none
登录至Server2003 R2系统的服务器上注销其它非活动的远程登录用户后,服务器出现蓝屏,请帮忙分析蓝屏日志 RRS feed

  • 问题

  • 登录至1台Server2003 R2系统的服务器上注销其它非活动的远程登录用户后,服务器出现蓝屏,请帮忙分析蓝屏日志,谢谢,蓝屏日志内容如下:


    SESSION_HAS_VALID_VIEWS_ON_EXIT (ba)
    Caused by a session driver not unmapping its mapped views prior to a
    session unload.  This indicates a bug in win32k.sys, atmfd.dll,
    rdpdd.dll or a video driver.
    Arguments:
    Arg1: 00000002, session ID
    Arg2: 00000001, number of mapped views that are leaking
    Arg3: e5e7bdf8, address of this session's mapped views table
    Arg4: 0000001f, size of this session's mapped views table.

    Debugging Details:
    ------------------

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *********************************************************************
    * Symbols can not be loaded because symbol path is not initialized. *
    *                                                                   *
    * The Symbol Path can be set by:                                    *
    *   using the _NT_SYMBOL_PATH environment variable.                 *
    *   using the -y <symbol_path> argument when starting the debugger. *
    *   using .sympath and .sympath+                                    *
    *********************************************************************
    *********************************************************************
    * Symbols can not be loaded because symbol path is not initialized. *
    *                                                                   *
    * The Symbol Path can be set by:                                    *
    *   using the _NT_SYMBOL_PATH environment variable.                 *
    *   using the -y <symbol_path> argument when starting the debugger. *
    *   using .sympath and .sympath+                                    *
    *********************************************************************

    ADDITIONAL_DEBUG_TEXT: 
    Use '!findthebuild' command to search for the target build information.
    If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.

    MODULE_NAME: nt

    FAULTING_MODULE: e0600000 nt

    DEBUG_FLR_IMAGE_TIMESTAMP:  51d4c567

    CUSTOMER_CRASH_COUNT:  1

    DEFAULT_BUCKET_ID:  DRIVER_FAULT_SERVER_MINIDUMP

    BUGCHECK_STR:  0xBA

    CURRENT_IRQL:  0

    LAST_CONTROL_TRANSFER:  from e072f088 to e0627f7d

    STACK_TEXT: 
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f2681c4c e072f088 000000ba 00000002 00000001 nt+0x27f7d
    f2681ce8 e064da25 ff1aa460 00000000 fb64ada8 nt+0x12f088
    f2681d04 e074e389 ff1aa460 fb64ada8 fb64afe8 nt+0x4da25
    f2681d8c e074e4dd 00000000 00000000 fb64ada8 nt+0x14e389
    f2681da4 e074c178 fb64ada8 00000000 00000001 nt+0x14e4dd
    f2681ddc e068fe2e de51d0c9 fe24c990 00000000 nt+0x14c178
    00000000 00000000 00000000 00000000 00000000 nt+0x8fe2e


    STACK_COMMAND:  kb

    FOLLOWUP_IP:
    nt+27f7d
    e0627f7d 5d              pop     ebp

    SYMBOL_STACK_INDEX:  0

    SYMBOL_NAME:  nt+27f7d

    FOLLOWUP_NAME:  MachineOwner

    IMAGE_NAME:  ntkrnlpa.exe

    BUCKET_ID:  WRONG_SYMBOLS

    Followup: MachineOwner

    • 已移动 Amy Wang_Moderator 2016年4月7日 6:03 Unrelated to Windows Server Technical Preview
    2016年3月2日 7:58

答案