event id 2004

Question

I get event ID 2004 (Resource exhaustion Detector) on DCs. Isass.exe consumes more memory. I am forced to restart the DC. Pl advice

Answer 1

I need event files as there are many details in those event files.

Answer 2

windows successfully diagnosed a low virtual memory condition. the following programs consumed the most virtual memory: lsass.exe (728) consumed 17000730624 bytes, mcshield.exe (3388) consumed 298975232 bytes, and dns.exe (2540) consumed 116981760 bytes.

This is the details

Answer 3

Hi SAzzam

Greetings! I am Vijay, an Independent Advisor. To start the diagnosis, I would like to see your event log. Post entries corresponding to this event and few minutes preceding this event in Event Logs.

Windows Key+R > Type eventvwr and Enter > See if any event corresponding to your date and time is there (Look under all entries under Windows Logs such as System, Application, Security...) > If yes, right click on a starting event, press shift key and select an end event > Right click and Save Selected Event > Save as Type should be Event Files (*.evtx)

Zip all event files which correspond to your event, upload them to Onedrive and share the link here.

HOW TO UPLOAD TO ONEDRIVE

1. Login to https://onedrive.live.com/ utilizing the same Login ID and Password which you have used on this forum. (or use the installed Onedrive on your computer)
2. Click Upload in the top OR drag and drop the file here.
3. After uploading, right click the file and choose share.
4. Click Copy Link.
5. Copy the link and paste the link here.