Hi Rick, Thanks for the point. I added Page Faults to my Task Manager and here is the top 6 processes for the page faults counter (the servers are rebooted weekly so the counter is probably 7 day worth) SERVER 3 (DL380) WinMgmts 9,929,800 McAfee 7,232,200 naPrdMgr 6,987,100 UpdaterUI 2,066,900 Spoolsv 1,279.100 IMAsrv 783.300 SERVER 2 (Older Intel) McAfee 9,210,900 naPrdMgr 6,998,100 icabar 3,064,300 UpdaterUI 2,053,100 Spoolsv 1,500,100 Explorer 1,041,200 SERVER 1 (Older Intel) McAfee 7,860,300 naPrdMgr 7,004,200 UpdaterUI 2,053,100 Administrator UpdaterUI 2,004,100 user1 Spoolsv 1,404,100 IMAsrv 866.300 The McAfee is set to scan all on read and on write. The exclusion is default McAfee's "Windows File Protection". Heuristics is on for new program and macro viruses. I remember having citrix servers in the separate EPO container with different scanning settings. I will double-check with admin doing the AV stuff what could happen to it. Now what would be the common approach for scanning on Citrix? Scan on read and do not scan on write, no heuristic scanning and exclude WINNT/system32/spool, pagefiles, etc? Is better to say scan only programm files or scan all files? Thanks, Pavlo Ignatusha Systems Network Coordinator Pembroke General Hospital Tel. (613) 732-3675 ext.6150 Fax. (613) 732-9986 www.pemgenhos.org "All that matters is love and work" - Sigmund Freud. -----Original Message----- From: Rick Mack [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Rick Mack Sent: Friday, January 07, 2005 6:48 PM To: thin@xxxxxxxxxxxxx Subject: RE: [THIN] Re: Page file max out Hi Pavlo, Interesting application mix. We can probably exclude MSoffice (with Access) and Acrobat and IE. Great Plains is probably okay (except for disabling oplocks). I gues Staffright and Accuterm97 would likely be the most promising possibilities but it's basically a case of finding out what applications (if any) are showing excesive pagefault activity. Paging is a normal housekeeping function and the (Microsoft) operating system will page long term inactive processes (and their DLLs) out of memory regardless of the amount of free memory. The more processes you have, and the bigger their memory footprint, the more paging you will see. It doesn't matter how fast your CPU and memory are if the limiting factor is paging to a much slower disk subsystem. This is why products like TScale etc are so effective. By allowing most DLLs to be used as shared code, the per-process memory footprint is greatly reduced, as is the amount of paging. Anyway, "destructive" paging (system gets so slow its unuseable!) or swapping generally only occurs when you've run out of physical memory so what you're seeing there is kind of unusual. I'd normally look at everything memory-wise (in perfmon) just to try and get a handle on what's going on. But initially you're looking for an application or system process with a very high fault rate. Could be any number of things from there, but that's a start. regards, Rick Ulrich Mack Volante Systems _____ From: thin-bounce@xxxxxxxxxxxxx on behalf of Pavlo Ignatusha Sent: Fri 7/01/2005 11:22 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Page file max out Hi Rick, Thanks for your help. I'll remove Page Swaps from load evaluator. Here is more info about my setup: 30-40 users per server daytime. Published Applications: MS Office 2000 Adobe Acrobar 6 (both Reader and full package) Microsoft (Great Plains) Dynamics (SQL client) Fundvision (SQL client) FRx reporting tools for Dynamics StaffRight (old DBase time-management DB) Accuterm97 (terminal programm for telnet to old Patient inf system) New Patient Inf System (SQL client custom app) Some Access DBs IE 6 SP1 Servers are W2K Server SP4 with hotfixes: 822428 823980 824946 147222 MF XP FR3 with hotfix: XE103W2K082 I've been running taskmgr with Memory usage and VM size but not the Page Faults. Is the process in question suppose to show high Page Faults value? I tried perfmon but there are so many processes that I would like to narrow it before going perfmon way if possible. Thanks, Pavlo Ignatusha Systems Network Coordinator Pembroke General Hospital Tel. (613) 732-3675 ext.6150 Fax. (613) 732-9986 www.pemgenhos.org "All that matters is love and work" - Sigmund Freud. ############################################################################ ######### This e-mail, including all attachments, may be confidential or privileged. Confidentiality or privilege is not waived or lost because this e-mail has been sent to you in error. If you are not the intended recipient any use, disclosure or copying of this e-mail is prohibited. If you have received it in error please notify the sender immediately by reply e-mail and destroy all copies of this e-mail and any attachments. All liability for direct and indirect loss arising from this e-mail and any attachments is hereby disclaimed to the extent permitted by law. ############################################################################ #########