We have a Windows Server 2008 R2 running as a Print Server.
Several times a day Print Spooler Service stops own its own. I am not sure wheather
this is caused by a faulty print driver or something else.
How can I troubleshoot the root cause.
Is there a tool that I can use to diagnose the issue.
Following are the make and model of 16 to 20 printers shared on the Print Server.
Dell Dell 3130CN Laser Printer
Dell Dell 5230n Laser Printer
Samsung SCX-6545
Kyocera CS-4050 KX
Following Errors are logged in Windows Logs, under Application
Error 4/29/2011 11:16:03 AM Application Error 1000 (100)
---------------------------------------------------------------------------------------------------------------------
Log Name: Application
Source: Application Error
Date: 5/9/2011 3:45:38 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: PRINTSERVER.microsoft.com
Description:
Faulting application name: spoolsv.exe, version: 6.1.7600.16661, time stamp: 0x4c6f61fe
Faulting module name: wsdapi.dll, version: 6.1.7600.16385, time stamp: 0x4a5be0a1
Exception code: 0xc0000005
Fault offset: 0x000000000000769a
Faulting process id: 0x1098
Faulting application start time: 0x01cc0dd4336d5bb2
Faulting application path: C:\Windows\System32\spoolsv.exe
Faulting module path: C:\Windows\System32\wsdapi.dll
Report Id: 0eb15def-7a8e-11e0-99e4-f04da209e3ee
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-05-09T22:45:38.000000000Z" />
<EventRecordID>1797</EventRecordID>
<Channel>Application</Channel>
<Computer>PRINTSERVER.microsoft.com</Computer>
<Security />
</System>
<EventData>
<Data>spoolsv.exe</Data>
<Data>6.1.7600.16661</Data>
<Data>4c6f61fe</Data>
<Data>wsdapi.dll</Data>
<Data>6.1.7600.16385</Data>
<Data>4a5be0a1</Data>
<Data>c0000005</Data>
<Data>000000000000769a</Data>
<Data>1098</Data>
<Data>01cc0dd4336d5bb2</Data>
<Data>C:\Windows\System32\spoolsv.exe</Data>
<Data>C:\Windows\System32\wsdapi.dll</Data>
<Data>0eb15def-7a8e-11e0-99e4-f04da209e3ee</Data>
</EventData>
</Event>
--------------------------------------------------------------------------------------------------------------------
Log Name: Application
Source: Application Error
Date: 4/29/2011 11:16:03 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: PRINTSERVER.microsoft.com
Description:
Faulting application name: mmc.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc808
Faulting module name: OLEAUT32.dll, version: 6.1.7600.16567, time stamp: 0x4bbc34e9
Exception code: 0xc0000005
Fault offset: 0x0000000000001029
Faulting process id: 0xc2c
Faulting application start time: 0x01cbfbadb932afb8
Faulting application path: C:\Windows\system32\mmc.exe
Faulting module path: C:\Windows\system32\OLEAUT32.dll
Report Id: bd84287c-728c-11e0-99e4-f04da209e3ee
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-04-29T18:16:03.000000000Z" />
<EventRecordID>667</EventRecordID>
<Channel>Application</Channel>
<Computer>PRINTSERVER.microsoft.com</Computer>
<Security />
</System>
<EventData>
<Data>mmc.exe</Data>
<Data>6.1.7600.16385</Data>
<Data>4a5bc808</Data>
<Data>OLEAUT32.dll</Data>
<Data>6.1.7600.16567</Data>
<Data>4bbc34e9</Data>
<Data>c0000005</Data>
<Data>0000000000001029</Data>
<Data>c2c</Data>
<Data>01cbfbadb932afb8</Data>
<Data>C:\Windows\system32\mmc.exe</Data>
<Data>C:\Windows\system32\OLEAUT32.dll</Data>
<Data>bd84287c-728c-11e0-99e4-f04da209e3ee</Data>
</EventData>
</Event>
--------------------------------------------------------------------------------------------
Following Errors are logged in Windows Logs, under System
Error 6/14/2011 2:11:03 PM Service Control Manager 7034 None
Log Name: System
Source: Service Control Manager
Date: 6/10/2011 2:11:03 PM
Event ID: 7034
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: PRINTSERVER.microsoft.com
Description:
The Print Spooler service terminated unexpectedly. It has done this 4 time(s).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7034</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2011-06-14T21:11:03.307707700Z" />
<EventRecordID>8547</EventRecordID>
<Correlation />
<Execution ProcessID="560" ThreadID="3120" />
<Channel>System</Channel>
<Computer>PRINTSERVER.microsoft.com</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Print Spooler</Data>
<Data Name="param2">4</Data>
</EventData>
</Event>