Hi
I'm having problems with my two windows 2003 servers.
During busy periods throughout the day the servers CPU utilisation
jumps up to 100%. I can take up to 10 minutes for people to log on.
The servers are connected to an iSCSI array for the storage. Both have
plenty of free space. The hardware manufacturers (eonstor) have had a
look and are happy that the array is setup correctly. Both servers
have a QLOGIC HBA connecting them to the array.
I've used process explorer when the high utilisation is happening
Here are the results
Process PID CPU Description Company Name
System Idle Process 0 0.38
Interrupts n/a 1.54 Hardware Interrupts
DPCs n/a 11.15 Deferred Procedure Calls
System 4 75.38
smss.exe 1456 Windows NT Session Manager Microsoft Corporation
csrss.exe 1536 0.77 Client Server Runtime Process Microsoft
Corporation
winlogon.exe 1576 Windows NT Logon Application Microsoft
Corporation
services.exe 1648 Services and Controller app Microsoft
Corporation
svchost.exe 1836 Generic Host Process for Win32 Services
Microsoft Corporation
wmiprvse.exe 4004 WMI Microsoft Corporation
svchost.exe 348 Generic Host Process for Win32 Services
Microsoft Corporation
SavService.exe 432 9.23 Performs virus scanning and disinfection
functions Sophos Plc
svchost.exe 880 Generic Host Process for Win32 Services
Microsoft Corporation
svchost.exe 896 Generic Host Process for Win32 Services
Microsoft Corporation
svchost.exe 944 Generic Host Process for Win32 Services
Microsoft Corporation
spoolsv.exe 1408 Spooler SubSystem App Microsoft Corporation
msdtc.exe 1480 MS DTCconsole program Microsoft Corporation
beremote.exe 1956 Backup Exec Remote Agent for Windows NT/2000
Symantec Corporation
cisvc.exe 2044 Content Index service Microsoft Corporation
cidaemon.exe 5880 Indexing Service filter daemon Microsoft
Corporation
dfssvc.exe 264 0.38 Windows NT Distributed File System Service
Microsoft Corporation
dns.exe 476 Domain Name System (DNS) Server Microsoft
Corporation
svchost.exe 572 Generic Host Process for Win32 Services
Microsoft Corporation
FCM.exe 660 Ranger Suite Sentinel Products Ltd
FCR.exe 856 Ranger Suite Sentinel Products Ltd
ismserv.exe 924 Windows NT Intersite Messaging Service Microsoft
Corporation
ntfrs.exe 1192 File Replication Service Microsoft Corporation
portmap.exe 1276 ONC/RPC Portmap service registration helper
svchost.exe 2008 Generic Host Process for Win32 Services
Microsoft Corporation
RngrSvr.exe 2192 Ranger Suite Sentinel Products Ltd
SAVAdminService.exe 2208 Sophos Administrator Service Sophos Plc
ManagementAgentNT.exe 2272 Sophos Agent Sophos Plc
ALsvc.exe 2488 Sophos AutoUpdate Service. Sophos Plc
RouterNT.exe 2540 Sophos Message Router Sophos Plc
smhstart.exe 2712 HP System Management Homepage Service Hewlett-
Packard Company
hpsmhd.exe 2860 HP System Management Homepage Hewlett-Packard
Company
hpsmhd.exe 3988 HP System Management Homepage Hewlett-Packard
Company
CpqRcmc.exe 2788 HP ProLiant Remote Monitor Service Hewlett-
Packard Company
iqlremote.exe 2888
RgrAccss.exe 2980 Ranger Suite Sentinel Products Ltd
RgrLic.exe 3008 Ranger Suite Sentinel Products Ltd
sysdown.exe 3100 HP ProLiant System Shutdown Service Compaq
Computer Corporation
svchost.exe 3136 Generic Host Process for Win32 Services
Microsoft Corporation
dmadmin.exe 3336 Logical Disk Manager Adminstrative Service
Microsoft Corporation
lsass.exe 1660 0.77 LSA Shell Microsoft Corporation
explorer.exe 3448 Windows Explorer Microsoft Corporation
cpqteam.exe 3568 CPQTEAM.EXE (32-bit) Hewlett-Packard Company
LanRanger.exe 3636 Ranger Suite Sentinel Products Ltd
RangerToolbar.exe 3652 Ranger Suite Sentinel Products Ltd
ALMon.exe 3668 Component to show AutoUpdate's GUI elements. Sophos
Plc
taskmgr.exe 4184 Windows TaskManager Microsoft Corporation
GhostSrv.exe 5964 Symantec GhostCast Server for Windows Symantec
Corporation
procexp.exe 4856 0.38 Sysinternals Process Explorer Sysinternals
Both servers are running active directory. There are approx 500
workstations attached to these servers. (Dual 3.2Ghz, 5GB RAM.)
Anybody got any ideas on this? I've searched everywhere and found no
answer
Bookmarks