4 Replies Latest reply: Dec 19, 2012 12:53 AM by poma RSS

    MSME 7.6 high CPU usage by RPCserv.exe



      we have

      virtual (VMware ESX) server Windows2008R2 Etn SP1 64bit

      Exchange 2010

      MSME 7.6.7718.105


      about 10 days ago we investigated the problem with our corporate e-mail.

      the delay of incoming and outgoing e-mails (into the company) became extremly high.

      the reason was the high CPU usage by RPCserv.exe (more then 25%).


      After restart th McAfee MSME service everything works fine.

      But after some time the problem was repeated.


      We reinstalled the MSME 5 days ago, but today we face of this problem again.


      Everything I have found is associated with GSE 7.0 and Exchange 2003, but not with MSME7.6.


      anybody have the similar problem?

        • 1. Re: MSME 7.6 high CPU usage by RPCserv.exe

          What is exact version of Exchange??

          What Roles is the server fulfilling?? (HUB\MB\Edge)

          Is Patch 1 installed for MSME?

          How to verify that Security for Microsoft Exchange 7.6 Patch1 is installed (KB76286)


          Is there any evidence of errors in event logs or product log??


          If server is running Mailbox role do you have Background Scanning enabled??

          • 2. Re: MSME 7.6 high CPU usage by RPCserv.exe

            Exchange Server 2010

            Microsoft Corporation

            Version: 14.02.0318.001


            Role is MailBox only.


            Patch 1 is installed:

            Product NameMcAfee Security for Microsoft Exchange
            Product Version7.6.7718.105
            Service PackNone
            Buffer Overflow ProtectionNot Applicable


            Thera are no error events in Windows application and system logs associated with RPCserv.exe (or MSME).


            Afte firs time we have disabled BGS by ePO policy (see attach).


            • 3. Re: MSME 7.6 high CPU usage by RPCserv.exe

              So this detail is from configuration of Mailbox server(s) which suggests you will have Hub server(s) (and maybe edge server(s))??


              Was the issue witnessed on the Mailbox server(s)?? Did an OnDemandScan of Mailboxes run into normal business hours or is there anything common to when this issue happens??


              Or was the issue actually on the HUB or Edge servers??? Any evidence there of issue?? 

              • 4. Re: MSME 7.6 high CPU usage by RPCserv.exe

                we have 5 virtual servers with next roles:

                2 servers (DAG) are Mailbox role only;

                2 servers are Hub role only;

                1 servers is Edge role only.

                As you can see on my previos post the BGS is disabled in epo policy.

                Also there are no VSE installed on servers.


                On the first time we faced the problem the issues were on MB, Hub and Edge servers. All of them had high CPU usage by rpcserv.exe.

                We updated MSME to the lasted DAT and restart all servers. After that it has looked ok.

                But after some days we faced the same issue on Mailbox server only. We have restarted msme service and total CPU load became less than 5%.


                Now we enable the CPU counts on MB servers and especially on two process RPCserv.exe. If the problem repeats we'll have the evidences.

                We suggest, that the reason was in bad DAT update.