Fix Non-Paged Pool using a lot of ram in Windows: Windows computers and servers may experience memory overflow due to a leak of a certain system driver that stores its data in an unallocated memory pool the system’s non-paged memory pool page. Non-paged memory pool is the data in the RAM of the computer that is used by the kernel and by the driver of the operating system. The non-paged pool is never swapped to the drive, it is always stored only in physical RAM.
Fix Non-Paged Pool using a lot of ram in Windows
Normally, the size of the non-paged pool rarely exceeds 200-400 MB. The non-paged pool size usually indicates that there is a memory leak in some system component or device driver.
If there is an internal memory leak on the server, the following events will appear in the System event log:
Event ID: 2019
Source: Srv
Description: The server was unable to allocate from the system nonpaged pool because the pool was empty
In most of the cases, the reason for the memory leak described above is due to some problem with a third-party driver installed in Windows. As a rule, these are network drivers.
Maximum non-paged pool size on Windows:
Windows x64 up to 128 Gb and no more than 75% of physical memory
Windows x86 up to 2 Gb and RAM no more than 75%
# Turn off Network Data Usage Monitoring Driver
This service can be disabled without losing much of Windows functionality.
+ Stop the NDU service with the command:
sc config NDU start= disabled
Stop the NDU service using the registry:
- Open Registry Editor
- Go to key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ndu\
- Change the value of the Start parameter to 4.
# Use PoolMon to find memory leaks in kernel mode
To do this, we need the Poolmoon.exe console tool included in the Windows Driver Kit (WDK). Download and install the WDK for your version of Windows from Microsoft. Then start Poolmon.exe (in the case of WDK for Windows 10, the tool is located in the folder C:\Program Files (x86)\Windows Kits\10\Tools\).
After you have started the tool, press P. The second column will show the tags of processes using non-paged memory (Nonp property). Then press B key to sort the driver list by Byte column.
The left column lists the driver tags. Your task is to identify the driver file with this tag. In the example, you can see that most of the RAM in the non-paged pool is used by drivers with tags Nr22, ConT, and smNp.
You should check the drivers for the tags found by using the string.exe tool (from Sysinternals), using the built-in findstr command, or using PowerShell.
Use the following commands to find the driver files associated with the tags you found:
findstr /m /l /s Nr22 %Systemroot%\System32\drivers\*.sys
findstr /m /l /s ConT %Systemroot%\System32\drivers\*.sys
findstr /m /l /s smNp %Systemroot%\System32\drivers\*.sys
Or, you can also use PowerShell:
Set-Location “C:\Windows\System32\drivers”
Select-String -Path *.sys -Pattern “Nr22” -CaseSensitive | Select-Object FileName -Unique
Select-String -Path *.sys -Pattern “Py28” -CaseSensitive | Select-Object FileName -Unique
Select-String -Path *.sys -Pattern “Ne40” -CaseSensitive | Select-Object FileName –Unique
# Install the latest versions of Network Adapter Drivers
If automatic driver updates are enabled in Windows, check to see if the problem started after installing a new driver. Try rolling back to the previous driver version and see if the problem persists. If the problem is resolved, disable automatic driver updates.
# Disable Hyper-V Role
In some cases, the installed Hyper-V Role is causing a memory leak for the non-paged pool. If you don’t need this role, we recommend disabling it.
On Windows Server, you can disable the Hyper-V role with the PowerShell command:
Remove-WindowsFeature -Name Hyper-DRAW
Commands for Windows 10:
Disable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V-All
If your search doesn’t return any results, check if the memory leak is caused by a user mode process. Open Task Manager, go to Details tab, add NP Pool column and look for processes with large memory size in non-paged pool.
Conclusion
Above are 4 ways to fix Non-Paged Pool errors using a lot of ram in Windows that you can refer to. Hopefully with the tips that Tutshares.online Computer Tips Blog has shared will be useful to you. Good luck.
