Yup, sounds like a mem leak. One that takes a long time too get all the way there too. This is why Cycle boots on MF server are so common. If you had a weekly reboot schedule you would never notice this. Ron Oglesby Senior Technical Architect =20 RapidApp Office 312.372.7188 Mobile 312.961.2380 email roglesby@xxxxxxxxxxxx =20 -----Original Message----- From: Bernd Harzog [mailto:Bernd.Harzog@xxxxxxxxxxx]=20 Sent: Thursday, November 21, 2002 12:27 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: HELP PLEASE Pav, It is just taking you a little longer to run out of VM (you have a slow =3D lead and not a fast leak).=3D20 Bernd Harzog CEO RTO Software 678-455-5506 x701 bernd@xxxxxxxxxxx www.rtosoft.com -----Original Message----- From: Pavlo Ignatusha [mailto:pignatusha@xxxxxxxxxxxxx] Sent: Thursday, November 21, 2002 11:07 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: HELP PLEASE I have same errors and I do not run any antivirus on my XPa farm. You = =3D may rule antivirus out, Brian. My servers run without restart for about 2-3 weeks and then I start getting these messages. I restart and I'm good = =3D for another 2-3 weeks Environment: 3 W2K SP2 servers with XPa FR1. Office apps, Financials =3D (Great Plains Dynamics, Momentum Healthware, FRx), homegrown Hospital =3D applications (SQL driven) Pav -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Murphy, Brian Sent: Thursday, November 21, 2002 10:37 AM To: 'thin@xxxxxxxxxxxxx' Subject: [THIN] Re: HELP PLEASE Hmm. I still think it's the A/V. IS the on demand scanner running when user logs onto session? Also. Norton addresses this problem in version 7.61 build 34a. (Personally, I would use Sophos without the Intercheck module)...(But = =3D the Norton is much easier to update) A short term workaround might be to use Group Policy and set the "Maximum retries to unload and update user profile" =3D3D 0 -----Original Message----- From: Bernd Harzog [mailto:Bernd.Harzog@xxxxxxxxxxx] Sent: Thursday, November 21, 2002 9:08 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: HELP PLEASE Sorry about the garbled text everyone. I am trying this one more time = =3D =3D3D with a send type of plain text. Doug, You are running out of virtual memory. I know that this sounds =3D3D counter-intuitive, but this can happen quite easily even if you have = =3D3D plenty of physical RAM available and plenty of page file space =3D3D =3D available. The reason that it can happen with plenty of those resources =3D3D =3D available is that there are system resources that you can run out of =3D3D even of = you =3D have plenty of RAM and plenty of page file space. The two most common reasons for this problem are that you are running = =3D =3D3D applications that have a memory leak somewhere and your memory is being =3D =3D3D slowly eroded over time (this it why it is a good idea to reboot those = =3D =3D3D servers every night - that is the only sure way to reclaim leaked =3D3D = =3D memory), or that you are simply running enough copies of applications =3D3D that = =3D consume a lot of VM to push your servers to the wall. Now for a little commercial. We make a product, TScale that reduces the =3D =3D3D VM used by 32 bit applications running on Terminal Servers. You can =3D3D = =3D download a free eval from our web site here: http://www.rtosoft.com/evaluate_ts.html After you download the software you will need an evaluation key to get = =3D =3D3D it to actually optimize your applications. You can get the key by =3D3D =3D sending an email to sales@xxxxxxxxxxxx If you have any other questions, you are welcome to email me on or off = =3D =3D3D list. If you want to get technical, I will get Kevin Goodman our VP of = =3D =3D3D Development involved. Cheers, Bernd Harzog CEO RTO Software 678-455-5506 x701 bernd@xxxxxxxxxxx www.rtosoft.com We currently have our Reg size set to 140MB and it does not look like = =3D =3D3D =3D3D3D it has got to the maximum yet. 84 MB is the biggest I have seen it. -----Original Message----- From: Joe Fojut [mailto:Fojut.Joseph@xxxxxxxx]=3D3D3D20 Sent: Wed, November 20, 02 1:13 PM To: Stratton, Doug MSER:EX Subject: RE: [THIN] HELP PLEASE Hi Doug: This sounds like you are running out of room in your registry and the userenv errors are occurring when your system is not able to load a =3D =3D3D3D users ntuser.dat. You should increase the registry to the maximum =3D allowable =3D3D =3D3D3D size. I bump it to 100mb on our WTSE 4.0 boxes and I think = you =3D can go at =3D3D3D least 150mb on the W2k boxes. You may be able to go higher. We have found that registry size turns out to be the limiting factor =3D =3D3D3D for us and causes us to add more servers well before CPU and memory are a = =3D =3D3D3D problem. Regards, Joe -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On = =3D =3D3D =3D3D3D Behalf Of Stratton, Doug MSER:EX Sent: Wednesday, November 20, 2002 2:21 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] HELP PLEASE We have terminal server farm with 5 production servers in it. =3D3D3D20 = =3D They are running Citrix XP and 1.8. We are starting to get resource problems more and more often. These = =3D =3D3D =3D3D3D are becoming quite common and it seems they occur on any of the 5 servers = =3D =3D3D =3D3D3D (more often then not nutmeg or chives 2 of the 5) =3D3D3D20 I have sent a note to MS asking if the KB312362 artical applies to =3D =3D3D3D W2k Server (not advanced server). Not sure if this will help or not. I checked the registry size on nutmeg when it was telling me that it =3D =3D3D3D needed to be increased and found that it was 84 MB and maximum size was 140MB. =3D3D =3D3D3D So I assume it still had room and the message was = =3D erroneous? Page file =3D3D3D was 4092 MB recommended 3070 MB. Most of the original messages were around the system pagepool being =3D =3D3D3D empty. These are the types of events that we get: APPLICATION EVENT LOG Event Type: Error Event Source: Userenv Event Category: None Event ID: 1000 Date: 11/20/2002 Time: 11:24:04 AM User: NT AUTHORITY\SYSTEM Computer: NUTMEG Description: Windows cannot unload your registry class file. If you have a roaming profile, your settings are not replicated. Contact your administrator. =3D =3D3D =3D3D3D DETAIL The operation completed successfully. , Build number =3D3D =3D ((2195)).=3D3D3D20 Event Type: Error Event Source: Userenv Event Category: None Event ID: 1000 Date: 11/20/2002 Time: 11:24:10 AM User: NT AUTHORITY\SYSTEM Computer: NUTMEG Description: RegLoadKey failed. Return value Insufficient system resources exist to complete the requested service. for e:\Documents and Settings\dstrat_a\ntuser.dat.=3D3D3D20 Event Type: Error Event Source: Userenv Event Category: None Event ID: 1000 Date: 11/20/2002 Time: 11:24:13 AM User: NT AUTHORITY\SYSTEM Computer: NUTMEG Description: Windows cannot load your profile. Please increase the registry size and restart the computer.=3D3D3D20 SYSTEM EVENT LOG Event Type: Error Event Source: Print Event Category: None Event ID: 33 Date: 11/20/2002 Time: 11:27:06 AM User: NT AUTHORITY\SYSTEM Computer: NUTMEG Description: The PrintQueue Container could not be found because the DNS Domain name could not be retrieved. Error: 547=3D3D3D20 Event Type: Error Event Source: Srv Event Category: None Event ID: 2020 Date: 11/20/2002 Time: 11:18:56 AM User: N/A Computer: NUTMEG Description: The server was unable to allocate from the system paged pool because =3D =3D3D3D the pool was empty.=3D3D3D20 Data: 0000: 00 00 04 00 01 00 54 00 ......T. 0008: 00 00 00 00 e4 07 00 c0 = ....=3D3D3DC3=3D3D3DA4..=3D3D3DC3=3D3D3D80 0010: 00 00 00 00 9a 00 00 c0 = ....=3D3D3DC5=3D3D3DA1..=3D3D3DC3=3D3D3D80 0018: 00 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ 0028: 02 00 00 00 .... =3D3D3D20 I could really use some process/advice on how to resolve this. =3D3D3D20 At this point I have ended up doing the following to get around the =3D =3D3D3D problem when it occurs: Disable logon to the server (via load balancing) Restart the print spooler as the first sign is usually people can't =3D =3D3D3D print. (sometimes helps) Restart the NAV service (we just started trying this) Logoff any disconnected sessions. This usually helps This helps usually but it is getting more severe all the time and less effective. Doug Stratton,=3D3D3D20 TDA, Workplace Support, http://icw.ista.gov.bc.ca/I_wss/workplace.asp <http://icw.ista.gov.bc.ca/I_wss/workplace.asp>=3D3D3D20 Common IT Services,=3D3D3D20 Ministry of Management Services,=3D3D3D20 Province of British Columbia=3D3D3D20 Phone: 250 356-6678 Fax: 250 356-1960=3D3D3D20 MailTo:Doug.M.Stratton@xxxxxxxxxxxxxxx <MailTo:Doug.M.Stratton@xxxxxxxxxxxxxxx>=3D3D3D20 D Sharped ***********************************************=3D3D3D20 This Weeks Sponsor: Wyse Technologies Get a free whitepaper on how to secure your corporate data from Wyse. Click Below.=3D3D3D20 http://thethin.net/wyse.cfm=3D3D3D20 ***********************************************=3D3D3D20 For Archives, to Unsubscribe, Subscribe or=3D3D3D20 set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm ***********************************************=3D3D20 This Weeks Sponsor: Wyse Technologies Get a free whitepaper on how to secure your corporate data from Wyse. Click Below.=3D3D20 http://thethin.net/wyse.cfm=3D3D20 ***********************************************=3D3D20 For Archives, to Unsubscribe, Subscribe or=3D3D20 set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm Bernd Harzog CEO RTO Software 678-455-5506 x701 bernd@xxxxxxxxxxx www.rtosoft.com *********************************************** This Weeks Sponsor: Wyse Technologies Get a free whitepaper on how to secure your corporate data from Wyse. Click Below. http://thethin.net/wyse.cfm *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm *********************************************** This Weeks Sponsor: Wyse Technologies Get a free whitepaper on how to secure your corporate data from Wyse. Click Below. http://thethin.net/wyse.cfm *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm *********************************************** This Weeks Sponsor: Wyse Technologies Get a free whitepaper on how to secure your corporate data from Wyse. Click Below. http://thethin.net/wyse.cfm *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm ***********************************************=20 This Weeks Sponsor: Wyse Technologies Get a free whitepaper on how to secure your corporate data from Wyse. Click Below.=20 http://thethin.net/wyse.cfm=20 ***********************************************=20 For Archives, to Unsubscribe, Subscribe or=20 set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm *********************************************** This Weeks Sponsor: Wyse Technologies Get a free whitepaper on how to secure your corporate data from Wyse. Click Below. http://thethin.net/wyse.cfm *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm