Windows server Datacenter 2022 memory usage - svchost using lots of memory and creating instability

NicolasWR 0 Reputation points
2024-04-08T19:50:50.9733333+00:00

We are experiencing memory issues with some of our environments running on VMs and using Windows server Datacenter 2022.

We see a svchost.exe process using a lot of memory and creating instability (low memory available, cannot RDP, pagefile memory at 99% full). Impact is high since environments become unresponsive. Our current workaround is to reboot the OS.

additional info:

  • Some of our environments are affected, and some environments appear to not be affected at all.
    The process having issues is SVCHost.exe (netsvc -p). I attached a csv file with some information on the process with its memory usage
  • we found some similar issues reported and associated with the User Access Logging Service (UALSVC), we disabled that service and are still seeing the issues.
  • OS version : 21H2, build 20348.2340 (Windows Server 2022 Datacenter)

We're obviously looking for a solution to this issue, any help appreciated thank you.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,181 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Wesley Li 5,040 Reputation points
    2024-04-10T02:08:29.5633333+00:00

    Hello

    Is the machine joined to the domain? Did the issue persist after reboot?

    If the machine is joined to the domain and if it is possible, please remove the machine from the domain temporarily to verify whether the issue is related to the domain polices.

    For advanced trobleshooting, we could open administrator command line and run "tasklist /svc" then check the svchost process according to the process ID. Usually the svchost may include several services in the same host.

    Sc config netsvc start= disabled

    Net stop netsvc

    Sc config netsvc type= own

    Sc config netsvc start= auto

    Net start netsvc

    If we have isolated the problematic svchost service, then we could check the process memory detailed information with WPR tool.

    Here is a link for reference:

    Exercise 1 - Identify Processes with Large Working Sets | Microsoft Learn

    Or we could try to collect a dump file for the process from the task manager control panel. Open the dump with windbg tool and check the callstack for the process.

    Troubleshooting this issue may be complex, the technet forum resource is limited. It is recommended to open a tick for more resources.

    For general troubleshooting, we could ensure the machine get the latest updates.

    March 22, 2024—KB5037422 (OS Build 20348.2342) Out-of-band - Microsoft Support

    0 comments