Have you tried installing KB2775511 on the server and clients (it can be imported into WSUS from the Windows Updates Catalog).
I saw a significant CPU load reduction after installing ti on a busy file server. Cheers, Phil -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of N Parr Sent: 20 September 2013 13:41 To: '[email protected]' Subject: [NTSysADM] RE: System process 100% CPU 08r2 Following up with some results and another question. I added a second CPU, it helped but didn't solve the problem. After some more digging with Process Explorer it seems the culprit is the SMB 2.0 driver. It's chewing up the CPU but only with my Win7 clients. This article suggests in mixed client environments try disabling SMB 2 on the server and clients. Haven't done it yet. Anyone else experience issues related to the SMB 2 driver? It would explain why my Win XP clients don't experience the same issues as my Win 7. http://www.petri.co.il/how-to-disable-smb-2-on-windows-vista-or-server-2008.htm# -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Brian Desmond Sent: Monday, September 16, 2013 3:35 PM To: [email protected] Subject: [NTSysADM] RE: System process 100% CPU 08r2 Capturing a dump of the system when the problem is occurring or collecting an xperf trace would be my approaches to start. 1 CPU is not really a great setup here. Thanks, Brian Desmond [email protected] w - 312.625.1438 | c - 312.731.3132 -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of N Parr Sent: Monday, September 16, 2013 3:07 PM To: '[email protected]' Subject: [NTSysADM] RE: System process 100% CPU 08r2 Only questions I didn't already answer are ~100 sessions 5 shares Virtual (same config as other file servers that don't experience this) 1 CPU Something else to add is I am snapping for previous file versions but CPU spikes never seem to coincide. I tend to agree it's something with the NIC because when System is spiking the CPU it's also the process with the highest network activity. And then it's only 2-4% utilization. There's not much I can do about that other than change the NIC type of the VM, but again it's using the same virtual adapter as my other file servers. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Jesse Rink Sent: Monday, September 16, 2013 2:45 PM To: [email protected] Subject: [NTSysADM] RE: System process 100% CPU 08r2 what version OS is the server? nothing at all running on it other than a couple folder shares? how many users are hitting the box? how often is the spiking occuring? is it a virtual or physical box? how many cpu's or vcpus? have you tried updating the NIC driver on the server? does the cpu spike settle down on its own after awhile or do you have to reboot the client(s) and/or server? Just thinking out loud... ________________________________________ From: [email protected] [[email protected]] on behalf of N Parr [[email protected]] Sent: Monday, September 16, 2013 2:24 PM To: '[email protected]' Subject: [NTSysADM] System process 100% CPU 08r2 I've been troubleshooting this for months now and I'm not getting anywhere but more confused. I have one file server that keeps spiking the system service at random times. Nothing else is running on the server, no AV or other apps. When this happens my win7 clients trying to access files on that server will come to a screeching halt. That's the really strange part, my XP clients keep working like nothing is wrong. I've done all the trouble shooting I can find for this problem, it's very hard to narrow down exactly what's causing the "system" process to spike. I noticed that one of the win7 clients in particular was moving a lot of data (receiving .5 MB/sec steady) but they had no apps running off the server, weren't searching, search service was turned off. But on that client it was the "system" service that was receiving the data from that server. I rebooted the client and the server cpu immediately went back to normal. My googling can't find anything that links the two together. Just hoping someone else has encountered this. Both client and server are patched but this has been going on for a long time, at least the last couple years. Thanks Hoople Ltd, Registered in England and Wales No. 7556595 Registered office: Plough Lane, Hereford, HR4 0LE "Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."
