Hi All, We have a production CAS server n which there are multiple instances of this process w3wp.exe running and each process shows an increasing pattern in the memory usage everyday. Say yesterday i saw all the instances use about close to 123456 kb, today when i monitor the same process i still see mutiple instances of this process and increased memory usage than yesterday. This keeps using more n more memory everyday causing memory fragmentation where i recieve alerts saying 92% memory used and this process is the culprit. Tried capturing dumps etc but when ever we try to do some kind of dump capturing it resets and goes back to zero and starts builing up in terms of memory usage.Iwas told by MS to runEXBPA and we found that TCPIP.SYS is at a older version. So i updated this by installing kb950224 which did not fix this issue. After some amount of "binging" i found the below article, http://support.microsoft.com/kb/916984/en-usHowever when i navigate to the path mentioned HKLM\Current Control Set\System\Services\ASP\i do not see parameters instead i hav a folder named performance under this. So dont know how i can test this. Apart from this if there is anything else which i should try and which will fix the issue, please feel free to add your comments here. Thanks Shiv

Hi Shiv,How much RAM you are using and did you created page file RAM + 10 manner. If not the please increase page file and check performance further.This behavior is very true with exchange 2007 mailbox server role OR in CCR model as exchange use as much memory it has and leave if other process nee this. but as you have mentioned this server is CAS role then please try to generate full DUMP of this server and check whether any memory leake is occuring or any wrong drive casuing the issue. Hope this will help you to troubleshoot further.Anil

Hi, This problem might be occurring when transfer ASP pages to clients from server. Please read below TechNet KB article to get solution.FIX: You experience high memory usage in the W3wp.exe process on a Windows Server 2003-based computer that has Internet Information Services (IIS) 6.0 installed ============================================================================================================http://support.microsoft.com/kb/916984 Regards

Is the server running anything else than Excahnge? perhaps AV? if so, take a look at this http://technet.microsoft.com/en-us/library/bb332342.aspxlasse at humandata dot se, http://anewmessagehasarrived.blogspot.com

Hi Shameera, I was refering to the same article in the original post and the problem is i do not see the same folder structure in registry editor when i navigate to that path where i have to create a DWROD. Thanks Shiv

Hi Pettersson, Yes, we have Symantec Anti virus.However, there are exclusions configurednot to scan exchange processes and coming to CAS server and looking at this issues w3wp.exe do you suggest to configure exclusions on IIS process as well. Thanks Shiv

if you can do exclusion on processes, exclude them according to the article above.If I remember correct aymantec has a hook into the network stack, try to disable that feature or uninstall it.Have seen issiues with AV having this hook and simply disable it dont do work. It has to be uninstalled.lasse at humandata dot se, http://anewmessagehasarrived.blogspot.com

Shiv, The first thing I thought of (and no one else mentioned this) is whether or not you have fully patched this server with the newest Windows service pack and hotfixes and if you have moved Exchange to E2K7 SP1 with RU8. I am assuming you have since you said you have talked to Microsoft, but I'm also assuming that you have a PSS case open. If you are not getting resolution from Microsoft PSS on this, ask to have the case escalated. Jim McBee - Blog - http://mostlyexchange.blogspot.com

Hi Jim,Yeah pretty much all latest windows patches, and on roll up 6. Yes a case opened since past 4-5 months with not much progress. Basically i wanted to figure out how i can go about with the above article.how to create a DWORD.ThanksShiv

Shiv,Do you see the KB 916984 applied on your server already? If yes then creating the DWORD value under the given key should not be very much complex and should not also take you through many complexities. Yeah, make sure you back up the registry before you do anything with it :)As far as you are setting up the key value is concerned you should be okay going and checking the biggest web page in your virtual directory and set the value according to KB guidlines. I remember a case I worked on and an IIS engineer completely disabled the feature. A very good article (http://blogs.msdn.com/rahulso/archive/2007/11/08/vectorsendthrottlelimit-in-iis-shall-we-shan-t-we.aspx) will give you an overview of how it works.MMilind Naphade | MCTS:M | http://www.msexchangegeek.com

Hi Shiv,I suggest you keep on working with our PSS on this issue. At the same time, please install the latest update for Exchange 2007 SP1: rollup 8http://www.microsoft.com/downloads/details.aspx?FamilyID=e1f5c8b2-c4f2-4eba-849b-e464d4f2869c&displaylang=enYou also can write a post on our IIS forum to see if some one can help:http://forums.iis.net/Thanks,Elvis