:08:36 2003
(3E800074) Checksum: 0000F5E9
f775f000 f7766000 Null Timestamp: Tue Mar 25 08:03:05 2003
(3E7FFF29) Checksum: 0000C34A
f7767000 f776e000 Beep Timestamp: Tue Mar 25 08:03:04 2003
(3E7FFF28) Checksum: 0000B82F
f776f000 f7775300 HIDPARSE Timestamp: Fri Mar 25 01:30:36 2005
(42435BAC) Checksum: 0000C913
f7777000 f777f000 mnmdd Timestamp: Tue Mar 25 08:07:53 2003
(3E800049) Checksum: 0000B73B
f777f000 f7787000 RDPCDD Timestamp: Tue Mar 25 08:03:05 2003
(3E7FFF29) Checksum: 00008EDA
f7787000 f778f000 rasacd Timestamp: Tue Mar 25 08:11:50 2003
(3E800136) Checksum: 000067ED
f7797000 f779e000 dxgthk Timestamp: Tue Mar 25 08:05:52 2003
(3E7FFFD0) Checksum: 000019C5
f77af000 f77b3a00 nvcoarc51 Timestamp: Tue Jan 08 14:33:13 2002
(3C3AF519) Checksum: 000094D8
f77b7000 f77bd780 nvcoafl51 Timestamp: Tue Jan 08 11:49:38 2002
(3C3ACEC2) Checksum: 0000DD4A
f77e7000 f77ef000 OPRGHDLR Timestamp: Tue Mar 25 08:16:25 2003
(3E800249) Checksum: 0000E84E
f77ff000 f7803a20 CpqCiDrv Timestamp: Fri Jul 11 17:32:03 2003
(3F0ED873) Checksum: 00012F83
f7807000 f780b400 usbohci Timestamp: Fri Mar 25 01:30:45 2005
(42435BB5) Checksum: 00011B79
f780f000 f7817000 audstub Timestamp: Tue Mar 25 08:09:12 2003
(3E800098) Checksum: 00005AA7
f7897000 f789ab60 cpqarray Timestamp: Mon Oct 21 23:18:51 2002
(3DB46F3B) Checksum: 000066AE
f789b000 f789ef80 symc810 Timestamp: Fri Dec 08 18:40:59 2000
(3A311D2B) Checksum: 00006138
f789f000 f78a2d40 cpqcissm Timestamp: Mon Aug 18 20:54:24 2003
(3F4120E0) Checksum: 00004C54
f78a3000 f78a6460 cpqarry2 Timestamp: Mon Nov 05 22:47:33 2001
(3BE708F5) Checksum: 0000BCBC
f7997000 f7998280 swenum Timestamp: Fri Mar 25 01:27:42 2005
(42435AFE) Checksum: 00002913
f7999000 f799a580 USBD Timestamp: Tue Mar 25 08:10:39 2003
(3E8000EF) Checksum: 0000A359
f7a98000 f7a98b00 sysmgmt Timestamp: Wed Jan 29 20:44:45 2003
(3E382F2D) Checksum: 00007A5A

Unloaded modules:
f77a7000 f77af000 TDPIPE.SYS
Timestamp: Thu May 26 12:30:16 2005 (4295A538)
Checksum: 00000000
f76b7000 f76c5000 imapi.sys
Timestamp: Wed May 18 09:46:13 2005 (428AF2C5)
Checksum: 00000000
f75a7000 f75b0000 kbdhid.sys
Timestamp: Wed May 18 09:46:13 2005 (428AF2C5)
Checksum: 00000000
f781f000 f7827000 Sfloppy.SYS
Timestamp: Wed May 18 09:46:13 2005 (428AF2C5)
Checksum: 00000000

Has anyone else seen this bug?
Does anybody know how to fix this (not by uninstalling SP1) ?

Thanks

Kurt

From: Vera Noest [MVP] on 27 May 2005 17:37

So you are booting with the /PAE switch?
How much RAM does this server have?

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---

"=?Utf-8?B?S3VydA==?=" <Kurt(a)discussions.microsoft.com> wrote on
27 maj 2005 in microsoft.public.windows.terminal_services:

> After installing SP1 on my 2 Windows 2003 Server Enterprise
> Edition, running terminal services in App Mode, they have both
> stopped and rebooted several times. In 8 weeks time there has
> been 4-5 such incidents per server.
>
> In the system event log:
>
> Event ID: 1001
>
> The computer has rebooted from a bugcheck. The bugcheck was:
> 0x000000ab (0x00000007, 0x00002e40, 0x00000000, 0x00000084). A
> dump was saved in: C:\WINDOWS\MEMORY.DMP.
>
> Event ID: 1003
>
> Error code 000000ab, parameter1 00000007, parameter2 00002e40,
> parameter3 00000000, parameter4 00000084.
>
> From Windbg:
>
> Microsoft (R) Windows Debugger Version 6.1.0017.2
> Copyright (c) Microsoft Corporation. All rights reserved.
>
>
> Loading Dump File [C:\WINDOWS\MEMORY.DMP]
> Kernel Summary Dump File: Only kernel address space is available
>
> Symbol search path is:
> SRV*c:\debug*http://msdl.microsoft.com/download/symbols
> Executable search path is: Windows Server 2003 Kernel Version
> 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
> Product: Server, suite: Enterprise TerminalServer
> Built by: 3790.srv03_sp1_rtm.050324-1447
> Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
> Debug session time: Thu May 26 13:16:13 2005
> System Uptime: 8 days 3:32:08.381
> Loading Kernel Symbols
> .................................................................
> ..................................................... Loading
> unloaded module list ....
> Loading User Symbols
> PEB is paged out (Peb = 7ffde00c). Type ".hh dbgerr001" for
> details
> *****************************************************************
> ************** *
>
> *
> * Bugcheck Analysis
>
> *
> *
>
> *
> *****************************************************************
> **************
>
> Use !analyze -v to get detailed debugging information.
>
> BugCheck AB, {7, 2e40, 0, 84}
>
> Probably caused by : ntkrpamp.exe (
> nt!MiCheckSessionPoolAllocations+107 )
>
> Followup: MachineOwner
> ---------
>
> 2: kd> !analyze -v;r;kv;lmtn;
> *****************************************************************
> ************** *
>
> *
> * Bugcheck Analysis
>
> *
> *
>
> *
> *****************************************************************
> **************
>
> SESSION_HAS_VALID_POOL_ON_EXIT (ab)
> Caused by a session driver not freeing its pool allocations
> prior to a session unload. This indicates a bug in win32k.sys,
> atmfd.dll, rdpdd.dll or a video driver.
> Arguments:
> Arg1: 00000007, session ID
> Arg2: 00002e40, number of paged pool bytes that are leaking
> Arg3: 00000000, number of nonpaged pool bytes that are leaking
> Arg4: 00000084, total number of paged and nonpaged allocations
> that are leaking.
> nonpaged allocations are in the upper half of this word,
> paged allocations are in the lower half of this word.
>
> Debugging Details:
> ------------------
>
>
> DEFAULT_BUCKET_ID: DRIVER_FAULT
>
> BUGCHECK_STR: 0xAB
>
> CURRENT_IRQL: 0
>
> LAST_CONTROL_TRANSFER: from 8092ea6f to 80827451
>
> STACK_TEXT:
> b72d4c24 8092ea6f 000000ab 00000007 00002e40
> nt!KeBugCheckEx+0x1b b72d4c68 809ab017 8aa67aa8 8aa67aa8
> 00000000 nt!MiCheckSessionPoolAllocations+0x107
> b72d4ce8 8084c1a7 8aa67aa8 00000000 8a172398
> nt!MiDereferenceSessionFinal+0x183
> b72d4d04 8094b539 8aa67aa8 8a172398 8a1725d8
> nt!MmCleanProcessAddressSpace+0x6b
> b72d4d8c 8094b68d 00000000 00000000 8a172398
> nt!PspExitThread+0x5f1 b72d4da4 80948bc0 8a172398 00000000
> 00000001 nt!PspTerminateThreadByPointer+0x4b
> b72d4ddc 8088d4d2 bf92b562 8a0abf30 00000000
> nt!PspSystemThreadStartup+0x3c 00000000 00000000 00000000
> 00000000 00000000 nt!KiThreadStartup+0x16
>
>
> FOLLOWUP_IP:
> nt!MiCheckSessionPoolAllocations+107
> 8092ea6f 5f pop edi
>
> FOLLOWUP_NAME: MachineOwner
>
> SYMBOL_NAME: nt!MiCheckSessionPoolAllocations+107
>
> MODULE_NAME: nt
>
> IMAGE_NAME: ntkrpamp.exe
>
> DEBUG_FLR_IMAGE_TIMESTAMP: 42435b14
>
> STACK_COMMAND: kb
>
> BUCKET_ID: 0xAB_nt!MiCheckSessionPoolAllocations+107
>
> Followup: MachineOwner
> ---------
>
> eax=f772f13c ebx=00002e40 ecx=00000000 edx=c0602f80 esi=f772f120
> edi=c0602f78 eip=80827451 esp=b72d4c0c ebp=b72d4c24 iopl=0
> nv up ei ng nz na po nc cs=0008 ss=0010 ds=0023 es=0023
> fs=0030 gs=0000 efl=00000286 nt!KeBugCheckEx+1b:
> 80827451 5d pop ebp
> ChildEBP RetAddr Args to Child
> b72d4c24 8092ea6f 000000ab 00000007 00002e40
> nt!KeBugCheckEx+0x1b b72d4c68 809ab017 8aa67aa8 8aa67aa8
> 00000000 nt!MiCheckSessionPoolAllocations+0x107
> b72d4ce8 8084c1a7 8aa67aa8 00000000 8a172398
> nt!MiDereferenceSessionFinal+0x183
> b72d4d04 8094b539 8aa67aa8 8a172398 8a1725d8
> nt!MmCleanProcessAddressSpace+0x6b
> b72d4d8c 8094b68d 00000000 00000000 8a172398
> nt!PspExitThread+0x5f1 b72d4da4 80948bc0 8a172398 00000000
> 00000001 nt!PspTerminateThreadByPointer+0x4b
> b72d4ddc 8088d4d2 bf92b562 8a0abf30 00000000
> nt!PspSystemThreadStartup+0x3c 00000000 00000000 00000000
> 00000000 00000000 nt!KiThreadStartup+0x16 start end
> module name 80800000 80a53000 nt Timestamp: Fri Mar
> 25 01:28:04 2005 (42435B14) Checksum: 0023D043
> 80a53000 80a7f000 hal Timestamp: Fri Mar 25 01:28:37
> 2005 (42435B35) Checksum: 0001FB39
> b8c87000 b8cb2000 RDPWD Timestamp: Fri Mar 25 01:27:16
> 2005 (42435AE4) Checksum: 0002FD6D
> b8d02000 b8d19700 nvcoaft51 Timestamp: Wed Dec 01 11:55:40
> 2004 (41ADA32C) Checksum: 000257A2
> b8dc2000 b8dcd000 TDTCP Timestamp: Fri Mar 25 01:27:15
> 2005 (42435AE3) Checksum: 000102E8
> b9102000 b912c000 Fastfat Timestamp: Fri Mar 25 01:40:20
> 2005 (42435DF4) Checksum: 0002934F
> b9294000 b92f3000 srv Timestamp: Fri Mar 25 01:40:19
> 2005 (42435DF3) Checksum: 0005C6BC
> b95cf000 b95d22c0 ndiskio Timestamp: Tue May 13 11:38:13
> 2003 (3EC0BD05) Checksum: 00007C02
> b96b3000 b96c8000 Cdfs Timestamp: Fri Mar 25 01:40:55
> 2005 (42435E17) Checksum: 0001AFD3
> b96c8000 b96d9000 Fips Timestamp: Fri Mar 25 01:40:33
> 2005 (42435E01) Checksum: 00015AC8
> b96d9000 b974f000 mrxsmb Timestamp: Fri Mar 25 01:41:13
> 2005 (42435E29) Checksum: 00074260
> b9777000 b97a7000 rdbss Timestamp: Fri Mar 25 01:40:49
> 2005 (42435E11) Checksum: 0002ED8F
> b9847000 b9871000 afd Timestamp: Fri Mar 25 01:40:43
> 2005 (42435E0B) Checksum: 00025408
> b9871000 b98a2000 netbt Timestamp: Fri Mar 25 01:40:31
> 2005 (42435DFF) Checksum: 0002C5B2
> b98a2000 b9903000 tcpip Timestamp: Fri Mar 25 01:40:31
> 2005 (42435DFF) Checksum: 0005606F
> b9903000 b991c000 ipsec Timestamp: Fri Mar 25 01:40:49
> 2005 (42435E11) Checksum: 00016439
> b998c000 b99a0000 usbhub Timestamp: Fri Mar 25 01:30:46
> 2005 (42435BB6) Checksum: 00013E34
> b9b08000 b9b48000 update Timestamp: Fri Mar 25 01:40:27
> 2005 (42435DFB) Checksum: 00042AB3
> b9b70000 b9ba7000 rdpdr Timestamp: Fri Mar 25 01:30:20
> 2005 (42435B9C) Checksum: 00037A18
> b9bd2000 b9c28000 wlbs Timestamp: Fri Mar 25 01:40:15
> 2005 (42435DEF) Checksum: 000317A6
> b9c28000 b9c3b000 raspptp Timestamp: Fri Mar 25 01:40:43
> 2005 (42435E0B) Checksum: 00012D1F
> b9c3b000 b9c55000 ndiswan Timestamp: Fri Mar 25 01:40:46
> 2005 (42435E0E) Checksum: 00024A0E
> b9c55000 b9c6a000 rasl2tp Timestamp: Fri Mar 25 01:40:29
> 2005 (42435DFD) Checksum: 00015B39
> b9c6a000 b9c97700 q57xp32 Timestamp: Thu May 20 18:44:36
> 2004 (40ACE074) Checksum: 0002E3AB
> b9c98000 b9cc2000 USBPORT Timestamp: Fri Mar 25 01:30:43
> 2005 (42435BB3) Checksum: 00023E74
> b9cc2000 b9cea000 ks Timestamp: Fri Mar 25 01:41:03
> 2005 (42435E1F) Checksum: 000250E7
> b9cea000 b9cfe000 redbook Timestamp: Fri Mar 25 01:28:46
> 2005 (42435B3E) Checksum: 000165A1
> b9cfe000 b9d13000 cdrom Timestamp: Fri Mar 25 01:28:57
> 2005 (42435B49) Checksum: 0000FC12
> b9d13000 b9d28000 serial Timestamp: Fri Mar 25 01:28:29
> 2005 (42435B2D) Checksum: 0001EEE6
> b9d28000 b9d3b000 i8042prt Timestamp: Fri Mar 25 01:41:05
> 2005 (42435E21) Checksum: 0001C2D6
> b9d3b000 b9d85000 cpqasm2 Timestamp: Tue Oct 14 01:38:14
> 2003 (3F8B3766) Checksum: 00050676
> b9d85000 b9da0000 VIDEOPRT Timestamp: Fri Mar 25 01:29:53
> 2005 (42435B81) Checksum: 0001BC4D
> b9da0000 b9df3d80 ati2mpad Timestamp: Fri Jul 19 03:13:20
> 2002 (3D3767B0) Checksum: 0006029D
> b9df7000 b9df7e00 nvcfsr Timestamp: Fri Nov 05 09:47:02
> 2004 (418B3E06) Checksum: 00003087
> ba10d000 ba116000 mssmbios Timestamp: Fri Mar 25 01:34:14
> 2005 (42435C86) Checksum: 0000E2D1
> ba11d000 ba12c000 termdd Timestamp: Fri Mar 25 01:27:15
> 2005 (42435AE3) Checksum: 00014808
> ba12d000 ba136000 raspti Timestamp: Fri Mar 25 01:34:16
> 2005 (42435C88) Checksum: 0000D117
> ba13d000 ba148000 ptilink Timestamp: Fri Mar 25 01:28:25
> 2005 (42435B29) Checksum: 0000DEA4
> ba14d000 ba158000 TDI Timestamp: Fri Mar 25 01:35:34
> 2005 (42435CD6) Checksum: 00014D93
> ba15d000 ba16c000 raspppoe Timestamp: Fri Mar 25 01:34:16
> 2005 (42435C88) Checksum: 00015D34
> ba16d000 ba176000 ndistapi Timestamp: Fri Mar 25 01:34:11
> 2005 (42435C83) Checksum: 0000C04E
> ba17d000 ba18bf80 CPQCISSE Timestamp: Mon Aug 04 21:57:42
> 2003 (3F2EBAB6) Checksum: 0000FBA6
> ba18d000 ba198000 fdc Timestamp: Fri Mar 25 01:28:43
> 2005 (42435B3B) Checksum: 00009E2F
> bf800000 bf9cf000 win32k Timestamp: Fri Mar 25 01:40:09
> 2005 (42435DE9) Checksum: 001C9EE0
> bf9cf000 bf9e5000 dxg Timestamp: Fri Mar 25 01:27:25
> 2005 (42435AED) Checksum: 00017464
> bf9e5000 bfa3b680 ati2drad Timestamp: Fri Mar 25 03:30:34
> 2005 (424377CA) Checksum: 000572D8
> bff60000 bff7e000 RDPDD Timestamp: Fri Mar 25 03:30:48
> 2005 (424377D8) Checksum: 0001FF64
> bffa0000 bffea000 ATMFD Timestamp: Fri Mar 25 03:30:36
> 2005 (424377CC) Checksum: 00047B1F
> f7014000 f701e000 serenum Timestamp: Fri Mar 25 01:28:27
> 2005 (42435B2B) Checksum: 0000EFB0
> f7024000 f702d000 watchdog Timestamp: Fri Mar 25 01:30:19
> 2005 (42435B9B) Checksum: 0000F8F5
> f7044000 f7051000 wanarp Timestamp: Fri Mar 25 01:34:07
> 2005 (42435C7F) Checksum: 00016188
> f7088000 f708bd40 dump_cpqcissm Timestamp: Mon Aug 18
> 20:54:24 2003 (3F4120E0) Checksum: 00004C54
> f710c000 f7126000 CPQPHP Timestamp: Fri Aug 29 00:23:13
> 2003 (3F4E80D1) Checksum: 000183ED
> f7126000 f7145000 Mup Timestamp: Fri Mar 25 01:40:49
> 2005 (42435E11) Checksum: 00022806
> f7145000 f717b000 NDIS Timestamp: Fri Mar 25 01:40:26
> 2005 (42435DFA) Checksum: 00036E14
> f717b000 f7210000 Ntfs Timestamp: Fri Mar 25 01:40:29
> 2005 (42435DFD) Checksum: 0009D398
> f7210000 f7237000 KSecDD Timestamp: Fri Mar 25 01:28:53
> 2005 (42435B45) Checksum: 0002E4A7
> f7237000 f725c000 fltmgr Timestamp: Fri Mar 25 01:30:25
> 2005 (42435BA1) Checksum: 000221C6
> f725c000 f726f000 CLASSPNP Timestamp: Fri Mar 25 01:40:23
> 2005 (42435DF7) Checksum: 000138A3
> f726f000 f7283e80 adpu160m Timestamp: Fri Jun 21 04:02:53
> 2002 (3D12894D) Checksum: 00017A0D
> f7284000 f72a0000 atapi Timestamp: Fri Mar 25 01:28:49
> 2005 (42435B41) Checksum: 0001970F
> f72a0000 f72bf000 SCSIPORT Timestamp: Fri Mar 25 01:40:26
> 2005 (42435DFA) Checksum: 00022852
> f72bf000 f72e9000 volsnap Timestamp: Fri Mar 25 01:29:10
> 2005 (42435B56) Checksum: 00034973
> f72e9000 f7315000 dmio Timestamp: Fri Mar 25 01:30:02
> 2005 (42435B8A) Checksum: 00033132
> f7315000 f733c000 ftdisk Timestamp: Fri Mar 25 01:29:00
> 2005 (42435B4C) Checksum: 0002537D
> f733c000 f7352000 pci Timestamp: Fri Mar 25 01:34:14
> 2005 (42435C86) Checksum: 000211F0
> f7352000 f7386000 ACPI Timestamp: Fri Mar 25 01:34:09
> 2005 (42435C81) Checksum: 0003D903
> f7487000 f7490000 WMILIB Timestamp: Tue Mar 25 08:13:00
> 2003 (3E80017C) Checksum: 00004365
> f7497000 f74a6000 isapnp Timestamp: Tue Mar 25 08:16:35
> 2003 (3E800253) Checksum: 0001731C
> f74a7000 f74b4000 PCIIDEX Timestamp: Fri Mar 25 01:28:48
> 2005 (42435B40) Checksum: 00008538
> f74b7000 f74c7000 MountMgr Timestamp: Fri Mar 25 01:27:23
> 2005 (42435AEB) Checksum: 00015353
> f74c7000 f74d2000 PartMgr Timestamp: Fri Mar 25 01:40:34
> 2005 (42435E02) Checksum: 0000E4EB
> f74d7000 f74e6ae0 cpq32fs2 Timestamp: Tue Nov 19 00:47:47
> 2002 (3DD97C23) Checksum: 0001862F
> f74e7000 f74f3000 symc8xx Timestamp: Thu Oct 14 23:29:38
> 2004 (416EEFC2) Checksum: 0000B596
> f74f7000 f7502000 sym_hi Timestamp: Sat Oct 30 00:09:18
> 2004 (4182BF8E) Checksum: 00009102
> f7507000 f7517000 disk Timestamp: Fri Mar 25 01:28:58
> 2005 (42435B4A) Checksum: 0000ABFE
> f7517000 f7523000 Dfs Timestamp: Fri Mar 25 01:30:28
> 2005 (42435BA4) Checksum: 0000F0F4
> f7527000 f7531000 crcdisk Timestamp: Fri Mar 25 01:29:40
> 2005 (42435B74) Checksum: 000055EB
> f7567000 f7571000 mouclass Timestamp: Tue Mar 25 08:03:09
> 2003 (3E7FFF2D) Checksum: 000062DB
> f7577000 f7583000 vga Timestamp: Fri Mar 25 01:29:54
> 2005 (42435B82) Checksum: 000061DC
> f7597000 f75a1000 flpydisk Timestamp: Tue Mar 25 08:04:32
> 2003 (3E7FFF80) Checksum: 000132D1
> f75b7000 f75c1000 Dxapi Timestamp: Tue Mar 25 08:06:01
> 2003 (3E7FFFD9) Checksum: 0001039A
> f75c7000 f75d5000 HIDCLASS Timestamp: Tue Mar 25 08:10:17
> 2003 (3E8000D9) Checksum: 00016280
> f75d7000 f75e1000 dump_diskdump Timestamp: Fri Mar 25
> 01:28:56 2005 (42435B48) Checksum: 00005A49
> f75f7000 f7605000 msgpc Timestamp: Fri Mar 25 01:33:31
> 2005 (42435C5B) Checksum: 0000A8D8
> f7607000 f7610000 hidusb Timestamp: Tue Mar 25 08:10:17
> 2003 (3E8000D9) Checksum: 0000BFEC
> f7617000 f7622000 Msfs Timestamp: Fri Mar 25 01:30:04
> 2005 (42435B8C) Checksum: 000080A3
> f7637000 f7640000 ndisuio Timestamp: Fri Mar 25 01:33:16
> 2005 (42435C4C) Checksum: 0001066B
> f7647000 f7654000 netbios Timestamp: Fri Mar 25 01:33:21
> 2005 (42435C51) Checksum: 0000F537
> f7667000 f7674000 Npfs Timestamp: Fri Mar 25 01:30:04
> 2005 (42435B8C) Checksum: 0000EF1C
> f7677000 f7680000 kbdhid Timestamp: Fri Mar 25 01:27:27
> 2005 (42435AEF) Checksum: 00012D19
> f7697000 f76a6000 intelppm Timestamp: Fri Mar 25 01:28:40
> 2005 (42435B38) Checksum: 0000B108
> f76d7000 f76e1000 kbdclass Timestamp: Tue Mar 25 08:03:10
> 2003 (3E7FFF2E) Checksum: 0000D1CA
> f76e7000 f76f5000 NDProxy Timestamp: Fri Mar 25 01:34:13
> 2005 (42435C85) Checksum: 00016B65
> f7707000 f770f000 kdcom Timestamp: Tue Mar 25 08:08:00
> 2003 (3E800050) Checksum: 0000E3AA
> f770f000 f7717000 BOOTVID Timestamp: Tue Mar 25 08:07:58
> 2003 (3E80004E) Checksum: 00008BE3
> f7717000 f771e000 pciide Timestamp: Tue Mar 25 08:04:46
> 2003 (3E7FFF8E) Checksum: 00009478
> f771f000 f7726000 dmload Timestamp: Tue Mar 25 08:08:08
> 2003 (3E800058) Checksum: 00004F35
> f773f000 f7747000 Fs_Rec Timestamp: Tue Mar 25 08:08:36
> 2003 (3E800074) Checksum: 0000F5E9
> f775f000 f7766000 Null Timestamp: Tue Mar 25 08:03:05
> 2003 (3E7FFF29) Checksum: 0000C34A
> f7767000 f776e000 Beep Timestamp: Tue Mar 25 08:03:04
> 2003 (3E7FFF28) Checksum: 0000B82F
> f776f000 f7775300 HIDPARSE Timestamp: Fri Mar 25 01:30:36
> 2005 (42435BAC) Checksum: 0000C913
> f7777000 f777f000 mnmdd Timestamp: Tue Mar 25 08:07:53
> 2003 (3E800049) Checksum: 0000B73B
> f777f000 f7787000 RDPCDD Timestamp: Tue Mar 25 08:03:05
> 2003 (3E7FFF29) Checksum: 00008EDA
> f7787000 f778f000 rasacd Timestamp: Tue Mar 25 08:11:50
> 2003 (3E800136) Checksum: 000067ED
> f7797000 f779e000 dxgthk Timestamp: Tue Mar 25 08:05:52
> 2003 (3E7FFFD0) Checksum: 000019C5
> f77af000 f77b3a00 nvcoarc51 Timestamp: Tue Jan 08 14:33:13
> 2002 (3C3AF519) Checksum: 000094D8
> f77b7000 f77bd780 nvcoafl51 Timestamp: Tue Jan 08 11:49:38
> 2002 (3C3ACEC2) Checksum: 0000DD4A
> f77e7000 f77ef000 OPRGHDLR Timestamp: Tue Mar 25 08:16:25
> 2003 (3E800249) Checksum: 0000E84E
> f77ff000 f7803a20 CpqCiDrv Timestamp: Fri Jul 11 17:32:03
> 2003 (3F0ED873) Checksum: 00012F83
> f7807000 f780b400 usbohci Timestamp: Fri Mar 25 01:30:45
> 2005 (42435BB5) Checksum: 00011B79
> f780f000 f7817000 audstub Timestamp: Tue Mar 25 08:09:12
> 2003 (3E800098) Checksum: 00005AA7
> f7897000 f789ab60 cpqarray Timestamp: Mon Oct 21 23:18:51
> 2002 (3DB46F3B) Checksum: 000066AE
> f789b000 f789ef80 symc810 Timestamp: Fri Dec 08 18:40:59
> 2000 (3A311D2B) Checksum: 00006138
> f789f000 f78a2d40 cpqcissm Timestamp: Mon Aug 18 20:54:24
> 2003 (3F4120E0) Checksum: 00004C54
> f78a3000 f78a6460 cpqarry2 Timestamp: Mon Nov 05 22:47:33
> 2001 (3BE708F5) Checksum: 0000BCBC
> f7997000 f7998280 swenum Timestamp: Fri Mar 25 01:27:42
> 2005 (42435AFE) Checksum: 00002913
> f7999000 f799a580 USBD Timestamp: Tue Mar 25 08:10:39
> 2003 (3E8000EF) Checksum: 0000A359
> f7a98000 f7a98b00 sysmgmt Timestamp: Wed Jan 29 20:44:45
> 2003 (3E382F2D) Checksum: 00007A5A
>
> Unloaded modules:
> f77a7000 f77af000 TDPIPE.SYS
> Timestamp: Thu May 26 12:30:16 2005 (4295A538)
> Checksum: 00000000
> f76b7000 f76c5000 imapi.sys
> Timestamp: Wed May 18 09:46:13 2005 (428AF2C5)
> Checksum: 00000000
> f75a7000 f75b0000 kbdhid.sys
> Timestamp: Wed May 18 09:46:13 2005 (428AF2C5)
> Checksum: 00000000
> f781f000 f7827000 Sfloppy.SYS
> Timestamp: Wed May 18 09:46:13 2005 (428AF2C5)
> Checksum: 00000000
>
> Has anyone else seen this bug?
> Does anybody know how to fix this (not by uninstalling SP1) ?
>
> Thanks
>
> Kurt

From: Kurt on 28 May 2005 06:04

Yes, with PAE
4 GB RAM

Kurt

"Vera Noest [MVP]" wrote:

> So you are booting with the /PAE switch?
> How much RAM does this server have?
>
> --
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> http://hem.fyristorg.com/vera/IT
> --- please respond in newsgroup, NOT by private email ---
>
> "=?Utf-8?B?S3VydA==?=" <Kurt(a)discussions.microsoft.com> wrote on
> 27 maj 2005 in microsoft.public.windows.terminal_services:
>
> > After installing SP1 on my 2 Windows 2003 Server Enterprise
> > Edition, running terminal services in App Mode, they have both
> > stopped and rebooted several times. In 8 weeks time there has
> > been 4-5 such incidents per server.
> >
> > In the system event log:
> >
> > Event ID: 1001
> >
> > The computer has rebooted from a bugcheck. The bugcheck was:
> > 0x000000ab (0x00000007, 0x00002e40, 0x00000000, 0x00000084). A
> > dump was saved in: C:\WINDOWS\MEMORY.DMP.
> >
> > Event ID: 1003
> >
> > Error code 000000ab, parameter1 00000007, parameter2 00002e40,
> > parameter3 00000000, parameter4 00000084.
> >
> > From Windbg:
> >
> > Microsoft (R) Windows Debugger Version 6.1.0017.2
> > Copyright (c) Microsoft Corporation. All rights reserved.
> >
> >
> > Loading Dump File [C:\WINDOWS\MEMORY.DMP]
> > Kernel Summary Dump File: Only kernel address space is available
> >
> > Symbol search path is:
> > SRV*c:\debug*http://msdl.microsoft.com/download/symbols
> > Executable search path is: Windows Server 2003 Kernel Version
> > 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
> > Product: Server, suite: Enterprise TerminalServer
> > Built by: 3790.srv03_sp1_rtm.050324-1447
> > Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
> > Debug session time: Thu May 26 13:16:13 2005
> > System Uptime: 8 days 3:32:08.381
> > Loading Kernel Symbols
> > .................................................................
> > ..................................................... Loading
> > unloaded module list ....
> > Loading User Symbols
> > PEB is paged out (Peb = 7ffde00c). Type ".hh dbgerr001" for
> > details
> > *****************************************************************
> > ************** *
> >
> > *
> > * Bugcheck Analysis
> >
> > *
> > *
> >
> > *
> > *****************************************************************
> > **************
> >
> > Use !analyze -v to get detailed debugging information.
> >
> > BugCheck AB, {7, 2e40, 0, 84}
> >
> > Probably caused by : ntkrpamp.exe (
> > nt!MiCheckSessionPoolAllocations+107 )
> >
> > Followup: MachineOwner
> > ---------
> >
> > 2: kd> !analyze -v;r;kv;lmtn;
> > *****************************************************************
> > ************** *
> >
> > *
> > * Bugcheck Analysis
> >
> > *
> > *
> >
> > *
> > *****************************************************************
> > **************
> >
> > SESSION_HAS_VALID_POOL_ON_EXIT (ab)
> > Caused by a session driver not freeing its pool allocations
> > prior to a session unload. This indicates a bug in win32k.sys,
> > atmfd.dll, rdpdd.dll or a video driver.
> > Arguments:
> > Arg1: 00000007, session ID
> > Arg2: 00002e40, number of paged pool bytes that are leaking
> > Arg3: 00000000, number of nonpaged pool bytes that are leaking
> > Arg4: 00000084, total number of paged and nonpaged allocations
> > that are leaking.
> > nonpaged allocations are in the upper half of this word,
> > paged allocations are in the lower half of this word.
> >
> > Debugging Details:
> > ------------------
> >
> >
> > DEFAULT_BUCKET_ID: DRIVER_FAULT
> >
> > BUGCHECK_STR: 0xAB
> >
> > CURRENT_IRQL: 0
> >
> > LAST_CONTROL_TRANSFER: from 8092ea6f to 80827451
> >
> > STACK_TEXT:
> > b72d4c24 8092ea6f 000000ab 00000007 00002e40
> > nt!KeBugCheckEx+0x1b b72d4c68 809ab017 8aa67aa8 8aa67aa8
> > 00000000 nt!MiCheckSessionPoolAllocations+0x107
> > b72d4ce8 8084c1a7 8aa67aa8 00000000 8a172398
> > nt!MiDereferenceSessionFinal+0x183
> > b72d4d04 8094b539 8aa67aa8 8a172398 8a1725d8
> > nt!MmCleanProcessAddressSpace+0x6b
> > b72d4d8c 8094b68d 00000000 00000000 8a172398
> > nt!PspExitThread+0x5f1 b72d4da4 80948bc0 8a172398 00000000
> > 00000001 nt!PspTerminateThreadByPointer+0x4b
> > b72d4ddc 8088d4d2 bf92b562 8a0abf30 00000000
> > nt!PspSystemThreadStartup+0x3c 00000000 00000000 00000000
> > 00000000 00000000 nt!KiThreadStartup+0x16
> >
> >
> > FOLLOWUP_IP:
> > nt!MiCheckSessionPoolAllocations+107
> > 8092ea6f 5f pop edi
> >
> > FOLLOWUP_NAME: MachineOwner
> >
> > SYMBOL_NAME: nt!MiCheckSessionPoolAllocations+107
> >
> > MODULE_NAME: nt
> >
> > IMAGE_NAME: ntkrpamp.exe
> >
> > DEBUG_FLR_IMAGE_TIMESTAMP: 42435b14
> >
> > STACK_COMMAND: kb
> >
> > BUCKET_ID: 0xAB_nt!MiCheckSessionPoolAllocations+107
> >
> > Followup: MachineOwner
> > ---------
> >
> > eax=f772f13c ebx=00002e40 ecx=00000000 edx=c0602f80 esi=f772f120
> > edi=c0602f78 eip=80827451 esp=b72d4c0c ebp=b72d4c24 iopl=0
> > nv up ei ng nz na po nc cs=0008 ss=0010 ds=0023 es=0023
> > fs=0030 gs=0000 efl=00000286 nt!KeBugCheckEx+1b:
> > 80827451 5d pop ebp
> > ChildEBP RetAddr Args to Child
> > b72d4c24 8092ea6f 000000ab 00000007 00002e40
> > nt!KeBugCheckEx+0x1b b72d4c68 809ab017 8aa67aa8 8aa67aa8
> > 00000000 nt!MiCheckSessionPoolAllocations+0x107
> > b72d4ce8 8084c1a7 8aa67aa8 00000000 8a172398
> > nt!MiDereferenceSessionFinal+0x183
> > b72d4d04 8094b539 8aa67aa8 8a172398 8a1725d8
> > nt!MmCleanProcessAddressSpace+0x6b
> > b72d4d8c 8094b68d 00000000 00000000 8a172398
> > nt!PspExitThread+0x5f1 b72d4da4 80948bc0 8a172398 00000000
> > 00000001 nt!PspTerminateThreadByPointer+0x4b
> > b72d4ddc 8088d4d2 bf92b562 8a0abf30 00000000
> > nt!PspSystemThreadStartup+0x3c 00000000 00000000 00000000
> > 00000000 00000000 nt!KiThreadStartup+0x16 start end
> > module name 80800000 80a53000 nt Timestamp: Fri Mar
> > 25 01:28:04 2005 (42435B14) Checksum: 0023D043
> > 80a53000 80a7f000 hal Timestamp: Fri Mar 25 01:28:37
> > 2005 (42435B35) Checksum: 0001FB39
> > b8c87000 b8cb2000 RDPWD Timestamp: Fri Mar 25 01:27:16
> > 2005 (42435AE4) Checksum: 0002FD6D
> > b8d02000 b8d19700 nvcoaft51 Timestamp: Wed Dec 01 11:55:40
> > 2004 (41ADA32C) Checksum: 000257A2
> > b8dc2000 b8dcd000 TDTCP Timestamp: Fri Mar 25 01:27:15
> > 2005 (42435AE3) Checksum: 000102E8
> > b9102000 b912c000 Fastfat Timestamp: Fri Mar 25 01:40:20
> > 2005 (42435DF4) Checksum: 0002934F
> > b9294000 b92f3000 srv Timestamp: Fri Mar 25 01:40:19
> > 2005 (42435DF3) Checksum: 0005C6BC
> > b95cf000 b95d22c0 ndiskio Timestamp: Tue May 13 11:38:13
> > 2003 (3EC0BD05) Checksum: 00007C02
> > b96b3000 b96c8000 Cdfs Timestamp: Fri Mar 25 01:40:55
> > 2005 (42435E17) Checksum: 0001AFD3
> > b96c8000 b96d9000 Fips Timestamp: Fri Mar 25 01:40:33
> > 2005 (42435E01) Checksum: 00015AC8
> > b96d9000 b974f000 mrxsmb Timestamp: Fri Mar 25 01:41:13
> > 2005 (42435E29) Checksum: 00074260
> > b9777000 b97a7000 rdbss Timestamp: Fri Mar 25 01:40:49
> > 2005 (42435E11) Checksum: 0002ED8F
> > b9847000 b9871000 afd Timestamp: Fri Mar 25 01:40:43
> > 2005 (42435E0B) Checksum: 00025408
> > b9871000 b98a2000 netbt Timestamp: Fri Mar 25 01:40:31
> > 2005 (42435DFF) Checksum: 0002C5B2
> > b98a2000 b9903000 tcpip Timestamp: Fri Mar 25 01:40:31
> > 2005 (42435DFF) Checksum: 0005606F
> > b9903000 b991c000 ipsec Timestamp: Fri Mar 25 01:40:49
> > 2005 (42435E11) Checksum: 00016439
> > b998c000 b99a0000 usbhub Timestamp: Fri Mar 25 01:30:46
> > 2005 (42435BB6) Checksum: 00013E34
> > b9b08000 b9b48000 update Timestamp: Fri Mar 25 01:40:27
> > 2005 (42435DFB) Checksum: 00042AB3
> > b9b70000 b9ba7000 rdpdr Timestamp: Fri Mar 25 01:30:20
> > 2005 (42435B9C) Checksum: 00037A18
> > b9bd2000 b9c28000 wlbs Timestamp: Fri Mar 25 01:40:15
> > 2005 (42435DEF) Checksum: 000317A6
> > b9c28000 b9c3b000 raspptp Timestamp: Fri Mar 25 01:40:43
> > 2005 (42435E0B) Checksum: 00012D1F
> > b9c3b000 b9c55000 ndiswan Timestamp: Fri Mar 25 01:40:46
> > 2005 (42435E0E) Checksum: 00024A0E
> > b9c55000 b9c6a000 rasl2tp Timestamp: Fri Mar 25 01:40:29
> > 2005 (42435DFD) Checksum: 00015B39
> > b9c6a000 b9c97700 q57xp32 Timestamp: Thu May 20 18:44:36
> > 2004 (40ACE074) Checksum: 0002E3AB
> > b9c98000 b9cc2000 USBPORT Timestamp: Fri Mar 25 01:30:43
> > 2005 (42435BB3) Checksum: 00023E74
> > b9cc2000 b9cea000 ks Timestamp: Fri Mar 25 01:41:03
> > 2005 (42435E1F) Checksum: 000250E7
> > b9cea000 b9cfe000 redbook Timestamp: Fri Mar 25 01:28:46
> > 2005 (42435B3E) Checksum: 000165A1
> > b9cfe000 b9d13000 cdrom Timestamp: Fri Mar 25 01:28:57
> > 2005 (42435B49) Checksum: 0000FC12
> > b9d13000 b9d28000 serial Timestamp: Fri Mar 25 01:28:29
> > 2005 (42435B2D) Checksum: 0001EEE6
> > b9d28000 b9d3b000 i8042prt Timestamp: Fri Mar 25 01:41:05
> > 2005 (42435E21) Checksum: 0001C2D6
> > b9d3b000 b9d85000 cpqasm2 Timestamp: Tue Oct 14 01:38:14
> > 2003 (3F8B3766) Checksum: 00050676
> > b9d85000 b9da0000 VIDEOPRT Timestamp: Fri Mar 25 01:29:53
> > 2005 (42435B81) Checksum: 0001BC4D
> > b9da0000 b9df3d80 ati2mpad Timestamp: Fri Jul 19 03:13:20
> > 2002 (3D3767B0) Checksum: 0006029D
> > b9df7000 b9df7e00 nvcfsr Timestamp: Fri Nov 05 09:47:02
> > 2004 (418B3E06) Checksum: 00003087
> > ba10d000 ba116000 mssmbios Timestamp: Fri Mar 25 01:34:14
> > 2005 (42435C86) Checksum: 0000E2D1
> > ba11d000 ba12c000 termdd Timestamp: Fri Mar 25 01:27:15
> > 2005 (42435AE3) Checksum: 00014808
> > ba12d000 ba136000 raspti Timestamp: Fri Mar 25 01:34:16
> > 2005 (42435C88) Checksum: 0000D117
> > ba13d000 ba148000 ptilink Timestamp: Fri Mar 25 01:28:25
> > 2005 (42435B29) Checksum: 0000DEA4
> > ba14d000 ba158000 TDI Timestamp: Fri Mar 25 01:35:34
> > 2005 (42435CD6) Checksum: 00014D93
> > ba15d000 ba16c000 raspppoe Timestamp: Fri Mar 25 01:34:16
> > 2005 (42435C88) Checksum: 00015D34
> > ba16d000 ba176000 ndistapi Timestamp: Fri Mar 25 01:34:11
> > 2005 (42435C83) Checksum: 0000C04E
> > ba17d000 ba18bf80 CPQCISSE Timestamp: Mon Aug 04 21:57:42
> > 2003 (3F2EBAB6) Checksum: 0000FBA6
> > ba18d000 ba198000 fdc Timestamp: Fri Mar 25 01:28:43
> > 2005 (42435B3B) Checksum: 00009E2F
> > bf800000 bf9cf000 win32k Timestamp: Fri Mar 25 01:40:09
> > 2005 (42435DE9) Checksum: 001C9EE0
> > bf9cf000 bf9e5000 dxg Timestamp: Fri Mar 25 01:27:25
> > 2005 (42435AED) Checksum: 00017464
> > bf9e5000 bfa3b680 ati2drad Timestamp: Fri Mar 25 03:30:34
> > 2005 (424377CA) Checksum: 000572D8
> > bff60000 bff7e000 RDPDD Timestamp: Fri Mar 25 03:30:48
> > 2005 (424377D8) Checksum: 0001FF64
> > bffa0000 bffea000 ATMFD Timestamp: Fri Mar 25 03:30:36
> > 2005 (424377CC) Checksum: 00047B1F
> > f7014000 f701e000 serenum Timestamp: Fri Mar 25 01:28:27
> > 2005 (42435B2B) Checksum: 0000EFB0
> > f7024000 f702d000 watchdog Timestamp: Fri Mar 25 01:30:19
> > 2005 (42435B9B) Checksum: 0000F8F5
> > f7044000 f7051000 wanarp Timestamp: Fri Mar 25 01:34:07
> > 2005 (42435C7F) Checksum: 00016188
> > f7088000 f708bd40 dump_cpqcissm Timestamp: Mon Aug 18
> > 20:54:24 2003 (3F4120E0) Checksum: 00004C54
> > f710c000 f7126000 CPQPHP Timestamp: Fri Aug 29 00:23:13
> > 2003 (3F4E80D1) Checksum: 000183ED
> > f7126000 f7145000 Mup Timestamp: Fri Mar 25 01:40:49
> > 2005 (42435E11) Checksum: 00022806
> > f7145000 f717b000 NDIS Timestamp: Fri Mar 25 01:40:26
> > 2005 (42435DFA) Checksum: 00036E14
> > f717b000 f7210000 Ntfs Timestamp: Fri Mar 25 01:40:29
> > 2005 (42435DFD) Checksum: 0009D398
> > f7210000 f7237000 KSecDD Timestamp: Fri Mar 25 01:28:53
> > 2005 (42435B45) Checksum: 0002E4A7
> > f7237000 f725c000 fltmgr Timestamp: Fri Mar 25 01:30:25
> > 2005 (42435BA1) Checksum: 000221C6
> > f725c000 f726f000 CLASSPNP Timestamp: Fri Mar 25 01:40:23
> > 2005 (42435DF7) Checksum: 000138A3
> > f726f000 f7283e80 adpu160m Timestamp: Fri Jun 21 04:02:53
> > 2002 (3D12894D) Checksum: 00017A0D
> > f7284000 f72a0000 atapi Timestamp: Fri Mar 25 01:28:49
> > 2005 (42435B41) Checksum: 0001970F
> > f72a0000 f72bf000 SCSIPORT Timestamp: Fri Mar 25 01:40:26
> > 2005 (42435DFA) Checksum: 00022852
> > f72bf000 f72e9000 volsnap Timestamp: Fri Mar 25 01:29:10
> > 2005 (42435B56) Checksum: 00034973
> > f72e9000 f7315000 dmio Timestamp: Fri Mar 25 01:30:02

From: Vera Noest [MVP] on 28 May 2005 09:33

Enterprise Edition should not need the /PAE switch with 4 GB, only
when you have more then 4 GB.
Can you test if this also occurs when you boot without the /PAE
switch (and thus don't load the ntkrpamp.exe but the standard
ntoskrnl.exe)?

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---

"=?Utf-8?B?S3VydA==?=" <Kurt(a)discussions.microsoft.com> wrote on
28 maj 2005 in microsoft.public.windows.terminal_services:

> Yes, with PAE
> 4 GB RAM
>
> Kurt
>
>
> "Vera Noest [MVP]" wrote:
>
>> So you are booting with the /PAE switch?
>> How much RAM does this server have?
>>
>> --
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> http://hem.fyristorg.com/vera/IT
>> --- please respond in newsgroup, NOT by private email ---
>>
>> "=?Utf-8?B?S3VydA==?=" <Kurt(a)discussions.microsoft.com> wrote
>> on 27 maj 2005 in microsoft.public.windows.terminal_services:
>>
>> > After installing SP1 on my 2 Windows 2003 Server Enterprise
>> > Edition, running terminal services in App Mode, they have
>> > both stopped and rebooted several times. In 8 weeks time
>> > there has been 4-5 such incidents per server.
>> >
>> > In the system event log:
>> >
>> > Event ID: 1001
>> >
>> > The computer has rebooted from a bugcheck. The bugcheck was:
>> > 0x000000ab (0x00000007, 0x00002e40, 0x00000000, 0x00000084).
>> > A dump was saved in: C:\WINDOWS\MEMORY.DMP.
>> >
>> > Event ID: 1003
>> >
>> > Error code 000000ab, parameter1 00000007, parameter2
>> > 00002e40, parameter3 00000000, parameter4 00000084.
>> >
>> > From Windbg:
>> >
>> > Microsoft (R) Windows Debugger Version 6.1.0017.2
>> > Copyright (c) Microsoft Corporation. All rights reserved.
>> >
>> >
>> > Loading Dump File [C:\WINDOWS\MEMORY.DMP]
>> > Kernel Summary Dump File: Only kernel address space is
>> > available
>> >
>> > Symbol search path is:
>> > SRV*c:\debug*http://msdl.microsoft.com/download/symbols
>> > Executable search path is: Windows Server 2003 Kernel Version
>> > 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
>> > Product: Server, suite: Enterprise TerminalServer
>> > Built by: 3790.srv03_sp1_rtm.050324-1447
>> > Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
>> > Debug session time: Thu May 26 13:16:13 2005
>> > System Uptime: 8 days 3:32:08.381
>> > Loading Kernel Symbols
>> > ..............................................................
>> > ... .....................................................
>> > Loading unloaded module list ....
>> > Loading User Symbols
>> > PEB is paged out (Peb = 7ffde00c). Type ".hh dbgerr001" for
>> > details
>> > **************************************************************
>> > *** ************** *
>> >
>> >
>> > *
>> > * Bugcheck Analysis
>> >
>> >
>> > *
>> > *
>> >
>> >
>> > *
>> > **************************************************************
>> > *** **************
>> >
>> > Use !analyze -v to get detailed debugging information.
>> >
>> > BugCheck AB, {7, 2e40, 0, 84}
>> >
>> > Probably caused by : ntkrpamp.exe (
>> > nt!MiCheckSessionPoolAllocations+107 )
>> >
>> > Followup: MachineOwner
>> > ---------
>> >
>> > 2: kd> !analyze -v;r;kv;lmtn;
>> > **************************************************************
>> > *** ************** *
>> >
>> >
>> > *
>> > * Bugcheck Analysis
>> >
>> >
>> > *
>> > *
>> >
>> >
>> > *
>> > **************************************************************
>> > *** **************
>> >
>> > SESSION_HAS_VALID_POOL_ON_EXIT (ab)
>> > Caused by a session driver not freeing its pool allocations
>> > prior to a session unload. This indicates a bug in
>> > win32k.sys, atmfd.dll, rdpdd.dll or a video driver.
>> > Arguments:
>> > Arg1: 00000007, session ID
>> > Arg2: 00002e40, number of paged pool bytes that are leaking
>> > Arg3: 00000000, number of nonpaged pool bytes that are
>> > leaking Arg4: 00000084, total number of paged and nonpaged
>> > allocations that are leaking.
>> > nonpaged allocations are in the upper half of this word,
>> > paged allocations are in the lower half of this word.
>> >
>> > Debugging Details:
>> > ------------------
>> >
>> >
>> > DEFAULT_BUCKET_ID: DRIVER_FAULT
>> >
>> > BUGCHECK_STR: 0xAB
>> >
>> > CURRENT_IRQL: 0
>> >
>> > LAST_CONTROL_TRANSFER: from 8092ea6f to 80827451
>> >
>> > STACK_TEXT:
>> > b72d4c24 8092ea6f 000000ab 00000007 00002e40
>> > nt!KeBugCheckEx+0x1b b72d4c68 809ab017 8aa67aa8 8aa67aa8
>> > 00000000 nt!MiCheckSessionPoolAllocations+0x107
>> > b72d4ce8 8084c1a7 8aa67aa8 00000000 8a172398
>> > nt!MiDereferenceSessionFinal+0x183
>> > b72d4d04 8094b539 8aa67aa8 8a172398 8a1725d8
>> > nt!MmCleanProcessAddressSpace+0x6b
>> > b72d4d8c 8094b68d 00000000 00000000 8a172398
>> > nt!PspExitThread+0x5f1 b72d4da4 80948bc0 8a172398 00000000
>> > 00000001 nt!PspTerminateThreadByPointer+0x4b
>> > b72d4ddc 8088d4d2 bf92b562 8a0abf30 00000000
>> > nt!PspSystemThreadStartup+0x3c 00000000 00000000 00000000
>> > 00000000 00000000 nt!KiThreadStartup+0x16
>> >
>> >
>> > FOLLOWUP_IP:
>> > nt!MiCheckSessionPoolAllocations+107
>> > 8092ea6f 5f pop edi
>> >
>> > FOLLOWUP_NAME: MachineOwner
>> >
>> > SYMBOL_NAME: nt!MiCheckSessionPoolAllocations+107
>> >
>> > MODULE_NAME: nt
>> >
>> > IMAGE_NAME: ntkrpamp.exe
>> >
>> > DEBUG_FLR_IMAGE_TIMESTAMP: 42435b14
>> >
>> > STACK_COMMAND: kb
>> >
>> > BUCKET_ID: 0xAB_nt!MiCheckSessionPoolAllocations+107
>> >
>> > Followup: MachineOwner
>> > ---------
>> >
>> > eax=f772f13c ebx=00002e40 ecx=00000000 edx=c0602f80
>> > esi=f772f120 edi=c0602f78 eip=80827451 esp=b72d4c0c
>> > ebp=b72d4c24 iopl=0
>> > nv up ei ng nz na po nc cs=0008 ss=0010 ds=0023 es=0023
>> > fs=0030 gs=0000 efl=00000286 nt!KeBugCheckEx+1b:
>> > 80827451 5d pop ebp
>> > ChildEBP RetAddr Args to Child
>> > b72d4c24 8092ea6f 000000ab 00000007 00002e40
>> > nt!KeBugCheckEx+0x1b b72d4c68 809ab017 8aa67aa8 8aa67aa8
>> > 00000000 nt!MiCheckSessionPoolAllocations+0x107
>> > b72d4ce8 8084c1a7 8aa67aa8 00000000 8a172398
>> > nt!MiDereferenceSessionFinal+0x183
>> > b72d4d04 8094b539 8aa67aa8 8a172398 8a1725d8
>> > nt!MmCleanProcessAddressSpace+0x6b
>> > b72d4d8c 8094b68d 00000000 00000000 8a172398
>> > nt!PspExitThread+0x5f1 b72d4da4 80948bc0 8a172398 00000000
>> > 00000001 nt!PspTerminateThreadByPointer+0x4b
>> > b72d4ddc 8088d4d2 bf92b562 8a0abf30 00000000
>> > nt!PspSystemThreadStartup+0x3c 00000000 00000000 00000000
>> > 00000000 00000000 nt!KiThreadStartup+0x16 start end
>> > module name 80800000 80a53000 nt Timestamp: Fri
>> > Mar 25 01:28:04 2005 (42435B14) Checksum: 0023D043
>> > 80a53000 80a7f000 hal Timestamp: Fri Mar 25
>> > 01:28:37 2005 (42435B35) Checksum: 0001FB39
>> > b8c87000 b8cb2000 RDPWD Timestamp: Fri Mar 25
>> > 01:27:16 2005 (42435AE4) Checksum: 0002FD6D
>> > b8d02000 b8d19700 nvcoaft51 Timestamp: Wed Dec 01
>> > 11:55:40 2004 (41ADA32C) Checksum: 000257A2
>> > b8dc2000 b8dcd000 TDTCP Timestamp: Fri Mar 25
>> > 01:27:15 2005 (42435AE3) Checksum: 000102E8
>> > b9102000 b912c000 Fastfat Timestamp: Fri Mar 25
>> > 01:40:20 2005 (42435DF4) Checksum: 0002934F
>> > b9294000 b92f3000 srv Timestamp: Fri Mar 25
>> > 01:40:19 2005 (42435DF3) Checksum: 0005C6BC
>> > b95cf000 b95d22c0 ndiskio Timestamp: Tue May 13
>> > 11:38:13 2003 (3EC0BD05) Checksum: 00007C02
>> > b96b3000 b96c8000 Cdfs Timestamp: Fri Mar 25
>> > 01:40:55 2005 (42435E17) Checksum: 0001AFD3
>> > b96c8000 b96d9000 Fips Timestamp: Fri Mar 25
>> > 01:40:33 2005 (42435E01) Checksum: 00015AC8
>> > b96d9000 b974f000 mrxsmb Timestamp: Fri Mar 25
>> > 01:41:13 2005 (42435E29) Checksum: 00074260
>> > b9777000 b97a7000 rdbss Timestamp: Fri Mar 25
>> > 01:40:49 2005 (42435E11) Checksum: 0002ED8F
>> > b9847000 b9871000 afd Timestamp: Fri Mar 25
>> > 01:40:43 2005 (42435E0B) Checksum: 00025408
>> > b9871000 b98a2000 netbt Timestamp: Fri Mar 25
>> > 01:40:31 2005 (42435DFF) Checksum: 0002C5B2
>> > b98a2000 b9903000 tcpip Timestamp: Fri Mar 25
>> > 01:40:31 2005 (42435DFF) Checksum: 0005606F
>> > b9903000 b991c000 ipsec Timestamp: Fri Mar 25
>> > 01:40:49 2005 (42435E11) Checksum: 00016439
>> > b998c000 b99a0000 usbhub Timestamp: Fri Mar 25
>> > 01:30:46 2005 (42435BB6) Checksum: 00013E34
>> > b9b08000 b9b48000 update Timestamp: Fri Mar 25
>> > 01:40:27 2005 (42435DFB) Checksum: 00042AB3
>> > b9b70000 b9ba7000 rdpdr Timestamp: Fri Mar 25
>> > 01:30:20 2005 (42435B9C) Checksum: 00037A18
>> > b9bd2000 b9c28000 wlbs Timestamp: Fri Mar 25
>> > 01:40:15 2005 (42435DEF) Checksum: 000317A6
>> > b9c28000 b9c3b000 raspptp Timestamp: Fri Mar 25
>> > 01:40:43 2005 (42435E0B) Checksum: 00012D1F
>> > b9c3b000 b9c55000 ndiswan Timestamp: Fri Mar 25
>> > 01:40:46 2005 (42435E0E) Checksum: 00024A0E
>> > b9c55000 b9c6a000 rasl2tp Timestamp: Fri Mar 25
>> > 01:40:29 2005 (42435DFD) Checksum: 00015B39
>> > b9c6a000 b9c97700 q57xp32 Timestamp: Thu May 20
>> > 18:44:36 2004 (40ACE074) Checksum: 0002E3AB
>> > b9c98000 b9cc2000 USBPORT Timestamp: Fri Mar 25
>> > 01:30:43 2005 (42435BB3) Checksum: 00023E74
>> > b9cc2000 b9cea000 ks Timestamp: Fri Mar 25
>> > 01:41:03 2005 (42435E1F) Checksum: 000250E7
>> > b9cea000 b9cfe000 redbook Timestamp: Fri Mar 25
>> > 01:28:46 2005 (42435B3E) Checksum: 000165A1
>> > b9cfe000 b9d13000 cdrom Timestamp: Fri Mar 25
>> > 01:28:57 2005 (42435B49) Checksum: 0000FC12
>> > b9d13000 b9d28000 serial Timestamp: Fri Mar 25
>> > 01:28:29 2005 (42435B2D) Checksum: 0001EEE6
>> > b9d28000 b9d3b000 i8042prt Timestamp: Fri Mar 25
>> > 01:41:05 2005 (42435E21) Checksum: 0001C2D6
>> > b9d3b000 b9d85000 cpqasm2 Timestamp: Tue Oct 14
>> > 01:38:14 2003 (3F8B3766) Checksum: 00050676
>> > b9d85000 b9da0000 VIDEOPRT Timestamp: Fri Mar 25
>> > 01:29:53 2005 (42435B81) Checksum: 0001BC4D
>> > b9da0000 b9df3d80 ati2mpad Timestamp: Fri Jul 19
>> > 03:13:20 2002 (3D3767B0) Checksum: 0006029D
>> > b9df7000 b9df7e00 nvcfsr Timestamp: Fri Nov 05
>> > 09:47:02 2004 (418B3E06) Checksum: 00003087
>> > ba10d000 ba116000 mssmbios Timestamp: Fri Mar 25
>> > 01:34:14 2005 (42435C86) Checksum: 0000E2D1
>> > ba11d000 ba12c000 termdd Timestamp: Fri Mar 25
>> > 01:27:15 2005 (42435AE3) Checksum: 00014808
>> > ba12d000 ba136000 raspti Timestamp: Fri Mar 25
>> > 01:34:16 2005 (42435C88) Checksum: 0000D117
>> > ba13d000 ba148000 ptilink Timestamp: Fri Mar 25
>> > 01:28:25 2005 (42435B29) Checksum: 0000DEA4
>> > ba14d000 ba158000 TDI Timestamp: Fri Mar 25
>> > 01:35:34 2005 (42435CD6) Checksum: 00014D93
>> > ba15d000 ba16c000 raspppoe Timestamp: Fri Mar 25
>> > 01:34:16 2005 (42435C88) Checksum: 00015D34
>> > ba16d000 ba176000 ndistapi Timestamp: Fri Mar 25
>> > 01:34:11 2005 (42435C83) Checksum: 0000C04E
>> > ba17d000 ba18bf80 CPQCISSE Timestamp: Mon Aug 04
>> > 21:57:42 2003 (3F2EBAB6) Checksum: 0000FBA6
>> > ba18d000 ba198000 fdc Timestamp: Fri Mar 25
>> > 01:28:43 2005 (42435B3B) Checksum: 00009E2F
>> > bf800000 bf9cf000 win32k Timestamp: Fri Mar 25
>> > 01:40:09 2005 (42435DE9) Checksum: 001C9EE0
>> > bf9cf000 bf9e5000 dxg Timestamp: Fri Mar 25
>> > 01:27:25 2005 (42435AED) Checksum: 00017464
>> > bf9e5000 bfa3b680 ati2drad Timestamp: Fri Mar 25
>> > 03:30:34 2005 (424377CA) Checksum: 000572D8
>> > bff60000 bff7e000 RDPDD Timestamp: Fri Mar 25
>> > 03:30:48 2005 (424377D8) Checksum: 0001FF64
>> > bffa0000 bffea000 ATMFD Timestamp: Fri Mar 25
>> > 03:30:36 2005 (424377CC) Checksum: 00047B1F
>> > f7014000 f701e000 serenum Timestamp: Fri Mar 25
>> > 01:28:27 2005 (42435B2B) Checksum: 0000EFB0
>> > f7024000 f702d000 watchdog Timestamp: Fri Mar 25
>> > 01:30:19 2005 (42435B9B) Checksum: 0000F8F5
>> > f7044000 f7051000 wanarp Timestamp: Fri Mar 25
>> > 01:34:07 2005 (42435C7F) Checksum: 00016188
>> > f7088000 f708bd40 dump_cpqcissm Timestamp: Mon Aug 18
>> > 20:54:24 2003 (3F4120E0) Checksum: 00004C54
>> > f710c000 f7126000 CPQPHP Timestamp: Fri Aug 29
>> > 00:23:13 2003 (3F4E80D1) Checksum: 000183ED
>> > f7126000 f7145000 Mup Timestamp: Fri Mar 25
>> > 01:40:49 2005 (42435E11) Checksum: 00022806
>> > f7145000 f717b000 NDIS Timestamp: Fri Mar 25
>> > 01:40:26 2005 (42435DFA) Checksum: 00036E14
>> > f717b000 f7210000 Ntfs Timestamp: Fri Mar 25
>> > 01:40:29 2005 (42435DFD) Checksum: 0009D398
>> > f7210000 f7237000 KSecDD Timestamp: Fri Mar 25
>> > 01:28:53 2005 (42435B45) Checksum: 0002E4A7
>> > f7237000 f725c000 fltmgr Timestamp: Fri Mar 25
>> > 01:30:25 2005 (42435BA1) Checksum: 000221C6
>> > f725c000 f726f000 CLASSPNP Timestamp: Fri Mar 25
>> > 01:40:23 2005 (42435DF7) Checksum: 000138A3
>> > f726f000 f7283e80 adpu160m Timestamp: Fri Jun 21
>> > 04:02:53 2002 (3D12894D) Checksum: 00017A0D
>> > f7284000 f72a0000 atapi Timestamp: Fri Mar 25
>> > 01:28:49 2005 (42435B41) Checksum: 0001970F
>> > f72a0000 f72bf000 SCSIPORT Timestamp: Fri Mar 25
>> > 01:40:26 2005 (42435DFA) Checksum: 00022852
>> > f72bf000 f72e9000 volsnap Timestamp: Fri Mar 25
>> > 01:29:10 2005 (42435B56) Checksum: 00034973
>> > f72e9000 f7315000 dmio Timestamp: Fri Mar 25
>> > 01:30:02

From: Kurt on 31 May 2005 03:33

PAE is off no. I'll let you know in two weeks time...

There are 2 postings in this group that, to me, looks like a similar problem
to mine:

Devlin7; Windows 2003 SP1; 4/7/2005
Matthew Chapman; Windows 2003 SP1 TS bluescreens; 5/3/2005

Could it be the same cause, or is it just similar effects from different
causes?

Thanks.

"Vera Noest [MVP]" wrote:

> Enterprise Edition should not need the /PAE switch with 4 GB, only
> when you have more then 4 GB.
> Can you test if this also occurs when you boot without the /PAE
> switch (and thus don't load the ntkrpamp.exe but the standard
> ntoskrnl.exe)?
>
> --
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> http://hem.fyristorg.com/vera/IT
> --- please respond in newsgroup, NOT by private email ---
>
> "=?Utf-8?B?S3VydA==?=" <Kurt(a)discussions.microsoft.com> wrote on
> 28 maj 2005 in microsoft.public.windows.terminal_services:
>
> > Yes, with PAE
> > 4 GB RAM
> >
> > Kurt
> >
> >
> > "Vera Noest [MVP]" wrote:
> >
> >> So you are booting with the /PAE switch?
> >> How much RAM does this server have?
> >>
> >> --
> >> Vera Noest
> >> MCSE, CCEA, Microsoft MVP - Terminal Server
> >> http://hem.fyristorg.com/vera/IT
> >> --- please respond in newsgroup, NOT by private email ---
> >>
> >> "=?Utf-8?B?S3VydA==?=" <Kurt(a)discussions.microsoft.com> wrote
> >> on 27 maj 2005 in microsoft.public.windows.terminal_services:
> >>
> >> > After installing SP1 on my 2 Windows 2003 Server Enterprise
> >> > Edition, running terminal services in App Mode, they have
> >> > both stopped and rebooted several times. In 8 weeks time
> >> > there has been 4-5 such incidents per server.
> >> >
> >> > In the system event log:
> >> >
> >> > Event ID: 1001
> >> >
> >> > The computer has rebooted from a bugcheck. The bugcheck was:
> >> > 0x000000ab (0x00000007, 0x00002e40, 0x00000000, 0x00000084).
> >> > A dump was saved in: C:\WINDOWS\MEMORY.DMP.
> >> >
> >> > Event ID: 1003
> >> >
> >> > Error code 000000ab, parameter1 00000007, parameter2
> >> > 00002e40, parameter3 00000000, parameter4 00000084.
> >> >
> >> > From Windbg:
> >> >
> >> > Microsoft (R) Windows Debugger Version 6.1.0017.2
> >> > Copyright (c) Microsoft Corporation. All rights reserved.
> >> >
> >> >
> >> > Loading Dump File [C:\WINDOWS\MEMORY.DMP]
> >> > Kernel Summary Dump File: Only kernel address space is
> >> > available
> >> >
> >> > Symbol search path is:
> >> > SRV*c:\debug*http://msdl.microsoft.com/download/symbols
> >> > Executable search path is: Windows Server 2003 Kernel Version
> >> > 3790 (Service Pack 1) MP (4 procs) Free x86 compatible
> >> > Product: Server, suite: Enterprise TerminalServer
> >> > Built by: 3790.srv03_sp1_rtm.050324-1447
> >> > Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
> >> > Debug session time: Thu May 26 13:16:13 2005
> >> > System Uptime: 8 days 3:32:08.381
> >> > Loading Kernel Symbols
> >> > ..............................................................
> >> > ... .....................................................
> >> > Loading unloaded module list ....
> >> > Loading User Symbols
> >> > PEB is paged out (Peb = 7ffde00c). Type ".hh dbgerr001" for
> >> > details
> >> > **************************************************************
> >> > *** ************** *
> >> >
> >> >
> >> > *
> >> > * Bugcheck Analysis
> >> >
> >> >
> >> > *
> >> > *
> >> >
> >> >
> >> > *
> >> > **************************************************************
> >> > *** **************
> >> >
> >> > Use !analyze -v to get detailed debugging information.
> >> >
> >> > BugCheck AB, {7, 2e40, 0, 84}
> >> >
> >> > Probably caused by : ntkrpamp.exe (
> >> > nt!MiCheckSessionPoolAllocations+107 )
> >> >
> >> > Followup: MachineOwner
> >> > ---------
> >> >
> >> > 2: kd> !analyze -v;r;kv;lmtn;
> >> > **************************************************************
> >> > *** ************** *
> >> >
> >> >
> >> > *
> >> > * Bugcheck Analysis
> >> >
> >> >
> >> > *
> >> > *
> >> >
> >> >
> >> > *
> >> > **************************************************************
> >> > *** **************
> >> >
> >> > SESSION_HAS_VALID_POOL_ON_EXIT (ab)
> >> > Caused by a session driver not freeing its pool allocations
> >> > prior to a session unload. This indicates a bug in
> >> > win32k.sys, atmfd.dll, rdpdd.dll or a video driver.
> >> > Arguments:
> >> > Arg1: 00000007, session ID
> >> > Arg2: 00002e40, number of paged pool bytes that are leaking
> >> > Arg3: 00000000, number of nonpaged pool bytes that are
> >> > leaking Arg4: 00000084, total number of paged and nonpaged
> >> > allocations that are leaking.
> >> > nonpaged allocations are in the upper half of this word,
> >> > paged allocations are in the lower half of this word.
> >> >
> >> > Debugging Details:
> >> > ------------------
> >> >
> >> >
> >> > DEFAULT_BUCKET_ID: DRIVER_FAULT
> >> >
> >> > BUGCHECK_STR: 0xAB
> >> >
> >> > CURRENT_IRQL: 0
> >> >
> >> > LAST_CONTROL_TRANSFER: from 8092ea6f to 80827451
> >> >
> >> > STACK_TEXT:
> >> > b72d4c24 8092ea6f 000000ab 00000007 00002e40
> >> > nt!KeBugCheckEx+0x1b b72d4c68 809ab017 8aa67aa8 8aa67aa8
> >> > 00000000 nt!MiCheckSessionPoolAllocations+0x107
> >> > b72d4ce8 8084c1a7 8aa67aa8 00000000 8a172398
> >> > nt!MiDereferenceSessionFinal+0x183
> >> > b72d4d04 8094b539 8aa67aa8 8a172398 8a1725d8
> >> > nt!MmCleanProcessAddressSpace+0x6b
> >> > b72d4d8c 8094b68d 00000000 00000000 8a172398
> >> > nt!PspExitThread+0x5f1 b72d4da4 80948bc0 8a172398 00000000
> >> > 00000001 nt!PspTerminateThreadByPointer+0x4b
> >> > b72d4ddc 8088d4d2 bf92b562 8a0abf30 00000000
> >> > nt!PspSystemThreadStartup+0x3c 00000000 00000000 00000000
> >> > 00000000 00000000 nt!KiThreadStartup+0x16
> >> >
> >> >
> >> > FOLLOWUP_IP:
> >> > nt!MiCheckSessionPoolAllocations+107
> >> > 8092ea6f 5f pop edi
> >> >
> >> > FOLLOWUP_NAME: MachineOwner
> >> >
> >> > SYMBOL_NAME: nt!MiCheckSessionPoolAllocations+107
> >> >
> >> > MODULE_NAME: nt
> >> >
> >> > IMAGE_NAME: ntkrpamp.exe
> >> >
> >> > DEBUG_FLR_IMAGE_TIMESTAMP: 42435b14
> >> >
> >> > STACK_COMMAND: kb
> >> >
> >> > BUCKET_ID: 0xAB_nt!MiCheckSessionPoolAllocations+107
> >> >
> >> > Followup: MachineOwner
> >> > ---------
> >> >
> >> > eax=f772f13c ebx=00002e40 ecx=00000000 edx=c0602f80
> >> > esi=f772f120 edi=c0602f78 eip=80827451 esp=b72d4c0c
> >> > ebp=b72d4c24 iopl=0
> >> > nv up ei ng nz na po nc cs=0008 ss=0010 ds=0023 es=0023
> >> > fs=0030 gs=0000 efl=00000286 nt!KeBugCheckEx+1b:
> >> > 80827451 5d pop ebp
> >> > ChildEBP RetAddr Args to Child
> >> > b72d4c24 8092ea6f 000000ab 00000007 00002e40
> >> > nt!KeBugCheckEx+0x1b b72d4c68 809ab017 8aa67aa8 8aa67aa8
> >> > 00000000 nt!MiCheckSessionPoolAllocations+0x107
> >> > b72d4ce8 8084c1a7 8aa67aa8 00000000 8a172398
> >> > nt!MiDereferenceSessionFinal+0x183
> >> > b72d4d04 8094b539 8aa67aa8 8a172398 8a1725d8
> >> > nt!MmCleanProcessAddressSpace+0x6b
> >> > b72d4d8c 8094b68d 00000000 00000000 8a172398
> >> > nt!PspExitThread+0x5f1 b72d4da4 80948bc0 8a172398 00000000
> >> > 00000001 nt!PspTerminateThreadByPointer+0x4b
> >> > b72d4ddc 8088d4d2 bf92b562 8a0abf30 00000000
> >> > nt!PspSystemThreadStartup+0x3c 00000000 00000000 00000000
> >> > 00000000 00000000 nt!KiThreadStartup+0x16 start end
> >> > module name 80800000 80a53000 nt Timestamp: Fri
> >> > Mar 25 01:28:04 2005 (42435B14) Checksum: 0023D043
> >> > 80a53000 80a7f000 hal Timestamp: Fri Mar 25
> >> > 01:28:37 2005 (42435B35) Checksum: 0001FB39
> >> > b8c87000 b8cb2000 RDPWD Timestamp: Fri Mar 25
> >> > 01:27:16 2005 (42435AE4) Checksum: 0002FD6D
> >> > b8d02000 b8d19700 nvcoaft51 Timestamp: Wed Dec 01
> >> > 11:55:40 2004 (41ADA32C) Checksum: 000257A2
> >> > b8dc2000 b8dcd000 TDTCP Timestamp: Fri Mar 25
> >> > 01:27:15 2005 (42435AE3) Checksum: 000102E8
> >> > b9102000 b912c000 Fastfat Timestamp: Fri Mar 25
> >> > 01:40:20 2005 (42435DF4) Checksum: 0002934F
> >> > b9294000 b92f3000 srv Timestamp: Fri Mar 25
> >> > 01:40:19 2005 (42435DF3) Checksum: 0005C6BC
> >> > b95cf000 b95d22c0 ndiskio Timestamp: Tue May 13
> >> > 11:38:13 2003 (3EC0BD05) Checksum: 00007C02
> >> > b96b3000 b96c8000 Cdfs Timestamp: Fri Mar 25
> >> > 01:40:55 2005 (42435E17) Checksum: 0001AFD3
> >> > b96c8000 b96d9000 Fips Timestamp: Fri Mar 25
> >> > 01:40:33 2005 (42435E01) Checksum: 00015AC8
> >> > b96d9000 b974f000 mrxsmb Timestamp: Fri Mar 25
> >> > 01:41:13 2005 (42435E29) Checksum: 00074260
> >> > b9777000 b97a7000 rdbss Timestamp: Fri Mar 25
> >> > 01:40:49 2005 (42435E11) Checksum: 0002ED8F
> >> > b9847000 b9871000 afd Timestamp: Fri Mar 25
> >> > 01:40:43 2005 (42435E0B) Checksum: 00025408
> >> > b9871000 b98a2000 netbt Timestamp: Fri Mar 25
> >> > 01:40:31 2005 (42435DFF) Checksum: 0002C5B2
> >> > b98a2000 b9903000 tcpip Timestamp: Fri Mar 25
> >> > 01:40:31 2005 (42435DFF) Checksum: 0005606F
> >> > b9903000 b991c000 ipsec Timestamp: Fri Mar 25
> >> > 01:40:49 2005 (42435E11) Checksum: 00016439
> >> > b998c000 b99a0000 usbhub Timestamp: Fri Mar 25
> >> > 01:30:46 2005 (42435BB6) Checksum: 00013E34
> >> > b9b08000 b9b48000 update Timestamp: Fri Mar 25
> >> > 01:40:27 2005 (42435DFB) Checksum: 00042AB3
> >> > b9b70000 b9ba7000 rdpdr Timestamp: Fri Mar 25
> >> > 01:30:20 2005 (42435B9C) Checksum: 00037A18
> >> > b9bd2000 b9c28000 wlbs Timestamp: Fri Mar 25
> >> > 01:40:15 2005 (42435DEF) Checksum: 000317A6
> >> > b9c28000 b9c3b000 raspptp Timestamp: Fri Mar 25
> >> > 01:40:43 2005 (42435E0B) Checksum: 00012D1F
> >> > b9c3b000 b9c55000 ndiswan Timestamp: Fri Mar 25
> >> > 01:40:46 2005 (42435E0E) Checksum: 00024A0E
> >> > b9c55000 b9c6a000 rasl2tp Timestamp: Fri Mar 25
> >> > 01:40:29 2005 (42435DFD) Checksum: 00015B39
> >> > b9c6a000 b9c97700 q57xp32 Timestamp: Thu May 20
> >> > 18:44:36 2004 (40ACE074) Checksum: 0002E3AB
> >> > b9c98000 b9cc2000 USBPORT Timestamp: Fri Mar 25
> >> > 01:30:43 2005 (42435BB3) Checksum: 00023E74
> >> > b9cc2000 b9cea000 ks Timestamp: Fri Mar 25
> >> > 01:41:03 2005 (42435E1F) Checksum: 000250E7
> >> > b9cea000 b9cfe000 redbook Timestamp: Fri Mar 25
> >> > 01:28:46 2005 (42435B3E) Checksum: 000165A1
> >> > b9cfe000 b9d13000 cdrom Timestamp: Fri Mar 25
> >> > 01:28:57 2005 (42435B49) Checksum: 0000FC12
> >> > b9d13000 b9d28000 serial Timestamp: Fri Mar 25
> >> > 01:28:29 2005 (42435B2D) Checksum: 0001EEE6
> >> > b9d28000 b9d3b000 i8042prt Timestamp: Fri Mar 25
> >> > 01:41:05 2005 (42435E21) Checksum: 0001C2D6
> >> > b9d3b000 b9d85000 cpqasm2 Timestamp: Tue Oct 14
> >> > 01:38:14 2003 (3F8B3766) Checksum: 00050676
> >> > b9d85000 b9da0000 VIDEOPRT Timestamp: Fri Mar 25
> >> > 01:29:53 2005 (42435B81) Checksum: 0001BC4D
> >> > b9da0000 b9df3d80 ati2mpad Timestamp: Fri Jul 19
> >> > 03:13:20 2002 (3D3767B0) Checksum: 0006029D
> >> > b9df7000 b9df7e00 nvcfsr Timestamp: Fri Nov 05
> >> > 09:47:02 2004 (418B3E06) Checksum: 00003087
> >> > ba10d000 ba116000 mssmbios Timestamp: Fri Mar 25
> >> > 01:34:14 2005 (42435C86) Checksum: 0000E2D1
> >> > ba11d000 ba12c000 termdd Timestamp: Fri Mar 25
> >> > 01:27:15 2005 (42435AE3) Checksum: 00014808
> >> > ba12d000 ba136000 raspti Timestamp: Fri Mar 25
> >> > 01:34:16 2005 (42435C88) Checksum: 0000D117
> >> > ba13d000 ba148000 ptilink Timestamp: Fri Mar 25
> >> > 01:28:25 2005 (42435B29) Checksum: 0000DEA4
> >> > ba14d000 ba158000 TDI Timestamp: Fri Mar 25
> >> > 01:35:34 2005 (42435CD6) Checksum: 00014D93
> >> > ba15d000 ba16c000 raspppoe Timestamp: Fri Mar 25
> >> > 01:34:16 2005 (42435C88) Checksum: 00015D34
> >> > ba16d000 ba176000 ndistapi Timestamp: Fri Mar 25
> >> > 01:34:11 2005 (42435C83) Checksum: 0000C04E
> >> > ba17d000 ba18bf80 CPQCISSE Timestamp: Mon Aug 04
> >> > 21:57:42 2003 (3F2EBAB6) Checksum: 0000FBA6
> >> > ba18d000 ba198000 fdc Timestamp: Fri Mar 25
> >> > 01:28:43 2005 (42435B3B) Checksum: 00009E2F
> >> > bf800000 bf9cf000 win32k Timestamp: Fri Mar 25
> >> > 01:40:09 2005 (42435DE9) Checksum: 001C9EE0
> >> > bf9cf000 bf9e5000 dxg Timestamp: Fri Mar 25
> >> > 01:27:25 2005 (42435AED) Checksum: 00017464
> >> > bf9e5000 bfa3b680 ati2drad Timestamp: Fri Mar 25
> >> > 03:30:34 2005 (424377CA) Checksum: 000572D8
> >> > bff60000 bff7e000 RDPDD Timestamp: Fri Mar 25
> >> > 03:30:48 2005 (424377D8) Checksum: 0001FF64
> >> > bffa0000 bffea000 ATMFD Timestamp: Fri Mar 25
> >> > 03:30:36 2005 (424377CC) Checksum: 00047B1F

| Next | Last
Pages: 1 2
Prev: problem accessing TS
Next: tsadmin doesnt show some servers