Hi,
on an Windows Server 2012R2 RDS the spoolsv.exe is crashing randomlay.
Here is a crashdump:
FAULTING_IP:
KERNELBASE!RaiseException+68
00007fff`0b858a5c 488b8c24c0000000 mov rcx,qword ptr [rsp+0C0h]
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007fff0b858a5c (KERNELBASE!RaiseException+0x0000000000000068)
ExceptionCode: c0000002
ExceptionFlags: 00000001
NumberParameters: 0
DEFAULT_BUCKET_ID: STATUS_NOT_IMPLEMENTED
PROCESS_NAME: spoolsv.exe
ERROR_CODE: (NTSTATUS) 0xc0000002 - {Nicht implementiert} Der Vorgang ist nicht implementiert.
EXCEPTION_CODE: (NTSTATUS) 0xc0000002 - {Nicht implementiert} Der Vorgang ist nicht implementiert.
EXCEPTION_CODE_STR: c0000002
WATSON_BKT_PROCSTAMP: 54503ab3
WATSON_BKT_PROCVER: 6.3.9600.17415
PROCESS_VER_PRODUCT: Microsoft® Windows® Operating System
WATSON_BKT_MODULE: KERNELBASE.dll
WATSON_BKT_MODSTAMP: 57366075
WATSON_BKT_MODOFFSET: 8a5c
WATSON_BKT_MODVER: 6.3.9600.18340
MODULE_VER_PRODUCT: Microsoft® Windows® Operating System
BUILD_VERSION_STRING: 6.3.9600.17415 (winblue_r4.141028-1500)
MODLIST_WITH_TSCHKSUM_HASH: 0c04458e9b82b37bf1472dfed3614a132c51736b
MODLIST_SHA1_HASH: 6b54b7e88e6922f58844e8953c82585173197b90
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
DUMP_FLAGS: 94
DUMP_TYPE: 1
ANALYSIS_SESSION_HOST: T13800
ANALYSIS_SESSION_TIME: 01-27-2017 17:27:36.0288
ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
THREAD_ATTRIBUTES:
OS_LOCALE: DEU
PROBLEM_CLASSES:
Tid [0x0]
Frame [0x00]
String [STATUS_NOT_IMPLEMENTED]
Data Bucketing
BUGCHECK_STR: STATUS_NOT_IMPLEMENTED
LAST_CONTROL_TRANSFER: from 00007ffeebb4877f to 00007fff0b858a5c
STACK_TEXT:
000000ff`410cde70 00007ffe`ebb4877f : 000000ff`41753a98 00007ffe`ebb2d214 000000ff`410ce060 00000000`00000000 : KERNELBASE!RaiseException+0x68
000000ff`410cdf50 00007ffe`ebb4811f : 000000ff`419ceed0 00000000`00000000 00000000`00000000 000000ff`40766fc0 : win32spl!NCSRCommon::VariantGetEncapsulatedType<NCSRCommon::TIniSpooler>+0x73
000000ff`410cdf90 00007ffe`ebbb2f99 : 000000ff`41a344b0 000000ff`41a344b0 00000000`00000000 00000000`00000000 : win32spl!NCSRCommon::GetAttribute<NCSRCommon::TIniSpooler * __ptr64>+0x67
000000ff`410ce010 00007ffe`ebb7c5e9 : 00000000`80070057 000000ff`417f0110 000000ff`410ce160 00000000`00000000 : win32spl!NCSRMonitor::TPortMonitor::NewIniSpooler+0xc9
000000ff`410ce0e0 00007ffe`ebb7cb50 : 000000ff`41838388 000000ff`41891970 00000000`00000002 00007ffe`f1c65760 : win32spl!NCSRMonitor::TPortMonitorTable::InitializePortMonitorTable+0xa1
000000ff`410ce150 00007ffe`f1c56b0a : 000000ff`417f0100 000000ff`41891970 00000000`00000000 000000ff`41891970 : win32spl!InitializePrintMonitor2+0x30
000000ff`410ce180 00007ffe`f1c57c78 : 00000000`000011cc 00000000`00000000 00000000`0000001a 00000000`00000000 : localspl!CreateMonitorEntry+0x29f
000000ff`410ce670 00007ffe`f1c57a27 : 000000ff`00000000 00000000`00000001 000000ff`410cf000 000000ff`41891970 : localspl!BuildAllPorts+0x150
000000ff`410ceb20 00007ffe`ebb86092 : 00000000`00000001 00007ffe`ebbe0efc 00000000`00000001 00000000`00000000 : localspl!SplCreateSpooler+0x577
000000ff`410cefe0 00007ffe`ebb4c5e3 : 00000000`00000001 00000000`00000001 000000ff`40767920 000000ff`406fdd08 : win32spl!NCSRCommon::TIniSpooler::CreateSpooler+0x1e2
000000ff`410cf120 00007ffe`ebb4e4a6 : 00000000`00000000 000000ff`4078aba0 000000ff`406fdd08 000000ff`40767420 : win32spl!TPrintOpen::FillInCacheAtAPC+0x9f
000000ff`410cf160 00007ffe`ebb4ec10 : 00000000`00000000 00000000`00000000 000000ff`419bc300 000000ff`41a18e20 : win32spl!TPrintOpen::ReEstablishCacheConnection+0xe2
000000ff`410cf1f0 00007ffe`ebb4e950 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000001 : win32spl!TPrintOpen::ReEstablishPrinterConnection+0x20c
000000ff`410cf2c0 00007ffe`ebb3c194 : 00000000`00000036 00007ffe`ebb25c30 00000000`00000000 00007ffe`00000000 : win32spl!TPrintOpen::ReEstablishConnectionFromKey+0x1b0
000000ff`410cf3c0 00007ffe`ebb21286 : 000000ff`00000000 00000000`00000000 000000ff`406fdcf0 00000000`00000000 : win32spl!TPrintOpen::RediscoverPrinterConnections+0x19244
000000ff`410cf4e0 00007ff6`b4b1fccd : 00000000`00000088 00000000`00000000 00007ffe`f1c192b0 00000000`00000088 : win32spl!TPrintProviderTable::forwardEnumPrinters+0x50e
000000ff`410cf6b0 00007ff6`b4b20b1c : 00000000`00000006 00000000`00000000 000000ff`00000002 000000ff`41868b00 : spoolsv!EnumPrintersW+0xed
000000ff`410cf750 00007ff6`b4b209ca : 000000ff`00000006 00000000`00000000 00000000`00000002 000000ff`4070d5f0 : spoolsv!YEnumPrinters+0xec
000000ff`410cf7d0 00007ff6`b4b20336 : 000000ff`00000000 00007fff`00000002 00007fff`00000006 00000000`00000000 : spoolsv!TFunction8<unsigned long,unsigned short * __ptr64,unsigned long,unsigned char * __ptr64,unsigned long,unsigned long * __ptr64,unsigned
long * __ptr64,enum Call_Route>::Run+0xca
000000ff`410cf860 00007fff`0e30678e : 00007ff6`b4b202d0 000000ff`416ffcc0 000000ff`410cfa48 000000ff`416ffd70 : spoolsv!NThreadingLibrary::TWorkCrew::tpSimpleCallback+0x62
000000ff`410cf890 00007fff`0e328e2d : 000000ff`416ffd70 000000ff`42021650 00000000`00000000 000000ff`4019a208 : ntdll!TppSimplepExecuteCallback+0x7e
000000ff`410cf8d0 00007fff`0e1b13d2 : 00000000`00000000 00007fff`0e3289b0 000000ff`401a4b20 00000000`00000000 : ntdll!TppWorkerThread+0x47d
000000ff`410cfcb0 00007fff`0e3054e4 : 00007fff`0e1b13b0 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x22
000000ff`410cfce0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x34
THREAD_SHA1_HASH_MOD_FUNC: 3ffb06851e5d1577bb7a832702456151524547ee
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 4f17eb346ee9b4fe0522ddaed0fb8c9903f83d69
THREAD_SHA1_HASH_MOD: 682b6604ce70a3e2d769d192b70f848f40b90dd5
FOLLOWUP_IP:
win32spl!NCSRCommon::VariantGetEncapsulatedType<NCSRCommon::TIniSpooler>+73
00007ffe`ebb4877f 8bf8 mov edi,eax
FAULT_INSTR_CODE: c085f88b
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: win32spl!NCSRCommon::VariantGetEncapsulatedType<NCSRCommon::TIniSpooler>+73
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32spl
IMAGE_NAME: win32spl.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 57d2c162
STACK_COMMAND: .ecxr ; kb
BUCKET_ID: STATUS_NOT_IMPLEMENTED_win32spl!NCSRCommon::VariantGetEncapsulatedType_NCSRCommon::TIniSpooler_+73
PRIMARY_PROBLEM_CLASS: STATUS_NOT_IMPLEMENTED_win32spl!NCSRCommon::VariantGetEncapsulatedType_NCSRCommon::TIniSpooler_+73
FAILURE_EXCEPTION_CODE: c0000002
FAILURE_IMAGE_NAME: win32spl.dll
BUCKET_ID_IMAGE_STR: win32spl.dll
FAILURE_MODULE_NAME: win32spl
BUCKET_ID_MODULE_STR: win32spl
FAILURE_FUNCTION_NAME: NCSRCommon::VariantGetEncapsulatedType_NCSRCommon::TIniSpooler_
BUCKET_ID_FUNCTION_STR: NCSRCommon::VariantGetEncapsulatedType_NCSRCommon::TIniSpooler_
BUCKET_ID_OFFSET: 73
BUCKET_ID_MODTIMEDATESTAMP: 57d2c162
BUCKET_ID_MODCHECKSUM: dd346
BUCKET_ID_MODVER_STR: 6.3.9600.18470
BUCKET_ID_PREFIX_STR: STATUS_NOT_IMPLEMENTED_
FAILURE_PROBLEM_CLASS: STATUS_NOT_IMPLEMENTED
FAILURE_SYMBOL_NAME: win32spl.dll!NCSRCommon::VariantGetEncapsulatedType_NCSRCommon::TIniSpooler_
FAILURE_BUCKET_ID: STATUS_NOT_IMPLEMENTED_c0000002_win32spl.dll!NCSRCommon::VariantGetEncapsulatedType_NCSRCommon::TIniSpooler_
WATSON_STAGEONE_URL:
http://watson.microsoft.com/StageOne/spoolsv.exe/6.3.9600.17415/54503ab3/KERNELBASE.dll/6.3.9600.18340/57366075/c0000002/00008a5c.htm?Retriage=1
TARGET_TIME: 2017-01-27T12:03:46.000Z
OSBUILD: 9600
OSSERVICEPACK: 17415
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 16
PRODUCT_TYPE: 3
OSPLATFORM_TYPE: x64
OSNAME: Windows 8.1
OSEDITION: Windows 8.1 Server TerminalServer
USER_LCID: 0
OSBUILD_TIMESTAMP: 2014-10-29 03:45:30
BUILDDATESTAMP_STR: 141028-1500
BUILDLAB_STR: winblue_r4
BUILDOSVER_STR: 6.3.9600.17415
ANALYSIS_SESSION_ELAPSED_TIME: 2a1d
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:status_not_implemented_c0000002_win32spl.dll!ncsrcommon::variantgetencapsulatedtype_ncsrcommon::tinispooler_
FAILURE_ID_HASH: {95d9f5a4-50c1-9c0e-7448-501172d643fa}
Followup: MachineOwner
I do not know, how to debug this forther. It seems, that is it not a Driver related Problem. Anyonce can help ?