Windows 2008 R2 Plugplay service taxing processor at 100%

hello fellow engineers,

i have terminal server deciding misbehave.  end users complaining terminal server sessions locking decided investigating.  have vmware virtual server running 2 vm's 1 of terminal server, terminal services licensing server, , domain controller windows 2008 r2 vm.  when looking @ resources on terminal server noticed processor periodically maxing out @ 100% every 5-15 min. 10-30 seconds.  when logged in take closer used resource monitor determine process causing processor taxed  hard.  looks svchost process (more specifically) plugplay service culprit. 

i have noticed service runs extremely hard during logon's , logoff's via terminal services , mentioned above every 5-15 mins.  when looking @ logs during these moments of high processor utilization getting combination of repeat errors cant make heads or tails of quite sure they  related.

the first event receive in system log , terminal server licensing error:

event 4105, terminal server licensing

the remote desktop license server cannot update license attributes user "username " in active directory domain "domain.local ". ensure computer account license server member of terminal server license servers group in active directory domain "domain.local ".
if license server installed on domain controller, network service account needs member of terminal server license servers group.
if license server installed on domain controller, after have added appropriate accounts terminal server license servers group, must restart remote desktop licensing service track or report usage of rds per user cals.
win32 error code: 0x80070005

at first terminal server not in ts licensing group , after adding restarting service , while troubleshooting rebooted server still message.  though warning flag when going remote desktop licensing manager changed yellow exclamation green check.

the second error receiving in system log is:

event:10009, distributed dcom

dcom unable communicate computer workstationname using of configured protocols.

the third event receive error appears in applications log , follows:

event 10005, msiinstaller

product: 64 bit hp bidi channel components installer -- installer has encountered unexpected error installing package. may indicate problem package. error code 2753. arguments are: ipm12.8444768d_9a2b_44be_bd52_02fb1b25c55e, ,

the final event receive warning in applications log stating:

event 1530, user profile service

windows detected registry file still in use other applications or services. file unloaded now. applications or services hold registry file may not function afterwards. 

 detail -
 1 user registry handles leaked \registry\user\s-1-5-21-57989841-1972579041-682003330-1709:
process 976 (\device\harddiskvolume2\windows\system32\svchost.exe) has opened key \registry\user\s-1-5-21-57989841-1972579041-682003330-1709\printers\devmodeperuser

can tell looks licensing error maybe preventing users installing hp print driver , each time users system attempts install driver plugplay service begins run causing processor max out @ 100%.  because device never gets installed plugplay service gets stuck in vicious repeated cycle  causing server lock periodically because of taxed processor.  never less need incite on how resolve issue.  if there problem loading loading drivers how tell user , device cause of lockup?  how resolve licensing error? and, know how make heads or tails out of user profile service warning or distributed dcom error?  thank you help.

hi,

you can check logon event followed 10005 event find out users cause driver install. according article in hp website, seems there series of printer using component. may contact hp more detailed.

regarding terminal server licensing event, please refer following kb article:

terminalservices-licensing 4105 – terminal services license server cannot update license attributes user “<username>” in active directory domain “<domainname>”
http://support.microsoft.com/kb/2030310

---

this posting provided "as is" no warranties, , confers no rights. please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.

Windows Server  >  Remote Desktop Services (Terminal Services)