The Print Spooler service terminated unexpectedly

Question

Hi

I have windows server 2016 with 100 network printers, in the last week printspooler service crashed a 3-4 time per day.

EventViewer show about 7031 and 7034 ID

I have been tried to check here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue, and i have seen that reports show about PnPDriverImportError

Here the log:

Version=1
EventType=PnPDriverImportError
EventTime=132265919710791008
Consent=1
ReportIdentifier=75e99d5f-531a-11ea-a2c1-0050568bcc6b
AppSessionGuid=00002ef8-0002-0016-1be8-b4101de7d501
TargetAppId=W:0000f519feec486de87ed73cb92d3cac802400000000!0000c4cf887c2b9e013f14e4d8ebb5cb1b72dc186909!PrintBrmEngine.exe
TargetAppVer=2017//09//07:05:18:48!45651!PrintBrmEngine.exe
BootId=4294967295
Response.type=4
Sig[0].Name=Architecture
Sig[0].Value=x64
Sig[1].Name=Win32 error
Sig[1].Value=E0000242
Sig[2].Name=Inf name
Sig[2].Value=citizen.inf
Sig[3].Name=Driver Package hash
Sig[3].Value=dc333aceb4b80619050417031560820bfefeb32d
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=10.0.14393.2.0.0.272.7
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
FriendlyEventName=Could not install driver software
ConsentKey=PnPDriverImportError
AppName=Driver software installation
AppPath=C:\Windows\System32\spool\tools\PrintBrmEngine.exe
ReportDescription=Windows could not copy all of the files needed to install this device driver software. This sometimes happens when the driver software was not designed for this version of Windows.
ApplicationIdentity=00000000000000000000000000000000
MetadataHash=-1194163697

Answer 1

Hi,

Please first use SFC Scannow and DISM command to try system repair. Run below commands each one time.

• SFC /Scannow
• Dism /Online /Cleanup-Image /CheckHealth
• Dism /Online /Cleanup-Image /ScanHealth
• DISM /Online /Cleanup-Image /RestoreHealth

Also, this post PnPDriverImportError mentioned it might be an unsigned driver issue. Please try the solution in below link to see if it helps.
https://ccm.net/faq/3914-how-to-install-unsigned-drivers-on-windows-7

Thanks,

Eleven

If the Answer is helpful, please click "Accept Answer" and upvote it

Answer 2

I am checking again in the event viewer, and i have seen this event:

Faulting application name: spoolsv.exe, version: 10.0.14393.3808, time stamp: 0x5f056be8
Faulting module name: wsnmp32.dll, version: 10.0.14393.2214, time stamp: 0x5ac2f956
Exception code: 0xc00000fd
Fault offset: 0x0000000000003749
Faulting process id: 0x790
Faulting application start time: 0x01d6ac3ebc7589e9
Faulting application path: C:\Windows\System32\spoolsv.exe
Faulting module path: C:\Windows\System32\wsnmp32.dll
Report Id: 593eeb25-bbde-444b-918f-7c37ab78fc26
Faulting package full name:
Faulting package-relative application ID:

Answer 3

And this is the report.wer

Version=1
EventType=APPCRASH
EventTime=132483425464874773
ReportType=2
Consent=1
UploadTime=132483425466905824
ReportIdentifier=770d0e1a-18ec-11eb-a2ce-0050568bcc6b
IntegratorReportIdentifier=15ee589b-9cbe-4e29-a339-3d4d6f8fe298
NsAppName=spoolsv.exe
AppSessionGuid=00000528-0000-0023-5a90-419d6eacd601
TargetAppId=W:0000f519feec486de87ed73cb92d3cac802400000000!0000f39ca2746721e00e3dd834703e080c82d892d2a1!spoolsv.exe
TargetAppVer=2020//07//08:06:47:04!c945c!spoolsv.exe
BootId=4294967295
Response.BucketId=a12453ee47e36461f0c3557ef189225e
Response.BucketTable=4
Response.LegacyBucketId=1207903128771961438
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=spoolsv.exe
Sig[1].Name=Application Version
Sig[1].Value=10.0.14393.3808
Sig[2].Name=Application Timestamp
Sig[2].Value=5f056be8
Sig[3].Name=Fault Module Name
Sig[3].Value=wsnmp32.dll
Sig[4].Name=Fault Module Version
Sig[4].Value=10.0.14393.2214
Sig[5].Name=Fault Module Timestamp
Sig[5].Value=5ac2f956
Sig[6].Name=Exception Code
Sig[6].Value=c00000fd
Sig[7].Name=Exception Offset
Sig[7].Value=0000000000003749
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=10.0.14393.2.0.0.272.7
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
DynamicSig[22].Name=Additional Information 1
DynamicSig[22].Value=65fb
DynamicSig[23].Name=Additional Information 2
DynamicSig[23].Value=65fb51edf8c6e312b15baf33cc3deef8
DynamicSig[24].Name=Additional Information 3
DynamicSig[24].Value=3ed6
DynamicSig[25].Name=Additional Information 4
DynamicSig[25].Value=3ed6808cabf3d541a3ed3d77fb835b45
UI[2]=C:\Windows\System32\spoolsv.exe
UI[5]=Check online for a solution (recommended)
UI[6]=Check for a solution later (recommended)
UI[7]=Close
UI[8]=Spooler SubSystem App stopped working and was closed
UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
UI[10]=&Close
LoadedModule[0]=C:\Windows\System32\spoolsv.exe
LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\Windows\System32\KERNEL32.DLL
LoadedModule[3]=C:\Windows\System32\KERNELBASE.dll
LoadedModule[4]=C:\Windows\System32\USER32.dll
LoadedModule[5]=C:\Windows\System32\win32u.dll
LoadedModule[6]=C:\Windows\System32\GDI32.dll
LoadedModule[7]=C:\Windows\System32\gdi32full.dll
LoadedModule[8]=C:\Windows\System32\msvcrt.dll
LoadedModule[9]=C:\Windows\System32\sechost.dll
LoadedModule[10]=C:\Windows\System32\RPCRT4.dll
LoadedModule[11]=C:\Windows\System32\advapi32.dll
LoadedModule[12]=C:\Windows\System32\DNSAPI.dll
LoadedModule[13]=C:\Windows\System32\bcrypt.dll
LoadedModule[14]=C:\Windows\System32\WS2_32.dll
LoadedModule[15]=C:\Windows\System32\NSI.dll
LoadedModule[16]=C:\Windows\SYSTEM32\IPHLPAPI.DLL
LoadedModule[17]=C:\Windows\SYSTEM32\ualapi.dll
LoadedModule[18]=C:\Windows\System32\SHELL32.dll
LoadedModule[19]=C:\Windows\SYSTEM32\ESENT.dll
LoadedModule[20]=C:\Windows\System32\cfgmgr32.dll
LoadedModule[21]=C:\Windows\SYSTEM32\ntmarta.dll
LoadedModule[22]=C:\Windows\System32\ucrtbase.dll
LoadedModule[23]=C:\Windows\System32\windows.storage.dll
LoadedModule[24]=C:\Windows\System32\combase.dll
LoadedModule[25]=C:\Windows\System32\bcryptPrimitives.dll
LoadedModule[26]=C:\Windows\System32\powrprof.dll
LoadedModule[27]=C:\Windows\System32\shlwapi.dll
LoadedModule[28]=C:\Windows\System32\kernel.appcore.dll
LoadedModule[29]=C:\Windows\System32\shcore.dll
LoadedModule[30]=C:\Windows\System32\profapi.dll
LoadedModule[31]=C:\Windows\System32\sspicli.dll
LoadedModule[32]=C:\Windows\system32\mswsock.dll
LoadedModule[33]=C:\Windows\system32\msv1_0.DLL
LoadedModule[34]=C:\Windows\System32\NtlmShared.dll
LoadedModule[35]=C:\Windows\System32\cryptdll.dll
LoadedModule[36]=C:\Windows\System32\clusapi.dll
LoadedModule[37]=C:\Windows\System32\wkscli.dll
LoadedModule[38]=C:\Windows\System32\cscapi.dll
LoadedModule[39]=C:\Windows\System32\netutils.dll
LoadedModule[40]=C:\Windows\SYSTEM32\WINNSI.DLL
LoadedModule[41]=C:\Windows\System32\rasadhlp.dll
LoadedModule[42]=C:\Windows\System32\fwpuclnt.dll
LoadedModule[43]=C:\Windows\System32\localspl.dll
LoadedModule[44]=C:\Windows\System32\CRYPT32.dll
LoadedModule[45]=C:\Windows\System32\MSASN1.dll
LoadedModule[46]=C:\Windows\System32\SETUPAPI.dll
LoadedModule[47]=C:\Windows\System32\srvcli.dll
LoadedModule[48]=C:\Windows\System32\SPOOLSS.DLL
LoadedModule[49]=C:\Windows\System32\sfc_os.dll
LoadedModule[50]=C:\Windows\System32\ole32.dll
LoadedModule[51]=C:\Windows\System32\Secur32.dll
LoadedModule[52]=C:\Windows\system32\winspool.drv
LoadedModule[53]=C:\Windows\System32\PrintIsolationProxy.dll
LoadedModule[54]=C:\Windows\System32\KOAYSJ_L.DLL
LoadedModule[55]=C:\Windows\System32\CNMLM7Q.DLL
LoadedModule[56]=C:\Windows\System32\PSAPI.DLL
LoadedModule[57]=C:\Windows\System32\VERSION.dll
LoadedModule[58]=C:\Windows\System32\hpinksts7C12LM.dll
LoadedModule[59]=C:\Windows\System32\OLEAUT32.dll
LoadedModule[60]=C:\Windows\System32\msvcp_win.dll
LoadedModule[61]=C:\Windows\System32\USERENV.dll
LoadedModule[62]=C:\Windows\System32\hpinkstsC011LM.dll
LoadedModule[63]=C:\Windows\System32\HPMPW081.DLL
LoadedModule[64]=C:\Windows\System32\HPMPM082.DLL
LoadedModule[65]=C:\Windows\System32\dbghelp.dll
LoadedModule[66]=C:\Windows\System32\hpmlm225.dll
LoadedModule[67]=C:\Windows\System32\hppmopjl.dll
LoadedModule[68]=C:\Windows\System32\hpzllw71.dll
LoadedModule[69]=C:\Windows\System32\hpzllwn7.dll
LoadedModule[70]=C:\Windows\System32\LMAD1PLANG.DLL
LoadedModule[71]=C:\Windows\System32\HID.DLL
LoadedModule[72]=C:\Windows\System32\lmad1pinpa.DLL
LoadedModule[73]=C:\Windows\System32\LMADQPLANG.DLL
LoadedModule[74]=C:\Windows\System32\lmadqpinpa.DLL
LoadedModule[75]=C:\Windows\System32\LMADWPLANG.DLL
LoadedModule[76]=C:\Windows\System32\lmadwpinpa.DLL
LoadedModule[77]=C:\Windows\System32\hpf3lw73.dll
LoadedModule[78]=C:\Windows\System32\hpz3lw71.dll
LoadedModule[79]=C:\Windows\System32\hpz3lwn7.dll
LoadedModule[80]=C:\Windows\System32\PJLMON.DLL
LoadedModule[81]=C:\Windows\System32\XRZGBLAI.DLL
LoadedModule[82]=C:\Windows\System32\MPR.dll
LoadedModule[83]=C:\Windows\System32\scx645l6.DLL
LoadedModule[84]=C:\Windows\System32\ssnetmon.d64
LoadedModule[85]=C:\Windows\System32\ssy3clm.dll
LoadedModule[86]=C:\Windows\System32\tcpmon.dll
LoadedModule[87]=C:\Windows\System32\snmpapi.dll
LoadedModule[88]=C:\Windows\System32\wsnmp32.dll
LoadedModule[89]=C:\Windows\System32\DLXBUZIL.DLL
LoadedModule[90]=C:\Windows\System32\DLXZIZIL.DLL
LoadedModule[91]=C:\Windows\System32\DLXBAZIL.DLL
LoadedModule[92]=C:\Windows\System32\sx655lm.dll
LoadedModule[93]=C:\Windows\System32\usbmon.dll
LoadedModule[94]=C:\Windows\System32\DEVOBJ.dll
LoadedModule[95]=C:\Windows\System32\WINTRUST.dll
LoadedModule[96]=C:\Windows\System32\WSDMon.dll
LoadedModule[97]=C:\Windows\System32\deviceassociation.dll
LoadedModule[98]=C:\Windows\System32\wsdapi.dll
LoadedModule[99]=C:\Windows\System32\WINHTTP.dll
LoadedModule[100]=C:\Windows\System32\FirewallAPI.dll
LoadedModule[101]=C:\Windows\System32\webservices.dll
LoadedModule[102]=C:\Windows\System32\fwbase.dll
LoadedModule[103]=C:\Windows\System32\clbcatq.dll
LoadedModule[104]=C:\Windows\System32\msxml6.dll
LoadedModule[105]=C:\Windows\System32\FunDisc.dll
LoadedModule[106]=C:\Windows\System32\XmlLite.dll
LoadedModule[107]=C:\Windows\System32\fdPnp.dll
LoadedModule[108]=C:\Windows\System32\ATL.DLL
LoadedModule[109]=C:\Windows\system32\WSDCHNGR.DLL
LoadedModule[110]=C:\Windows\System32\drvstore.dll
LoadedModule[111]=C:\Windows\SYSTEM32\dhcpcsvc6.DLL
LoadedModule[112]=C:\Windows\SYSTEM32\dhcpcsvc.DLL
LoadedModule[113]=C:\Windows\System32\WSDPrintProxy.dll
LoadedModule[114]=C:\Windows\SYSTEM32\ondemandconnroutehelper.dll
LoadedModule[115]=C:\Windows\System32\webio.dll
LoadedModule[116]=C:\Windows\System32\HTTPAPI.dll
LoadedModule[117]=C:\Windows\system32\spool\PRTPROCS\x64\winprint.dll
LoadedModule[118]=C:\Windows\SYSTEM32\gpapi.dll
LoadedModule[119]=C:\Windows\system32\spool\PRTPROCS\x64\CNMPD7Q.DLL
LoadedModule[120]=C:\Windows\system32\spool\PRTPROCS\x64\GNABE94C.DLL
LoadedModule[121]=C:\Windows\system32\spool\PRTPROCS\x64\GNABEB4C.DLL
LoadedModule[122]=C:\Windows\system32\spool\PRTPROCS\x64\GNACBL4C.DLL
LoadedModule[123]=C:\Windows\system32\spool\PRTPROCS\x64\GNUD054C.DLL
LoadedModule[124]=C:\Windows\system32\spool\PRTPROCS\x64\hpcpp103.dll
LoadedModule[125]=C:\Windows\system32\spool\PRTPROCS\x64\hpcpp111.dll
LoadedModule[126]=C:\Windows\system32\spool\PRTPROCS\x64\hpcpp118.dll
LoadedModule[127]=C:\Windows\system32\spool\PRTPROCS\x64\hpcpp120.DLL
LoadedModule[128]=C:\Windows\system32\spool\PRTPROCS\x64\hpcpp135.DLL
LoadedModule[129]=C:\Windows\system32\spool\PRTPROCS\x64\hpcpp186.dll
LoadedModule[130]=C:\Windows\system32\spool\PRTPROCS\x64\hpcpp230.dll
LoadedModule[131]=C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.14393.3986_none_aecdf0bdddd216ec\gdiplus.dll
LoadedModule[132]=C:\Windows\system32\spool\PRTPROCS\x64\hpfppw73.dll
LoadedModule[133]=C:\Windows\system32\spool\PRTPROCS\x64\hpzpplhn.dll
LoadedModule[134]=C:\Windows\system32\spool\PRTPROCS\x64\hpzppw71.dll
LoadedModule[135]=C:\Windows\system32\spool\PRTPROCS\x64\hpzppwn7.dll
LoadedModule[136]=C:\Windows\system32\spool\PRTPROCS\x64\KOAYSJ_P.DLL
LoadedModule[137]=C:\Windows\system32\spool\PRTPROCS\x64\LMACEC4C.DLL
LoadedModule[138]=C:\Windows\system32\spool\PRTPROCS\x64\LMACI54C.DLL
LoadedModule[139]=C:\Windows\system32\spool\PRTPROCS\x64\LMACJ54C.DLL
LoadedModule[140]=C:\Windows\system32\spool\PRTPROCS\x64\LMACJL4C.DLL
LoadedModule[141]=C:\Windows\system32\spool\PRTPROCS\x64\LMACL54C.DLL
LoadedModule[142]=C:\Windows\system32\spool\PRTPROCS\x64\LMACM54C.DLL
LoadedModule[143]=C:\Windows\system32\spool\PRTPROCS\x64\LMAD1P4C.DLL
LoadedModule[144]=C:\Windows\system32\spool\PRTPROCS\x64\LMADQP4C.DLL
LoadedModule[145]=C:\Windows\system32\spool\PRTPROCS\x64\LMADWP4C.DLL
LoadedModule[146]=C:\Windows\system32\spool\PRTPROCS\x64\LMFX1N4C.DLL
LoadedModule[147]=C:\Windows\system32\spool\PRTPROCS\x64\LMU02N4C.DLL
LoadedModule[148]=C:\Windows\system32\spool\PRTPROCS\x64\LMU02O4C.DLL
LoadedModule[149]=C:\Windows\system32\spool\PRTPROCS\x64\LMU02P4C.DLL
LoadedModule[150]=C:\Windows\system32\spool\PRTPROCS\x64\LMU03P4C.DLL
LoadedModule[151]=C:\Windows\system32\spool\PRTPROCS\x64\LMUD1N4C.DLL
LoadedModule[152]=C:\Windows\system32\spool\PRTPROCS\x64\LMUD1O4C.DLL
LoadedModule[153]=C:\Windows\system32\spool\PRTPROCS\x64\LMUD1P4C.DLL
LoadedModule[154]=C:\Windows\system32\spool\PRTPROCS\x64\LXKPTPRC.DLL
LoadedModule[155]=C:\Windows\system32\spool\PRTPROCS\x64\ps3428pc.dll
LoadedModule[156]=C:\Windows\system32\spool\PRTPROCS\x64\riafpp.dll
LoadedModule[157]=C:\Windows\system32\spool\PRTPROCS\x64\SCX645pc.dll
LoadedModule[158]=C:\Windows\system32\spool\PRTPROCS\x64\SMP.dll
LoadedModule[159]=C:\Windows\system32\spool\PRTPROCS\x64\smx626pp.dll
LoadedModule[160]=C:\Windows\system32\spool\PRTPROCS\x64\spdpspp.dll
LoadedModule[161]=C:\Windows\system32\spool\PRTPROCS\x64\sx655pc.dll
LoadedModule[162]=C:\Windows\system32\spool\PRTPROCS\x64\TPWinPrn.dll
LoadedModule[163]=C:\Windows\System32\WSOCK32.dll
LoadedModule[164]=C:\Windows\System32\RESUTILS.dll
LoadedModule[165]=C:\Windows\system32\napinsp.dll
LoadedModule[166]=C:\Windows\System32\winrnr.dll
LoadedModule[167]=C:\Windows\system32\NLAapi.dll
LoadedModule[168]=C:\Windows\System32\netapi32.dll
LoadedModule[169]=C:\Windows\System32\SAMCLI.DLL
LoadedModule[170]=C:\Windows\System32\SAMLIB.dll
LoadedModule[171]=C:\Windows\System32\DSROLE.dll
LoadedModule[172]=C:\Windows\System32\win32spl.dll
LoadedModule[173]=C:\Windows\System32\WINSTA.dll
LoadedModule[174]=C:\Windows\System32\CRYPTSP.dll
LoadedModule[175]=C:\Windows\system32\rsaenh.dll
LoadedModule[176]=C:\Windows\System32\CRYPTBASE.dll
LoadedModule[177]=C:\Windows\System32\bidispl.dll
LoadedModule[178]=C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.3053_none_7de042968342015d\Comctl32.dll
LoadedModule[179]=C:\Windows\System32\tcpmib.dll
LoadedModule[180]=C:\Windows\System32\mgmtapi.dll
LoadedModule[181]=C:\Windows\system32\kerberos.DLL
LoadedModule[182]=C:\Windows\System32\logoncli.dll
LoadedModule[183]=C:\Windows\System32\NTDSAPI.dll
LoadedModule[184]=C:\Windows\System32\DSPARSE.dll
LoadedModule[185]=C:\Windows\System32\ACTIVEDS.dll
LoadedModule[186]=C:\Windows\System32\adsldpc.dll
LoadedModule[187]=C:\Windows\System32\WLDAP32.dll
LoadedModule[188]=C:\Windows\system32\adsldp.dll
LoadedModule[189]=C:\Windows\SYSTEM32\sxs.dll
LoadedModule[190]=C:\Windows\System32\PrintFilterPipelinePrxy.dll
LoadedModule[191]=C:\Windows\System32\WTSAPI32.dll
LoadedModule[192]=C:\Windows\System32\DriverStore\FileRepository\prnms003.inf_amd64_77a61bf47994a611\Amd64\PrintConfig.dll
LoadedModule[193]=C:\Windows\SYSTEM32\prntvpt.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
FriendlyEventName=Stopped working
ConsentKey=APPCRASH
AppName=Spooler SubSystem App
AppPath=C:\Windows\System32\spoolsv.exe
NsPartner=windows
NsGroup=windows8
ApplicationIdentity=34F686485130008011812755AF0CA5D8
MetadataHash=-559778176

Answer 4

Hi,

You might need to capture some dumps or traces to further investigate the issue, which I suggest to contact Microsoft Customer Support and Services where more in-depth investigation can be done so that you would get a more satisfying explanation and solution to this issue.
 
You may find phone number for your region accordingly from the link below:
Global Customer Service phone numbers
https://support.microsoft.com/en-us/help/4051701/global-customer-service-phone-numbers

Thanks,

Eleven

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 5

Hi

The first error you posted show a import error from a citizen's driver. It's not the root cause of the spooler crash you have IMO.

The last log you pasted show that probably a printer monitor maked the spooler crash.

**

Faulting module path: C:\Windows\System32\wsnmp32.dll

**

You need to update a drivers, the question is, which's one ? To find it disable the printer monitor on your printqueue to find the bad monitor, you will have to disable biderectional support on each print queue to test out. Disabling that remove the advanced monitor from the driver.

Important; If you can get a crash dump it would help, as it will more pin-point to the bad print monitor directly.

Last thing you can try to is to set isolated the print driver. If a driver crash, it will only crash the bad driver.