Windows Server 2012 - BSOD & MEMORY_MANAGEMENT

Question

Hello, we do have a Windows Server 2012 with 4 AMD Opteron processors (64 cores in a sum) with 128GB memory, it is running now more than 2 months.The server is heavily loaded during peak times which take few hours during regular day and approx. 10 hours during weekend.The regular CPU load is oscilating around 18% but during peak times it goes over 80%.In last 3 days we have got 2 BSOD and always with BugCheck MEMORY_MANAGEMENT with values of Argument1 were 0x41793 and 0x3470.If anybody wants to share minidumps they are here:http://www.nehez.cz/102013-11824-01.DMPhttp://www.nehez.cz/102313-10608-01.DMPI have installed now latest version for the last 2 drivers so all the drivers should be up to date.I will appreciate any help.Thank you in advance.Best regards,Petr Nehez

Answer 1

Hi Petr,

Both of the attached DMP files are of the MEMORY_MANAGEMENT (1a) bug check.

This indicates that a severe memory management error occurred.

We have two different 1st parameters in regards to the bug check - 41793, 3470.

41793 - An unknown memory management error occurred.

3470 - An unknown memory management error occurred.

When we get these as the 1st parameter, it usually indicates that we are dealing with a device driver issue as opposed to a hardware issue (memory). It's still possible, though.

Let's go ahead and enable Driver Verifier to try and see if we can catch anything causing conflicts and or corruption:

Driver Verifier:

What is Driver Verifier?

Driver Verifier is included in Windows 8, 7, Windows Server 2008 R2, Windows Vista, Windows Server 2008, Windows 2000, Windows XP, and Windows Server 2003 to promote stability and reliability; you can use this tool to troubleshoot driver issues. Windows kernel-mode components can cause system corruption or system failures as a result of an improperly written driver, such as an earlier version of a Windows Driver Model (WDM) driver.

Essentially, if there's a 3rd party driver believed to be at issue, enabling Driver Verifier will help flush out the rogue driver if it detects a violation.

Before enabling Driver Verifier, it is recommended to create a System Restore Point:

Vista - START | type rstrui - create a restore point

Windows 7 - START | type create | select "Create a Restore Point"

Windows 8 - http://www.eightforums.com/tutorials/4690-restore-point-create-windows-8-a.html

How to enable Driver Verifier:

Start > type "verifier" without the quotes > Select the following options -

1. Select - "Create custom settings (for code developers)"
2. Select - "Select individual settings from a full list"
3. Check the following boxes -

• Special Pool
• Pool Tracking
• Force IRQL Checking
• Deadlock Detection
• Security Checks (Windows 7 & 8)
• DDI compliance checking (Windows 8)
• Miscellaneous Checks

4. Select  - "Select driver names from a list"
5. Click on the "Provider" tab. This will sort all of the drivers by the provider.
6. Check EVERY box that is [B]NOT[/B] provided by Microsoft / Microsoft Corporation.
7. Click on Finish.
8. Restart.

Important information regarding Driver Verifier:

• If Driver Verifier finds a violation, the system will BSOD.
• After enabling Driver Verifier and restarting the system, depending on the culprit, if for example the driver is on start-up, you may not be able to get back into normal Windows because Driver Verifier will flag it, and as stated above, that will cause / force a BSOD.

If this happens, do not panic, do the following:

• Boot into Safe Mode by repeatedly tapping the F8 key during boot-up.
• Once in Safe Mode - Start > type "system restore" without the quotes.
• Choose the restore point you created earlier.

If you did not set up a restore point, do not worry, you can still disable Driver Verifier to get back into normal Windows:

• Start > Search > type "cmd" without the quotes.
• To turn off Driver Verifier, type in cmd "verifier /reset" without the quotes.

・    Restart and boot into normal Windows.

How long should I keep Driver Verifier enabled for?

It varies, many experts and analysts have different recommendations. Personally, I recommend keeping it enabled for at least 24 hours. If you don't BSOD by then, disable Driver Verifier.

My system BSOD'd, where can I find the crash dumps?

They will be located in %systemroot%\Minidump

Any other questions can most likely be answered by this article:

http://support.microsoft.com/kb/244617

Regards,

Patrick

Answer 2

Hi Patrick,

thank you for your reply, the information about Driver Verifier is very interesting, though we won't be able to try it now as our server is located in US and we are located in EU.

But if the server keeps generating BSOD often, this should be our next step. The problem is that we would have to manage it with guys from our hosting company because starting a server into Safe Mode is not possible to do remotely (what I know now).

Thank you once more for your help.

Regards,

Petr

Answer 3

Hi,

The issue you posted is related to Server 2012 and would be better suited in the TechNet community. Please visit the link below to find a community that will offer the best support.

http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserver8gen

Thank you.

Answer 4

Hi,

thank you for reminding the TechNet community but I have also asked there- http://social.technet.microsoft.com/Forums/windowsserver/en-US/808c758d-ffb4-466a-a96e-73e8235fb506/bsod-memorymanagement-0x1a-error?forum=winserver8gen#125d41f5-e98e-4ced-8e73-891445326c60.

We have recently replaced all RAM modules so we are waiting now if it helps. I hope so...

Regards,

Petr