Loading...

Knowledge Center


User Session IDs are not recycled and CSRSS.exe sessions are not closed
Technical Articles ID:   KB75462
Last Modified:  4/7/2017
Rated:


Environment

McAfee VirusScan Enterprise (VSE) 8.8 with/without Patch 1 or 2
Microsoft Windows Server 2008 R2 with Service Pack 1

Problem

CSRSS.exe sessions have open session objects even after the active user session is closed.

The session ID is not recycled when one user logs out and another person logs in. This can cause performance issues over time.

This issue is seen only on Windows Server 2008 with Service Pack 1.  

Cause

McAfee has determined that this issue is a result of Microsoft Registry Filtering API not freeing 80 bytes of ObjectContexts. These 80 bytes include references to operating system resources (a process object that inherits a session object). The open session constitutes a resource leak that has a disproportionate impact on the operating system. If user sessions are spawned and terminated in excess, it causes in an equally large number of sessions that are not closed. This number increases until it impacts the operating system.

As part of its Access Protection feature, VSE 8.8 must use the Registry Filtering API to protect the registry. When the Access Protection feature is enabled, bad behavior is exposed in Microsoft Registry Filtering API.

Solution

This issue is resolved with VSE 8.8 Patch 4. Patches are cumulative; Technical Support recommends that you install the latest one. 

NOTE: Although VSE 8.8 Patch 3 includes the code to resolve the issue, VSE 8.8 P3 was released to provide support only for Windows 8 and Windows 2012, and installs only to these two operating systems.

McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Rate this document

Languages:

This article is available in the following languages:

English United States
Japanese

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.