Leak in Services.exe (186401)

The information in this article applies to:

Microsoft Windows NT Server 4.0

This article was previously published under Q186401

SYMPTOMS

Performance Monitor analysis reveals a steady increase in private bytes for Services.exe.

Even more noticeable is the working set for Services.exe - from 10 MB to 400 MB, depending on up time.

CAUSE

When the server receives a downlevel remoted API, an internal buffer is allocated related to the session user. For the code path where the API is a remote user logon, the internal buffer is not freed properly.

RESOLUTION

To resolve this problem, contact Microsoft Technical Support to obtain the following fix or wait for the next Windows NT service pack.

This fix should have the following time stamp:

   05/26/98  10:07p                88,336 Xactsrv.dll (Intel)
   05/26/98  10:08p               170,768 Xactsrv.dll (Alpha)

STATUS

Microsoft has confirmed this to be a problem in Windows NT version 4.0.

A supported fix is now available, but has not been fully regression tested and should be applied only to systems experiencing this specific problem. Unless you are severely impacted by this specific problem, Microsoft recommends that you wait for the next service pack that contains this fix. Contact Microsoft Technical Support for more information.

Modification Type:	Minor	Last Reviewed:	9/23/2005
Keywords:	kbHotfixServer kbQFE kbbug kbfix KB186401