How do I prevent the NetIQ Administration service from terminating unexpectedly?
Why does the NetIQ Administration service terminate unexpectedly?
How do I prevent the unnecessary creation of open Pipe\SAMR connections?
What happens when too many Pipe\SAMR connections are opened?
How can Microsoft Security patch KB828035 affect my DRA environment?
Directory and Resource Administrator 6.x
Directory and Resource Administrator 7.x
The NetIQ Administration Service Terminates Unexpectedly
Error: "insufficient system resources"
Domain Controllers in the managed domain go into a hung state
A Microsoft Security patch for NT 4 workstations (KB828035) causes Pipe\SAMR connections to remain open to the Domain Controllers.
If there are Windows NT 4 workstations in the environment and the Microsoft Security patch KB828035 is applied, applying the patch may cause Pipe\SAMR connections to remain open.
Typically, fewer than 20 Pipe\SAMR connections should be open to a Domain Controller. Whenever the workstation accesses a network resource, this creates new pipes. If the number of open Pipe\SAMR connections reaches 2048 (per Microsoft article), the Domain Controller runs out of resources and returns an insufficient system resources error.
The NetIQ Administration Server crashes during the cache refresh for the domain that is having the problem. The DRA server receives the insufficient system resources error when contacting the DC. This error causes some internal data structures to not have the values that DRA expects them to have. DRA makes some assumptions about these data structures that cause it to read an invalid memory address. This invalid memory address causes the process to crash.
The client computers may display various symptoms, which are described in the following Microsoft article. This article also includes the resolution to the Pipe\SAMR connections problem.
For more information, see the following Microsoft KB article:
This problem will be addressed in a future release. However,you should resolve the root cause of the Pipe\SAMR connections remaining open. Otherwise, this issue will cause other network problems.
The error is occurring during the cache refresh for the domain that is having the problem. The DRA server receives the "insufficient system resources error" when contacting the DC in the RB domain. This particular error causes some internal data structures to not have the values that DRA expects them to have. DRA makes some assumptions about these data structures that cause it to read an invalid memory address which crashes the process to crash.