High CPU utilization caused by two processes: NetIQccm.exe and NetIQmc.exe (NETIQKB71754)

High CPU utilization caused by NETIQccm.exe and NETIQMC.exe


NETIQccm.exe and NETIQMC.exe CPU utilization climbs noticably after Windows DEP is enabled on an Agent.

Data Execution Prevention (DEP) is a set of hardware and software technologies that perform additional checks on memory to help prevent malicious code from running on a system. The primary benefit of DEP is to help prevent code execution from data pages. Software-enforced DEP can help prevent malicious code from taking advantage of exception-handling mechanisms in Windows.

As a result of these additional checks performed by DEP against the NetIQ AppManager Agent Services, those services will consume an amount of additional CPU cycles, similar to when they are being actively scanned by Anti_Viral software.  This can, therefore, have an adverse effect on the Agent's ability to perform required and expected activities.  This can lead to a less-than-satisfactory performance of the AppManager Agent on servers where the NetIQ AppManager Agent Services are being checked by DEP.

To resolve this issue, you will need to disable Windows DEP checking of the NetIQ AppManager Agent Services on any affected Servers.  You can change the DEP configuration for your computer in the System tool.

NOTE: Completing the following steps may require a reboot of the Server on which the system's DEP configuration is being changed.  Please be conscious of this requirement before applying the following fix to any Production Server.

To adjust the DEP configuration on a Windows 2003 Server, please complete the following steps:

1. Click Start, click Run, type sysdm.cpl, and then click OK (or you can launch the System tool from within Control Panel).
2. Click the Advanced tab, and then under Performance, click Settings.
3. In the Performance Options dialog box, click the Data Execution Prevention tab.
4. Chose 'Turn on DEP for all programs and services except those I select:' 
5. Add the following two entries:
   • <install path>\NetIQ\AppManager\bin\netiqccm.exe
   • <install path>\NetIQ\AppManager\bin\netiqmc.exe
6. Click Apply and OK, and then click OK again in order to exit the System Properties tool.
7. At this point you may be prompted to reboot, in order for these changes to take effect.

To see more detailed information regarding Window DEP, please review the following Microsoft KB article: http://support.microsoft.com/kb/875352

Windows DEP may be enabled against all processes on the server, or against the NetIQ AppManager Agent Services specifically.

Formerly known as NETIQKB71754