LTSB2016 - DISM Host Servicing Process

[TheRev]

Hallo Zusammen

Wir haben auf einigen Clients das Phänomen unter LTSB2016, dass bei IDLE 100te von DISM Host Servicing Process geöffnet werden und unter %Temp% auch massiv an Ordnern und Datenmüll anlegen.

Genauer Gesagt über Nacht wurden auf dem einen Client ca. 350 von diesen Prozessen geöffnet (nicht mehr geschlossen) und ca. 45 GB Dateien herumkopiert und vervielfälltigt.

Leider finde ich nirgends etwas über diese Problematik im Zusammenhang mit LTSB2016..

Es betrifft ironischerweise auch nicht alle Clients - alle selbes Modell etc.

Für Lösungsvorschläge wäre ich euch sehr dankbar.

Grüsse

 

[AndyMutz]

ist das vielleicht ein client, der noch auf version 14393.1715 oder .1737 ist?
ich hatte nämlich auch mit zwei installationen das problem, dass die sich nicht auf .1770 patchen ließen und das update immer und immer wieder versucht wurde installiert zu werden, und dabei lief auch pausenlos DISM im hintergrund.
guck doch mal die DISM und CBS logs durch, unter windows\logs.
ansonsten probier mal den/die betroffenen clients händisch auf .1794 zu patchen, damit soll ein fehler behoben worden sein, der wohl für dieses verhalten verantwortlich sein könnte.

-andy-

 

[TheRev]

Hi Andy

Wir haben auf den Clients:
Version 1607 (Build 14393.1770)

Im DISM Log ist einmal eine 25MB Datei (Bak) und ein Log von mehreren MB's.

Spoiler

2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 DismApi.dll: - DismInitializeInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 DismApi.dll: - DismInitializeInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 DismApi.dll: Version 10.0.14393.0 - DismInitializeInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 DismApi.dll: Parent process command line: C:\Windows\system32\cleanmgr.exe /autoclean /d C: - DismInitializeInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Enter DismInitializeInternal - DismInitializeInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Input parameters: LogLevel: 2, LogFilePath: (null), ScratchDirectory: (null) - DismInitializeInternal
2017-10-25 01:05:58, Info DISM Try to initialize Panther logging 1 times, last error: 0x0
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Initialized GlobalConfig - DismInitializeInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Initialized SessionTable - DismInitializeInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Waiting for m_pInternalThread to start - CCommandThread::Start
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=7472 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 m_pInternalThread started - CCommandThread::Start
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Created g_internalDismSession - DismInitializeInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Leave DismInitializeInternal - DismInitializeInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Enter DismOpenSessionInternal - DismOpenSessionInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Input parameters: ImagePath: DISM_{53BFAE52-B167-4E2F-A258-0A37B57FF845}, WindowsDirectory: (null), SystemDrive: (null) - DismOpenSessionInternal
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Lookup in table by path failed for: DRIVE_C - CTransactionalImageTable::LookupImagePath
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Waiting for m_pInternalThread to start - CCommandThread::Start
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=7472 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=8508 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 m_pInternalThread started - CCommandThread::Start
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=9752 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=8508 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=8508 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2017-10-25 01:05:58, Info DISM API: PID=2300 TID=8508 Successfully dequeued command object - CCommandThread:equeueCommandObject
2017-10-25 01:05:58, Info DISM PID=2300 TID=8508 Scratch directory set to 'C:\Users\USERNAME\AppData\Local\Temp\'. - CDISMManager:ut_ScratchDir
2017-10-25 01:05:58, Info DISM PID=2300 TID=8508 DismCore.dll version: 10.0.14393.0 - CDISMManager::FinalConstruct
2017-10-25 01:05:58, Info DISM Try to initialize Panther logging 1 times, last error: 0x0
2017-10-25 01:05:58, Info DISM PID=2300 TID=8508 Successfully loaded the ImageSession at "C:\Windows\system32\Dism" - CDISMManager::LoadLocalImageSession
2017-10-25 01:05:58, Info DISM Try to initialize Panther logging 1 times, last error: 0x0
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Failed to get and initialize the PE Provider. Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM Try to initialize Panther logging 1 times, last error: 0x0
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Manager: PID=2300 TID=8508 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Getting the collection of providers from a local provider store type. - CDISMProviderStore::GetProviderCollection
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Loading Provider from location C:\Windows\system32\Dism\FolderProvider.dll - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Connecting to the provider located at C:\Windows\system32\Dism\FolderProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Loading Provider from location C:\Windows\system32\Dism\WimProvider.dll - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Connecting to the provider located at C:\Windows\system32\Dism\WimProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Loading Provider from location C:\Windows\system32\Dism\VHDProvider.dll - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Connecting to the provider located at C:\Windows\system32\Dism\VHDProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Loading Provider from location C:\Windows\system32\Dism\ImagingProvider.dll - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Connecting to the provider located at C:\Windows\system32\Dism\ImagingProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Loading Provider from location C:\Windows\system32\Dism\CompatProvider.dll - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Connecting to the provider located at C:\Windows\system32\Dism\CompatProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Loading Provider from location C:\Windows\system32\Dism\FfuProvider.dll - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Connecting to the provider located at C:\Windows\system32\Dism\FfuProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Loading Provider from location C:\Windows\system32\Dism\SiloedPackageProvider.dll - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Warning DISM DISM Provider Store: PID=2300 TID=8508 Failed to Load the provider: C:\Windows\system32\Dism\SiloedPackageProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
[2300] [0x8007007b] FIOReadFileIntoBuffer1250): Die Syntax für den Dateinamen, Verzeichnisnamen oder die Datenträgerbezeichnung ist falsch.
[2300] [0xc142011c] UnmarshallImageHandleFromDirectory793)
[2300] [0xc142011c] WIMGetMountedImageHandle3047)
2017-10-25 01:05:58, Info DISM DISM WIM Provider: PID=2300 TID=8508 [C:\] is not a WIM mount point. - CWimMountedImageInfo::Initialize
2017-10-25 01:05:58, Info DISM DISM VHD Provider: PID=2300 TID=8508 [C:\] is not recognized by the DISM VHD provider. - CVhdImage::Initialize
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Getting Provider VHDManager - CDISMProviderStore::GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2017-10-25 01:05:58, Info DISM DISM VHD Provider: PID=2300 TID=8508 [C:\] is not recognized by the DISM VHD provider. - CVhdImage::Initialize
2017-10-25 01:05:58, Info DISM DISM Imaging Provider: PID=2300 TID=8508 The provider VHDManager does not support CreateDismImage on C:\ - CGenericImagingManager::CreateDismImage
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Getting Provider WimManager - CDISMProviderStore::GetProvider
2017-10-25 01:05:58, Info DISM DISM Provider Store: PID=2300 TID=8508 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
[2300] [0x8007007b] FIOReadFileIntoBuffer1250): Die Syntax für den Dateinamen, Verzeichnisnamen oder die Datenträgerbezeichnung ist falsch.
[2300] [0xc142011c] UnmarshallImageHandleFromDirectory793)
[2300] [0xc142011c] WIMGetMountedImageHandle3047)

Hoffe klappt mit dem Spoiler..

Und diesen vorgang wiederholt der Client ständig..
Komischerweise wenn man idle ist öffnet er ungefähr alle 5 Minuten so ein Prozess.. Startet man das Gerät neu, ist nichts mehr zu sehen..

Noch als annmerkung:
Alle Clients wurden mit dem Identischen Server etc. aufgesetzt. Selber treiber, gleiche BIOS Version etc.

 

[AndyMutz]

der log ausschnitt sagt mir jetzt erstmal so nix.
sind die clients in VHD containern installiert?
probier einfach mal einen der clients, der dieses problem hat, auf .1794 zu patchen (KB4041688) und schau mal, ob das problem danach immer noch auftritt.

-andy-

 

[TheRev]

Nein, die Clients sind alle lokal via Softwareverteilung autonom aufgesetzt (deshalb auch alle alles gleich).
Sprich unnatanded Installation von Windows mit Softwareverteilung.

Der WSUS findet KB4041688 nicht. Ebenso wird dieser von keinem Client angefordert.
Habe jetzt mal online patching versucht, will der Client auch nichts installieren.

Habe jetzt mal im Updatekatalog heruntergeladen und versuche es gerade zu installieren, mal schauen, was dabei rauskommt

EDIT:
Leider nichts gebracht.. auf dem Gerät sind aktuell 296 Prozesse offen... Normal ca. 95-100.. (nach dem booten).

Temp Ordner aktuell zum glück "nur" 5.3 GB