Can anyone explain this - just done latest updates and we are seeing this all of a sudden???
Log Name: System
Source: Microsoft-Windows-Resource-Exhaustion-Detector
Date: 25/05/2022 14:51:00
Event ID: 2004
Task Category: Resource Exhaustion Diagnosis Events
Level: Warning
Keywords: Events related to exhaustion of system commit limit (virtual memory).
User: SYSTEM
Computer: RDServer.domain.local
Description:
Windows successfully diagnosed a low virtual memory condition. The following programs consumed the most virtual memory: EXCEL.EXE (10900) consumed 777068544 bytes, chrome.exe (3180) consumed 669032448 bytes, and OUTLOOK.EXE (6232) consumed 594403328 bytes.
Event Xml:
[code=markup]<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Resource-Exhaustion-Detector" Guid="{9988748e-c2e8-4054-85f6-0c3e1cad2470}" />
<EventID>2004</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>3</Task>
<Opcode>33</Opcode>
<Keywords>0x8000000020000000</Keywords>
<TimeCreated SystemTime="2022-05-25T13:51:00.416685500Z" />
<EventRecordID>125741</EventRecordID>
<Correlation ActivityID="{46fca49f-0ba0-47cc-be02-46d6e22177f3}" />
<Execution ProcessID="19408" ThreadID="22800" />
<Channel>System</Channel>
<Computer>RDServer.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<MemoryExhaustionInfo xmlns="http://www.microsoft.com/Windows/Resource/Exhaustion/Detector/Events">
<SystemInfo>
<SystemCommitLimit>51321536512</SystemCommitLimit>
<SystemCommitCharge>51080556544</SystemCommitCharge>
<ProcessCommitCharge>10901254144</ProcessCommitCharge>
<PagedPoolUsage>870158336</PagedPoolUsage>
<PhysicalMemorySize>34356629504</PhysicalMemorySize>
<PhysicalMemoryUsage>13538492416</PhysicalMemoryUsage>
<NonPagedPoolUsage>309043200</NonPagedPoolUsage>
<Processes>301</Processes>
</SystemInfo>
<PagedPoolInfo>
<Tag_1>
<Name>MmSt</Name>
<PoolUsed>239884176</PoolUsed>
</Tag_1>
<Tag_2>
<Name>Ntff</Name>
<PoolUsed>117180800</PoolUsed>
</Tag_2>
<Tag_3>
<Name>FMfn</Name>
<PoolUsed>58875968</PoolUsed>
</Tag_3>
</PagedPoolInfo>
<NonPagedPoolInfo>
<Tag_1>
<Name>File</Name>
<PoolUsed>42805520</PoolUsed>
</Tag_1>
<Tag_2>
<Name>MmCa</Name>
<PoolUsed>36151744</PoolUsed>
</Tag_2>
<Tag_3>
<Name>Ntfx</Name>
<PoolUsed>35786272</PoolUsed>
</Tag_3>
</NonPagedPoolInfo>
<ProcessInfo>
<Process_1>
<Name>EXCEL.EXE</Name>
<ID>10900</ID>
<CreationTime>2022-05-18T10:23:48.591933300Z</CreationTime>
<CommitCharge>777068544</CommitCharge>
<HandleCount>2807</HandleCount>
<Version>16.0.15128.20248</Version>
<TypeInfo>65</TypeInfo>
</Process_1>
<Process_2>
<Name>chrome.exe</Name>
<ID>3180</ID>
<CreationTime>2022-05-18T18:19:29.741485800Z</CreationTime>
<CommitCharge>669032448</CommitCharge>
<HandleCount>16729</HandleCount>
<Version>101.0.4951.67</Version>
<TypeInfo>66</TypeInfo>
</Process_2>
<Process_3>
<Name>OUTLOOK.EXE</Name>
<ID>6232</ID>
<CreationTime>2022-05-18T13:03:46.169553200Z</CreationTime>
<CommitCharge>594403328</CommitCharge>
<HandleCount>16177</HandleCount>
<Version>16.0.15128.20248</Version>
<TypeInfo>67</TypeInfo>
</Process_3>
<Process_4>
<Name>firefox.exe</Name>
<ID>19956</ID>
<CreationTime>2022-05-24T18:21:28.965202400Z</CreationTime>
<CommitCharge>486637568</CommitCharge>
<HandleCount>905</HandleCount>
<Version>45.2.0.5996</Version>
<TypeInfo>136</TypeInfo>
</Process_4>
<Process_5>
<Name>OUTLOOK.EXE</Name>
<ID>15304</ID>
<CreationTime>2022-05-24T17:24:42.219021000Z</CreationTime>
<CommitCharge>313401344</CommitCharge>
<HandleCount>5831</HandleCount>
<Version>16.0.15128.20248</Version>
<TypeInfo>144</TypeInfo>
</Process_5>
<Process_6>
<Name>EXCEL.EXE</Name>
<ID>6852</ID>
<CreationTime>2022-05-25T13:44:26.571443100Z</CreationTime>
<CommitCharge>287985664</CommitCharge>
<HandleCount>1758</HandleCount>
<Version>16.0.15128.20248</Version>
<TypeInfo>152</TypeInfo>
</Process_6>
</ProcessInfo>
<ExhaustionEventInfo>
<Time>2022-05-25T13:51:01.444295100Z</Time>
</ExhaustionEventInfo>
</MemoryExhaustionInfo>
</UserData>
</Event>[/code]
Posted by: Lemonde - 30 May 2022 08:47:50
This means that a user has run out of space for their user profile on the RDS server and that the system has closed some of their applications.
Have you had a look at the latest updates you have installed? you may want to think about removing them...
