A quick blog about this… The problem has been driving me crazy for the last couple of weeks.
Random clients have been calling, reporting that they were having high RAM usage on the SVCHOST process. That normally worries me and points to some nasties. Looking further into the issue you can see that the Windows Update service is the cause.
Luckily, Les Connor and Susan Bradley – SBS MVP’s – were already on the case chatting about the issue on our private listserv. I stumbled across the thread where Susan pointed to:
The Automatic Updates service may stop responding:
http://support.microsoft.com/kb/914810/en-us
Oh wonderful. ANOTHER PATCH I HAVE TO CALL PSS FOR! Do Microsoft have ANY idea how difficult and how much of a waste of time it is to sit on the phone just to get a patch! We so badly need another way!
EDIT 4: Due to pressure from my fellow SBS MVP’s, I have taken down the links to the patches. Not that I wanted to, because this situation of having to call for patches outside the USA SUCKS!
…or you could just reduce your WSUS Update cycle to greater than every 2 hours in your relevant GPO and wait for the patch at the next patch Tuesday
Thanks for bringing attention to this though. I have found Update Services in a stopped state and wondered how it had occurred.
Thanks for that tip Dale.
I am actually set to once every 12 hours. It still happens.
Is that normal?
I’m surprised you find it difficult to get hotfixes from Microsoft – the couple of times I had to use them in the uk, the hardest bit was finding the phone number for pss – then it was just a case of interrupting their spiel on the phone and stating i wanted a hotfix for kb article 123456, providing the same os as the kb article and i had it in my email about 5 minutes later.
Hey Andy,
During working hours it isn’t so bad. But anytime after 5:30 or before 9:00 it is really bad.
But… that’s not the point. Do you not agree that Microsoft Partners should have full access, via the web, to these patches?
I totally agree that we should have 24 hour access. I’d also say that anyone should get access to the patches. After all, if they are free to anyone then why lock them away. If people are dumb enough to install the wrong patch, then that is their own fault, but someone who is intelligent enough to find the kb article relating to their problem is likely to be clever enough to ensure they have a backup and a recovery plan in place.
Is this patch for the error:
Error: Agent failed detecting with reason: 0x8007000e
?????
After installing this patch 6 of my machiens began having an issue with svchost crashing upon login. an absolute nightmare. I was able to fix most of them by useing a file given to me by a second level engineer at MS called sysreg.bat. It basically broke windows update and this file reregisteres all of the dll files and renames the software distribution folder. I nust say that it did fix my WSUS error “Error: Agent failed detecting with reason: 0x8007000e” but in the process broke half of my machiens.
Everyone reading this post, should not make any more comments and should go here, to the updated article:
http://msmvps.com/blogs/thenakedmvp/archive/2007/01/25/patch-927891-support-article-official.aspx
my god.. i work as a technical support analyst for Sophos.. some customers we get:
“your product is eating all our cpu and memory”
get them to check the processes…
“yes its a sophos process.. svchost!”
erm… riiiiight.
nubs!
glad ur a guy who actually fixes these problems nick 🙂