?????. ?? ??????? ???? ??????.

?? ??? ????? BSOD? ??? ??? ??? ? ?? Register? ???? ?? ??? ???? ??? ?? ???? ??? ? ?? VMware ??? ?? ?? VM??? CPU? ?? ??????.

VMware ?? ????? ??? ?? KB? Release ?? ????. ?? Virtualization ??? CPU? ????? MMU(Memory management unit) ?? Virtualization? ???? ???? ? ??? ??? ?? ?? VM ??? ??? ??? Register? ??? ?? ????.

????? ??? ???? ???? CPU? BIOS? ?????? ???.

Machine ID Information [From Smbios 2.4, DMIVersion 0, Size=17062]
BiosMajorRelease = 4
BiosMinorRelease = 6
FirmwareMajorRelease = 0
FirmwareMinorRelease = 0
BiosVendor = Phoenix Technologies LTD
BiosVersion = 6.00
BiosReleaseDate = 08/16/2013
SystemManufacturer = VMware, Inc.
SystemProductName = VMware Virtual Platform
SystemVersion = None
BaseBoardManufacturer = Intel Corporation
BaseBoardProduct = 440BX Desktop Reference Platform
BaseBoardVersion = None

[CPU Information]
~MHz = REG_DWORD 2593
Component Information = REG_BINARY 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
Configuration Data = REG_FULL_RESOURCE_DESCRIPTOR ff,ff,ff,ff,ff,ff,ff,ff,0,0,0,0,0,0,0,0
Identifier = REG_SZ Intel64 Family 6 Model 45 Stepping 2
ProcessorNameString = REG_SZ Intel(R) Xeon(R) CPU E5-2650 v2 @ 2.60GHz
Update Signature = REG_BINARY 0,0,0,0,17,4,0,0
Update Status = REG_DWORD 2
VendorIdentifier = REG_SZ GenuineIntel
MSR8B = REG_QWORD 41700000000

Windows 2008 R2 and Solaris 10 64-bit virtual machines blue screen or kernel panic when running on ESXi 5.x with an Intel E5 v2 series processor (2073791)
https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2073791

?????.

?????. ?? ??????? ???? ??????.

?? ??? VM Live Migration ? ??? ? VM? ???? ?? Hyper-V Host ??? BSOD? ???? ??? Crash?? ??? ?? ??? ??? ??????.

??? ??? ????? Live Migration ?? ?? ??? Kernel ?? ?? ??? ????? ??? Kernel Stack? ??? ?(x64? 24KB, x86? 12KB)? ???? ?? Bugcheck 7F? ???????.

12: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: ffffd000f9fcba30
Arg3: ffffd00101663fd0
Arg4: fffff8009484c28c

????? Bugcheck 7F? ?? Stack Overflow? ?? DOUBLE_FAULT? ??? ??? ?????.

? ? ??? Stack Overflow? ???? ?? AntiVirus ???? CreateFile ?? Operation? Recursive?? ????? ?? ????, ??? ??? ???? ?? ??? ?????? ??? ?? ????.

?? ??? ?????, Hyper-V ??? ????? ????? AntiVirus ???? ?? ??? ?????? ????.

Microsoft Anti-Virus Exclusion List

https://social.technet.microsoft.com/wiki/contents/articles/953.microsoft-anti-virus-exclusion-list.aspx

Hyper-V: Anti-Virus Exclusions for Hyper-V Hosts

https://social.technet.microsoft.com/wiki/contents/articles/2179.hyper-v-anti-virus-exclusions-for-hyper-v-hosts.aspx

?????.

?????. ?? ??????? ???? ??????.

Windows Server backup feature? ???? Backup? ?? ?? Access Denied? ???? ?? ??? ?? ?? ??? ?????? ????.

1. V3? ?????? ??? ?? ??? ??? ? ??? ??? ??? ???? ????.

2. Process Monitor? ????? ??? ???? ?? ??? ????? ????.

3. ?? C:\Windows\Logs\WindowsServerBackup ?? ?? ?? ??? ????? ?? ???? Access Denied? ??? ?????.

4. Process Monitor?? ??? ??? ??? ?? ??? Filtering ?? Call Stack? ?????.

?? ???? ?? ??? NetClient? ???? ?? ?? ??? ?? ?? ???? CreateFile API? NetClient Driver?? ReadFile? ???? ??? ?? ??? ?????.

?????.

WMI ??? (Winmgmt)? ????? Svchost.exe ? WmiPrvse.exe ????? Memory ??? ?? ?? High CPU usage ? ?? ??? ? ? ?? ?????.

Windows Server 2012 R2
----------------------
WmiPrvSE.exe leaking memory on 2012 R2 with DNS Role
Applications or services freeze when you monitor a DNS server in Windows 8.1 or Windows Server 2012 R2
https://support.microsoft.com/kb/2954185

SCVMM 2012 R2
-------------
Update Rollup 3 or later for System Center 2012 R2 Virtual Machine Manager
https://support.microsoft.com/kb/2965414/en-us

Windows Server 2012
-------------------
Wmiprvse.exe memory leak when a program queries disk or partition storage information in Windows Server 2012
https://support2.microsoft.com/kb/2995478/en-us
=> December Update rollup for Windows 8, 2012 R2

High memory usage by the Wmiprvse.exe process in a Windows Server 2012 cluster
https://support2.microsoft.com/kb/2935616/en-us
=> March Update rollup for Windows 8, 2012 R2

Memory leak occurs in the Svchost.exe process that hosts the WinMgmt service in Windows Server 2012
https://support2.microsoft.com/kb/2793908/en-us
=> March Update rollup for Windows 8, 2012 R2

SQL Server 2012
---------------
FIX: Memory leak for WmiPrvSe process when you use a SQL Server 2012 PDW V2 AU 0.5 appliance
Hyper-V manager cannot manage nodes, "out of memory or disk", ...
=> Contact Microsoft

Windows Server 2008 / 2008 R2
-----------------------------
High memory usage by the Svchost.exe process after you install Windows Management Framework 3.0 on a Windows-based computer
https://support.microsoft.com/kb/2889748/en-us

FIX: A memory leak in the WmiPrvSe.exe process occurs when you use the RDS WMI provider in Windows 7 SP1 or Windows Server 2008 R2 SP1
https://support.microsoft.com/kb/2876748/en-us

Memory leak occurs in the Wmiprvse.exe process in Windows 7 or Windows Server 2008 R2
https://support.microsoft.com/kb/2832248/en-us

SCOM 2012 / 2012 R2
--------------------
System Center 2012 Operations Manager: Recommended agent operating system fixes and updates
https://support.microsoft.com/kb/2843219/en-us

Thx.

?????. ?? ??????? ???? ??????.

??? Highly Avaiable ??? Virtual Machine?? PassThrough Disk? ????? ? ? ???? ???? ?????.

??, ??? ?? ??? ??? ???? ???? ??? ??? 2012??? ???? ?? ??? ?? ? ???? ??? ????????? ??? ? ??? ??? ????

1. VM ?? ??

2. PassThrough Disk ??

- PassThrough Disk? Host ???? Offline ??? ???? Partition? ???? ????.

3. PassThrough Disk? Cluster Disk Resource? ??

4. ??? Disk? ???? ??? VM? PassThrough Disk? ??

5. ??? Disk? VM? ???? ?????? ??

6. VM??? PassThrough Disk ?? ?? ??

7. Partition ?? ? Live Migration ??? ?? ?? ?? ??

- Partition ?? ? ??? ?? ? ??? ?????.

- ?? ??? Live Migration ? ?????.

- Live Migration ??? ????? PassThrough Disk? ??? ??? ? ????.

?????.

?????. ?? ??????? ???? ??????.

??? Hyper-V? ?????? ??? Best Practices ???? ?? ???????.

?? ??? ??? ??? ?? ??? ? ??? ????? ????.

?????.

?????. ?? ??????? ??? ????? ??? ???.

??? ????? Windows Server 2003 ?? Windows Server 2012 R2 ? ????? ? ??? ?? ?? ?? ??? ?? ????? ?? ??? ???? ??? ? ??? ??? ?????? ???? ? ?? ??? ?? ?? ????.

[?? ??]

1. ??? ?? ?? / ??????? ??? ??? ??? ??? ?? ???? ?? ???.

Event ID: 4
Source: Kerberos
Type: Error
"The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/myserver.domain.com.  This indicates that the password used to encrypt the Kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (domain.com), and the client realm.   Please contact your system administrator."

2. ??? ???? ??? ? ??? ?? ?? ???? ?? ??? ???? ?? ????.

3. ?? ???? ???? ???? ???? ? ?? ?? ???? ?? ???.

[?? ??]

Windows Server 2008 R2 / Windows 7 ?? DES-CBC-MD5 ? DES-CBC-CRC ???? ???? ?? AES256-CTS-HMAC-SHA1-96, AES128-CTS-HMAC-SHA1-96, RC4-HMAC ????? ???? ???.

??? AD ??? Windows Server 2012 R2?? Domain Member ? Windows Server 2008 / Windows Server 2008 R2 / Windows Server 2012 / Windows Server 2012 R2  ?? Windows Vista / Windows 7 / Windows 8 / Windows 8.1 ? ?? ??? ??? ?? ?? ?? ?? AES ? ??? ???? ?? ?? ??? ?? ??? ?????.

Changes in Kerberos Authentication

https://technet.microsoft.com/en-us/library/dd560670(v=WS.10).aspx

[?? ??]

1. ??? ????? ?? hotfix ? ?? ???.

Can't log on after changing machine account password in mixed Windows Server 2012 R2 and Windows Server 2003 environment

https://support.microsoft.com/kb/2989971

2. KB2989971? 2014? 9? ???? ??? ?? ?? ????.

9? ???? ??? ?? ?? ?? KB2989971 ? ?? ???.

Windows RT 8.1, 8.1 Windows ? Windows Server 2012 R2 2014 ? 9 ? ???? ??

https://support.microsoft.com/kb/2984006

[?? ??]

It turns out that weird things can happen when you mix Windows Server 2003 and Windows Server 2012 R2 domain controllers

https://blogs.technet.com/b/askds/archive/2014/07/23/it-turns-out-that-weird-things-can-happen-when-you-mix-windows-server-2003-and-windows-server-2012-r2-domain-controllers.aspx

?????.

?????. ?? ??????? ???? ??????.

??? ???? Cluster? Quorum Model?? ??? ??? Witness? ???? ???? FileShare? Disk witness? ???? ??? ????? ?????.

FileShare witness? ??? Multi-Site Cluster? ???? ? ?????. ????? Exchange ?? ??? ?????? ?? ??????.

FileShare witness? ???? ?? ??? ???? ?? ??? Witness.log ??? ???? ? Log ??? ?? Quorum Model? ???? ?? ? ?? Vote? ???? ???.

Disk witness? physical disk resource ? ??? ???? Cluster Database? Copy ?? ???? ???.

???, Quorum Model? ???? Node and Disk Majority? Node and File Share Majority? ??? ??? ?????

??? ??? Model? ? ?????

??, Fileshare witness? ???? ? ??(A? B)? ??? Cluster? ????????.

A ??? ??? ??(Shutdown ?? Crash)? ????? B ??? ????? Cluster service? ??? ???.

? ?, Cluster? ??? ????? ???? ???? ??? ???? ?? Cluster Database? ??? ???? ??? ?? ??? ????? ???.

??? ??? Fileshare witness?? ??? ??, Witness.log ??? Timestamp ?? Update ?? ???.

? ???? B ??? ???? A ??? ?????, A ??? Cluster service? ??? Cluster Database? ??? Witness.log ??? Timestamp? ???? ???.

? ?, Fileshare witness? Timestamp? ?? Update ? ???? A ??? ?? ??? ??? ?? ??? ?? A ??? Cluster service? ??? ?????.

??? Prevent Partition-in-Time ??? ???. ?, ??? ???? ?? ??? ?? ??? ??? ???? ????.

??? ??? ???? Disk witness? ???? ???? ??? ????

Disk witness? ???? Disk?? Cluster Database? ???? ?? ????. ??? A ??? Cluster service? ??? ? ?? ??? ??? ???? Disk witness? ?? Cluster Database? ???? ??? ?? ??? Update ?? ???.

???, A ??? Cluster service? ????? ??? ????.

??? Solve Partition-in-Time ??? ???. ?, ??? ???? ?? ??? ??? ?? ???? Cluster service? ????? ????? ???? ????.

????? ?? Multi-Site ?? Shared Physical Disk? ??? ? ?? ??? ???? Solve Partition-in-Time ??? ???? Disk witness? Quorum Model? ????? ?? ?? ???????.

?????.

?????. ?? ??????? ???? ??????.

Hyper-V?? Network Virtualization? ????? ?, ?? ??? ???? ?? ?? Step ?? ?? ??? ?? ??? ?????? ????.

Network Monitor? ???? Message Analyzer?? NVGRE ??? ??? ??? ????? ??, ? ??? ?? ?????? ?????.

1) Stop the agent on the host.

net stop scvmmagent

2) On Host, Start Net trace

netsh trace start persistent=yes provider=Microsoft-Windows-WNV provider=Microsoft-Windows-Hyper-V-VmSwitch provider=Microsoft-VirtualMachineManager-DHCPServer tracefile=C:\NetTrace.etl

3) On Host, Clean up all the lookup records

Get-NetVirtualizationLookupRecord | Remove-NetVirtualizationLookupRecord

Get-NetVirtualizationProviderAddress | Remove-NetVirtualizationProviderAddress

4) Start the agent.

net start scvmmagent

5) Repro

6) Stop the trace.

netsh trace stop

7) Convert ETL to TEXT File

netsh trace convert C:\NetTrace.etl C:\NetTraceOutput.txt

[?? ?? ?? ???]

Get-VMNetworkAdapter * | fl VMName, MacAddress, VirtualSubnetID, SwitchName

Get-NetVirtualizationProviderAddress

Get-NetVirtualizationProviderRoute

Get-NetVirtualizationCustomerRoute

Get-NetVirtualizationLookupRecord

?????.

?????. ?? ??????? ???? ??????.

??? Windows Server 2012?? ??? ?? ? ?? ?? ?? ?????.

?? ?? ??? ??? ?? Windows Server? ???? ?? Performance Monitor? ??? ??? ??? ? ????.

????? Processor, Process, Memory, Disk, Network?? ???? ?? ???? ?? ??????.

????, ??? ?? ??? ? ? ? ?? ?? ?? ?? ??? ?? ????.

Windows Server 2012?? ??? ???? ??? ???? ?? ??? ???? ??? ????.

?? Performance Monitor?? Log ???? ??? Collector Set? ?? ??? Task Scheduler? Task? ???? ?????.

??? ?? Task Scheduler?? ???? ???? ??? Collector Set? ??? ??? Task? ??? ??? ? ????.

Task Scheduler –> Task Scheduler Library –> Microsoft –> Windows –> PLA

???? ?? Task? ??? ?? Settings Tab? ??? ?? ??? ????.

?? ?? ????? ????? ?? ? ?????.

?? ?? 3? ?? Task? ???? ?? Stop? ??? Option? ???? ?? ??? ???(3? ??) ?? ??? ????? ??????

3? ??? ???? ?? ???.

?? ??? ?????? Data Collector Set? ???? ??? Task Scheduler?? ? ??? Uncheck ??? ? ?? ????.

??? Windows Server 2012 R2??? ????? ?? ??? Uncheck ?? ?? ??? ?????.

?????.