Event ID 333 Troubleshooting
< ? ? >
??? ??? ??? ???? ??? ?? Event log ? ? ? ????.
Type: Error
Event ID: 333
Source: Application Popup
Computer: MachineName
Description:
An I/O operation initiated by the Registry failed unrecoverably. The Registry could
not read in, or write out, or flush, one of the files that contain the system's
image of the Registry.
Data:
0000: 00000000 006c0001 00000000 c000014d
0010: 00000000 c000014d 00000000 00000000
0020: 00000000 00000000
C000014d ? ??????
Microsoft ?????? Bing Keywords ? “Error code look-up” ??? ?? ? ????.
Microsoft Exchange Server Error Code Look-up Tool
? ?? Commnad ??? ???? ??? ?? ?? ??? ? ? ????.
C:\>err.exe c000014d
# for hex 0xc000014d / decimal -1073741491
STATUS_REGISTRY_IO_FAILED ntstatus.h
# An I/O operation initiated by the Registry failed
# unrecoverably.
# The Registry could not read in, or write out, or flush, one
# of the files that contain the system's image of the
# Registry.
# 1 matches found for "c000014d"
??, ? ???? ?? ??? ?? ???? ??? ? ? ????.
- SQL database ? ?? ???? ? ?????.
- IP ? Cluster Name ? ???? ???.
- File and Print ??? Freezing ???.
- ??? Ping ? ? ????.
- Keyboard ? ???? ??? ? ????.
- Application ??? ???? ??? ?? ??? ??? ??? ????.
Windows cannot load the user’s profile but has logged you on with the default profile for this system.
Insufficient system resources exist to complete the requested service.
??? ???? ??? ??? ??? ? ???? ????.
< ? ? >
Event ID 333’s ? ?? OS ? Registry hive ? Flush ?? Write ? ? ??? System ???? ?????.
Event ID 333’s ? ?? ???? ?? ??? ? ????.
?? 1. Memory pressure
Physical (Physical RAM, Virtual memory, Working set trimming, Pagefile, ??)
Kernel (Low paged/nonpaged pool/System Page Table Entries (PTE’s))
?? 2. ??? Filter/Kernel driver ? Flush ?? ?? Registry? ?? ?? ??
?? 3. System partition? ????? Disk ? Disk load? ??? ??? ??? ?? ??
(High disk queue lengths)
< ?? ?? >
?? 1 ? ?? ?? ??
Pro-active troubleshooting
===================
Windows Server 2003 SP1 ??? ??
------------------------------------
- ?? ????
A computer that is running Windows Server 2003 may use lots of nonpaged pool memory
https://support.microsoft.com/?id=918976
You may experience increased paging to the hard disk when you run an SAP R/3 program on a Windows Server 2003-based computer
https://support.microsoft.com/kb/931308/en-us
A Windows Server 2003-based computer stops responding when the registry is in heavy use
https://support.microsoft.com/kb/935926/en-us
A Windows Server 2003-based computer becomes unresponsive because of a memory manager trimming operation that is caused by an indeterminate module that requests lots of memory
https://support.microsoft.com/kb/938486/en-us
?? Volume Shadow Copies (VSS)? ?????,
A computer may run out of paged pool memory if the "Shadow Copies for Shared Folders" feature is enabled in Windows Server 2003
https://support.microsoft.com/kb/927435/en-us
The Volume Shadow Copy Service may leak private bytes and virtual memory when you use the service to take frequent snapshots in Windows Server 2003 or in Windows XP
https://support.microsoft.com/kb/940252/en-us
?? File server ??? Backup ? ????, ?? ?? ???? ?? Paged pool memory tag ? MmSt ??,
Paged pool ? ??? ??? ???? Paged pool trimming ? ?? ????? ??? ??
Server is unable to allocate memory from the system paged pool
https://support.microsoft.com/kb/312362/en-us
Regedit.exe ??
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management]
"PoolUsageMaximum"=dword:0000001E
"PagedPoolSize"=dword:ffffffff
Note: /3GB ? ???? x86 ??? ?? ffffffff ??? ??? ??
0x11800000 (?? 280 MB? ??)
0xC0000000 (?? 250 MB? ??)
0x0d800000 (?? 216 MB? ??)
Note: /3GB ? ?? Windows Server 2003 SP1/R2/SP2 ????? ? ?? ???? ?????
? ?? FFFFFFFF ? ???? ????.
* 3GB ??
/3GB ???? ???? ?????. ?? ??? Virtual memory ? ????, 1.8GB ? ?????
?????. ?? ??? ?? ?? ? ???? ???? ????.
<??? ??>
# x86 Exchange Servers
# x86 Oracle older versions. ? ??? Oracle ? PAE? ??? ? ??
<???? ?? ??>
# x64 Exchange 2007
# x86 SQL Server 2005, ?? ?? ??? ???? ?? SAP ?? ??? ??? Oracle ? App? ???.
# x64 SQL Server 2005
- 32bit ????? ?? ??? System PTEs? ??
?? /3GB ???? ???? ???, /USERVA ???? ?????? System PTEs? ???? ? ????.
ex)
multi(0)disk(0)rdisk(0)partition(2)\WINNT="Microsoft Windows Server 2003" /fastdetect /3GB /Userva=2970
Note: ?? x86 Windows Server 2003 ? Application mode ? Terminal Server ? ???? ?? ???,
fancy drivers ?? VGA driver ? ?????.
How to use the /userva switch with the /3GB switch to tune the User-mode space to a value between 2 GB and 3 GB
https://support.microsoft.com/kb/316739/en-us
- Pagefile ??? ????? System physical disk ??? ?? Disk? ??
- Handle leak ? ???? Processes/services ? ??
- Hot-add memory? Disable
Decreased performance, driver load failures, or system instability may occur on Hot Add Memory systems that are running Windows Server
https://support.microsoft.com/kb/913568/en-us
Windows Server 2003 SP2 ??? ??
------------------------------------
- ?? ????
You may experience increased paging to the hard disk when you run an SAP R/3 program on a Windows Server 2003-based computer
https://support.microsoft.com/kb/931308/en-us
A Windows Server 2003-based computer becomes unresponsive because of a memory manager trimming operation that is caused by an indeterminate module that requests lots of memory
https://support.microsoft.com/kb/938486/en-us
?? Volume Shadow Copies (VSS)? ?????,
A computer may run out of paged pool memory if the "Shadow Copies for Shared Folders" feature is enabled in Windows Server 2003
https://support.microsoft.com/kb/927435/en-us
?? File server ??? Backup ? ????, ?? ?? ???? ?? Paged pool memory tag ? MmSt ??,
Paged pool ? ??? ??? ???? Paged pool trimming ? ?? ????? ??? ??
Server is unable to allocate memory from the system paged pool
https://support.microsoft.com/kb/312362/en-us
?? SQL Server 2005 Enterprise edition ? ???? ???,
x64 SQL 2005 RTM/SP1/SP2 Enterprise Edition servers ??? ????? "Locked Pages in Memory (LPIM)"?
Turn on ??? ????.
Proactive Action Plan
================
- Windows Server 2003 SP1/SP2 ? ?? ??? ??? Hotfixes ? ?????.
- ????? ?? Hotfix ? ?????.
You experience application performance issues after you install the update from security bulletin MS07-043 on a computer that is running Windows Server 2003 or Windows XP Professional x64 Edition
https://support.microsoft.com/kb/943172/en-us
- ????? Drivers ? Firmware ? ?? ???? ?????.
- ????? Antivirus, Quota management drivers ? ???? ?????.
- SQL ???? ?? ?? ??? ?????.
How to reduce paging of buffer pool memory in the 64-bit version of SQL Server
https://support.microsoft.com/kb/918483/en-us
?? x86 SQL 2000 Server Enterprise Edition ? ???? ???,
SQL ? Buffer pool ? ?? Less memory? ????? ??
SQL Server 2000 64-bit eagerly acquires the amount of memory that is specified in the min server memory configuration option
https://support.microsoft.com/kb/918035/en-us
?? x86/x64 SQL Server 2005 RTM/SP1/SP2 Enterprise Edition ? ???? ???,
SQL ? Buffer pool ? ?? Less memory? ????? ??
Reactive Action Plan
===============
- ??? ???? ?? ?? ?? ?? ?? Perfmon ??? ?????.
SQL ?? ?? ??? ??
https://msdn2.microsoft.com/en-us/library/ms187024.aspx
https://blogs.technet.com/askperf/archive/2007/05/18/sql-and-the-working-set.aspx
- x86 Exchange Serve 2003 ? ???? ?? ??
?? Hotfixes ? ?????.
Stop error message on an Exchange Server 2003 server: "INVALID_PROCESS_ATTACH_ATTEMPT (5)"
https://support.microsoft.com/?id=908674
Error code when you use the Winsock Select function on a Windows Server 2003-based multiprocessor computer: "WSAENOBUFS (10055)"
https://support.microsoft.com/kb/917114/en-us
HTTP ? ? ?? NonPaged pool memory? ????? ?? Registry entry ? ?????.
HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters
EnableAggressiveMemoryUsage=1 (DWORD)
Users receive a "The page cannot be displayed" error message, and "Connections_refused" entries are logged in the Httperr.log file on a server that is running Windows Server 2003, Exchange 2003, and IIS 6.0
https://support.microsoft.com/kb/934878/en-us
Error message when you try to view a Web page that is hosted on IIS 6.0: "Page cannot be displayed"
https://support.microsoft.com/kb/933844/en-us
Http.sys registry settings for IIS
https://support.microsoft.com/kb/820129/en-us
?? Exchange 2003 SP2 ??, Exchange EXIFS (AuxL and Flst tags)? NonPaged pool ?? Paged pool ? ??? ? ????.
HKLM\SYSTEM\CurrentControlSet\Services\EXIFS\Parameters
AuxFreeListInPagedPool=1 (DWORD)
FreeListInPagedPool=1 (DWORD)
Reactive Troubleshooting
===================
1. MPS Report Setup/Perf ? ? MPS Report SQL ? ??? ?????.
2. Poolmon ? ?????.
3. Remote Perfmon log? ?????.
How to create a log using System Monitor in Windows
https://support.microsoft.com/kb/248345/en-us
4. ???? Memory dump ? ?????.
Windows feature lets you generate a memory dump file by using the keyboard
https://support.microsoft.com/kb/244139/en-us
??:
Windows Server 2003 Performance and Scalability
https://www.microsoft.com/windowsserver2003/evaluation/performance/perfscaling.mspx
Detection, Analysis, and Corrective Actions for Low Page Table Entry Issues
?? 2? ?? ?? ??
- ?? ???? ?? ??? ????? ?? MPS Report ?? ???? ??/??? ?? (.cab)? ?? ?????.
???? Pstat.txt ? ?? ? ?? Categoies? ??? 3rd party filter/kernel drivers ? ??? ?????.
Anti-virus/Spyware softwares
Quota management
Backup software (Microsoft Volume Shadow Copy ??)
OEM Server Management software
Kernel mode print drivers
- ?? ?? ??? TCPIP.sys ???? ?????.
You may experience network-related problems after you install Windows Server 2003 SP2 or the Scalable Networking Pack on a Windows Server 2003-based computer
https://support.microsoft.com/kb/936594/en-us
Step 1. ?? ????? ??? ?????.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
"EnableTCPChimney"=dword:00000000
"EnableTCPA"=dword:00000000
"EnableRSS"=dword:00000000
Step 2. ?? - ???? Netsh int ip set chimney DISABLED ? ?????.
https://support.microsoft.com ?? keywords "Windows Server 2003" TCPip.sys hotfix ? ??? ?? ??? TCPIP.sys? ?????.
- ?? ?? ??? Ntoskrnl.exe (?? Ntkrnlmp.exe ?? Ntkrpamp.exe ?? Ntkrnlpa.exe) ? ???? ??? ?????.
https://support.microsoft.com ?? keywords "Windows Server 2003" Ntoskrnl.exe hotfix ? ??? ?? ??? Ntoskrnl.exe? ?????.
?? 3? ?? ?? ??
- System ????(?? C:\)?? ??? ??? ?? ??? ??? ?????. ??? 15% ??? ??? ?? ??? ???.
- System ????? ??? Fragmented ???? ?????. ?? ?? ??? ???? ?? ? ?? ??? ?????.
Note: ?? ??? ?? ? Physical Disk (Object), Split IO/sec (Counter)? ??? 1?? ? ?? Fragmented disk? ?
Note: Microsoft Disk Defragmenter? ?? MFT(Master File Table)? ?? ???? ????. ??? ??? Data?
?? ? Disk? ??? ?? ?? Data? ???? ???? ????.
3rd party ?? ?? Sysinternal(https://technet.microsoft.com/en-us/sysinternals/default.aspx) ? Contig.exe ? ?? ?????.
- SCSI controller ? ?? Driver/firmware ????? ?????.
- ?? SAN ?? ?? ????? SAN attached storage? ??? ???, Scsiport ?? StorPort? ???? HBA driver/firmware? ????? ?????. ??? Disk I/O ??? ???? ? ????.
HBA??? Disk queue lengths ??? ?????. ???? 16 ?? 32 ???. HBA/SAN ???? ??? ?? ??? ?? ?????.
- ???? ??? ??? ??? ??? ???? ?? ?? ????? ??? ????.
- System ???? ????? ????? ?? Power Protected Write Cache (Enhanced Disk performance)? Enable ???.
Obtain the Dskcache.exe tool to configure the "Power Protected" Write Cache option
https://support.microsoft.com/kb/811392/en-us
- https://support.microsoft.com ?? keywords "Windows Server 2003" ????? hotfix ? ??? ?? ?? ??? ?????.
mountmgr.sys
ftdisk.sys
partmgr.sys
disk.sys
classpnp.sys
ntfs.sys
storport.sys
< ?? ?? >
177415 How to Use Memory Pool Monitor (Poolmon.exe) to Troubleshoot Kernel Mode Memory Leaks
https://support.microsoft.com/?id=177415
298102 How to find pool tags that are used by third-party drivers
https://support.microsoft.com/?id=298102
248345 How to create a log using System Monitor in Windows
https://support.microsoft.com/?id=248345
244139 Windows feature lets you generate a memory dump file by using the keyboard
https://support.microsoft.com/?id=244139
315263 How to read the small memory dump files that Windows creates for debugging