Exchange 2013 - w3wp.exe consuming large amount of memory

Hi,

I have Exchange 2013 with all roles installed on it.  It has 16 GB memory, but the w3wp.exe process is using 9 GB of this.  This is causing the DBs to be written to page file.

Is there anything I can do to get this under control? Could it be due to remote powershell?



February 23rd, 2014 4:02pm

Hi

Which CU are you on? Check you active sync devices as iphones etc. can cause this.

What errors do yo have logged in event viewer?

Lastly, does your page file reside on a different DB other that the C:\ drive? is your DB also located on this DB?

Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2014 11:46pm

Post the event related to w3wp.exe which is causing the issue.

February 24th, 2014 12:32am

I am on CU3, upgraded 2 weeks ago from CU1. How do you mean check them, exactly? We haven't any issues with the devices.

Page file is on the C:, exchange is installed on the E:  All DBs are on E:

Errors in the log I see:

Event code: 3001

Event message: The request has been aborted.

Event time: 24/02/2014 5:01:52 p.m.

Event time (UTC): 24/02/2014 4:01:52 a.m.

Event ID: a55e3c0d53174c34a212b6ba70f00541

Event sequence: 8

Event occurrence: 7

Event detail code: 0

Application information:

    Application domain: /LM/W3SVC/2/ROOT/Rpc-2-130375496104930879

    Trust level: Full

    Application Virtual Path: /Rpc

    Application Path: C:\Windows\System32\RpcProxy\

    Machine name: EXCHANGE2013

Process information:

    Process ID: 20752

    Process name: w3wp.exe

    Account name: NT AUTHORITY\SYSTEM

Exception information:

    Exception type: HttpException

    Exception message: Request timed out.

Request information:

    Request URL: https://exchange2013.mydomain.com:444/rpc/rpcproxy.dll?localhost:6001

    Request path: /rpc/rpcproxy.dll

    User host address: 192.168.1.66

    User: NT AUTHORITY\SYSTEM

    Is authenticated: True

    Authentication Type: Negotiate

    Thread account name: NT AUTHORITY\SYSTEM

Thread information:

    Thread ID: 157

    Thread account name: NT AUTHORITY\SYSTEM

    Is impersonating: False

    Stack trace:

Custom event details:

Event 5189, WAS

The Windows Process Activation Service failed to generate an application pool config file for application pool 'MSExchangeOWACalendarAppPool'. The error type is '7'. To resolve this issue, please ensure that the applicationhost.config file is correct and recommit the last configuration changes made. The data field contains the error number.

Event 5, MSExchange Workload Management

The description for Event ID 5 from source MSExchange Workload Management cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

MdbLatency(MailDB)

23/02/2014 3:52:09 p.m.

00:24:56.1886143

the message resource is present but the message is not found in the string/message table



 
Free Windows Admin Tool Kit Click here and download it now
February 24th, 2014 1:13am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics