Good morning, I have a Windows Server 2003 SP2 x86 which has BSOD with the following error 1003 in the event log. Reason Code: 0x805000f Bug ID: Bugcheck String: 0x000000c2 (0x00000007, 0x0000121a, 0x44090014, 0xbc3327b0) I have the minidump and have run this through Windbg and here is the result WARNING: Whitespace at end of path element Microsoft (R) Windows Debugger Version 6.12.0002.633 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Documents and Settings\conlonr\Desktop\DD310CTX - MiniDump\Mini032911-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available WARNING: Whitespace at end of path element Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols Executable search path is: Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (8 procs) Free x86 compatible Product: Server, suite: TerminalServer Built by: 3790.srv03_sp2_gdr.080813-1204 Machine Name: Kernel base = 0x80800000 PsLoadedModuleList = 0x808af9c8 Debug session time: Tue Mar 29 14:11:03.218 2011 (UTC + 1:00) System Uptime: 0 days 10:24:29.659 Loading Kernel Symbols ............................................................... ................................................................ Loading User Symbols Loading unloaded module list ......... *** WARNING: Unable to verify timestamp for intelppm.sys *** ERROR: Module load completed but symbols could not be loaded for intelppm.sys ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck C2, {7, 121a, 44090014, bc3327b0} *** WARNING: Unable to verify timestamp for mssmbios.sys *** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys GetUlongFromAddress: unable to read from 808b8638 Probably caused by : intelppm.sys ( intelppm+2ca2 ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* BAD_POOL_CALLER (c2) The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc. Arguments: Arg1: 00000007, Attempt to free pool which was already freed Arg2: 0000121a, (reserved) Arg3: 44090014, Memory contents of the pool block Arg4: bc3327b0, Address of the block of pool being deallocated Debugging Details: ------------------ GetUlongFromAddress: unable to read from 808b8638 POOL_ADDRESS: bc3327b0 BUGCHECK_STR: 0xc2_7 CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP PROCESS_NAME: Idle CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from ffdffee0 to f6ec3ca2 STACK_TEXT: WARNING: Stack unwind information not available. Following frames may be wrong. 808a35e0 ffdffee0 8083fb57 ffdff000 86f8edb0 intelppm+0x2ca2 808a3600 80839b12 00000000 0000000e 00000000 0xffdffee0 808a3604 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0xa STACK_COMMAND: kb FOLLOWUP_IP: intelppm+2ca2 f6ec3ca2 ?? ??? SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: intelppm+2ca2 FOLLOWUP_NAME: MachineOwner MODULE_NAME: intelppm IMAGE_NAME: intelppm.sys DEBUG_FLR_IMAGE_TIMESTAMP: 0 FAILURE_BUCKET_ID: 0xc2_7_intelppm+2ca2 BUCKET_ID: 0xc2_7_intelppm+2ca2 Followup: MachineOwner Kind regards, Ryan If anyone can provide any guidance on interpreting this minidump it would be greatly appreciated.

******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck C2, {7, 121a, 44090014, bc3327b0} *** WARNING: Unable to verify timestamp for mssmbios.sys *** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys GetUlongFromAddress: unable to read from 808b8638 Probably caused by : intelppm.sys ( intelppm+2ca2 ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* BAD_POOL_CALLER (c2) The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc. Arguments: Arg1: 00000007, Attempt to free pool which was already freed Arg2: 0000121a, (reserved) Arg3: 44090014, Memory contents of the pool block Arg4: bc3327b0, Address of the block of pool being deallocated Debugging Details: ------------------ GetUlongFromAddress: unable to read from 808b8638 POOL_ADDRESS: bc3327b0 BUGCHECK_STR: 0xc2_7 CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP PROCESS_NAME: Idle CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from ffdffee0 to f6ec3ca2 STACK_TEXT: WARNING: Stack unwind information not available. Following frames may be wrong. 808a35e0 ffdffee0 8083fb57 ffdff000 86f8edb0 intelppm+0x2ca2 808a3600 80839b12 00000000 0000000e 00000000 0xffdffee0 808a3604 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0xa STACK_COMMAND: kb FOLLOWUP_IP: intelppm+2ca2 f6ec3ca2 ?? ??? SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: intelppm+2ca2 FOLLOWUP_NAME: MachineOwner MODULE_NAME: intelppm IMAGE_NAME: intelppm.sys DEBUG_FLR_IMAGE_TIMESTAMP: 0 FAILURE_BUCKET_ID: 0xc2_7_intelppm+2ca2 BUCKET_ID: 0xc2_7_intelppm+2ca2 Followup: MachineOwner Kind regards, Ryan If anyone can provide any guidance on interpreting this minidump it would be greatly appreciated. This BSOD was caused by intelppm.sys driver. Near MODULE_NAME intelppm should be in blue so click on it to get more information about this driver. Please update it and check if this solve your problem. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

I did think that this was the case, thank you for the verification I am running v5.2.3790.3959 (srv03_sp2_rtm.070216-1710) I will look at updating this, however this is the same version running on all our servers. Kind regards, Ryan

Hi, Please try to install the hotfix from the following link to update the intelppm.sys and check the result. A Windows Server 2003–based computer that has an Intel processor may experience high power consumption when the processor is idle and when there is a discontinuity in the C-states that are reported by the BIOS http://support.microsoft.com/kb/941838 If the issue persists, you may contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request. To troubleshoot this kind of kernel crash issue, we need to debug the crashed system dump. Unfortunately, debugging is beyond what we can do in the forum. Please be advised that contacting phone support will be a charged call. To obtain the phone numbers for specific technology request please take a look at the web site listed below: http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607 Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.