Windows 10: high Utilization of Memory by process svhost and keep on increase utilization of RAM

high Utilization of Memory by process svhost and keep on increase utilization of RAM

:)

 

Windows server 2016 RAM utilization Increasing

I have windows server 2016 Datacenter. I noticed that on our server the RAM utilization keeps going up until it gets to about 94-97% at which point everything become extremely slow or completely non-responsive.
We reboot the server, the RAM utilization goes down to but then starts increasing again. I configure this server as my VPN server. When ever i disable VPN services, server is functioning
fine and no increasing of RAM again. Could you please suggest any techniques that would help us determine what is causing this increase in RAM utilization and what is root cause?

 

Extremely High RAM utilization, high Paged Pool

The issue started in mid-February when I received multiple warnings and critical alerts from my RMM software for several PCs I administer - the RMMs settings for RAM alerts are a warning at 85% and critical at 90%.
All of these systems have been deployed for over 2 years and I've never had any of them give high memory alerts before. Now, of the 12 PCs in the office, 10 PCs are going to critical alert with the RAM use slowly creeping up over a 4+ day period. The users are complaining of the PCs becoming slow, lagging, or unresponsive. A reboot tends to make the PC usable again until the RAM gets critical again.


Image 1 is RMM metrics from a users PC showing RAM (purple line) before the issues started, and after February 12th, the RAM creeping to +90% after the issues started
Image 2 is a current image of the RMM metrics for the last month









To make the issue more obvious, here is an image from our conference room Intel NUC, that is idle most of the time. I know that the spikes are the right side are while the PC was mostly idle and I was rebooting the PC to get the RAM to drop:




To help you understand some of the things I have tried, here are samples of the alerts I got from my RMM software:











As I mentioned above, I have 10 PCs, some are idle, having this issue. I have 2 actively used PCs that are NOT having the issue. In trying to troubleshoot, I have basically compared the idle systems with the issue to the 2 active user PCs that are not having the issue.
Here are images from Process Explorer, Task Manager and RAMMAP from an idle system that is having the issue:










Initially seeing epsecurityservice at the top of Process Explorer and in the RMM alert, I thought BitDefender Endpoint Security (GravityZone) was the issue. I applied a “disable” policy to BitDefender on an idle system and the issue did seem to stop after a reboot.

HOWEVER, seeing svchost in the list, I also tried a Clean Boot, but disabled everything EXCEPT BitDefender and my RMM software so I could continue to connect to the system.

Again, the issue seemed to stop with a Clean Boot and BitDefender still enabled.

So I compared Process Explorer metrics for a system with the issue and one that doesn’t have the issue and found that epsecurityservice.exe had roughly the same RAM use between the two systems… and the numbers were not increasing steadily over time.
This made me think BitDefender isn’t the issue but perhaps something it uses in the OS.

So I then looked at RAMMAP and Task Manager, and that is when I saw the extremely high Paged Pool on the idle system and a relatively small Paged Pool on the system in use. So I checked all the systems with the issue and they all have extremely high paged pools, even on systems that have been rebooted and left idle for days.

Here are screenshots of for one of my systems that is not having the RAM issue:










And just for a comparison reference, here is what my RMM metrics for RAM look like on one of my PCs that doesn't have the issue:





Here is a quick rundown of these systems configurations which is making it hard to determine if it is a driver issue since 4 different configurations are having the issue:





I'm not sure whether the huge Page Pool is okay, but it doesn't seem normal when compared to how my RAM utilization is for the 2 systems that are not having any issues.

If anyone has suggestions on what else I should try to resolve this, I’d greatly appreciate it.

If you want more information, please give me step-by-step simply to save time – I don’t want to waste any time assuming I know what you want and giving you the wrong info.

Thanks in advance for the help!!

 

Windows 10 High Memory(RAM) utilization at idle issue

Recently I'm finding out that there is very high ram utilization after keeping the windows on for a long time. I have 16GB of RAM and still some times I get error message about low memory(RAM) remaining. That is all 16GB RAM in use even if my computer
is sitting idle. This is big of an issue which is need to be sorted out fast,as it is affecting performance in other applications.