spoolsv.exe using up network bandwidth

By TrevorLahey
in Microsoft (Windows)

 Share

Recommended Posts

Grand Master

TrevorLahey

Posted
Posted

We just implemented Meraki Wireless (Z1 model) to all of our outside agents. I've noticed on one user so far that there is a TON of data going across the VPN to our print server (uses about 1mb of his connection). Total 3Gbs this morning. I went to our print server, opened up resource monitor and found that the spoolsv.exe is the process that is using the data. His laptop isn't the only one doing this. There are also internal users that this is happening to. He has nothing to print, and the other users don't have anything printing or in the queue either. You can tell when a user that is working correctly, prints. The data spikes until the print job is finished sending. The users that are having this problem is constantly sending data, both send and receive.

has anyone else ran into this problem? I've looked all over the internet and found some users that have had the problem but nothing to fix it. I can shutdown the spooler service, but once it's started again the data starts to flow. I've done that on both the clients and the server. I've also made sure to check/clear the queue on both the server and the clients.

Grand Master

sc302 Veteran

Posted
  • Veteran
Posted

Yes it is going to. print jobs are huge, and they aren't compressed. a 2 meg word file could be a 100meg raw file (which is what gets sent to the printer), it depends on what they are printing. fix this issue by having local printers or by finding a way to transmit the print job compressed over the vpn to the printer network end and uncompress there.

We have done this with terminal servers being accessed over the vpn for years with the use of universal print servers like uniprint, screwdrivers, thinprint, etc. Basically you print on the terminal server, it compresses the print job to your client and it uses your client printer to expand and print the job locally. This worked great for dial up users trying to print locally when using rdp connecting to the server at the office. It saved a ton on bandwidth and kept printing quick vs waiting 30 min to print a job.

Grand Master

TrevorLahey

Posted
  • Author
Posted

Yes it is going to. print jobs are huge, and they aren't compressed. a 2 meg word file could be a 100meg raw file (which is what gets sent to the printer), it depends on what they are printing. fix this issue by having local printers or by finding a way to transmit the print job compressed over the vpn to the printer network end and uncompress there.

We have done this with terminal servers being accessed over the vpn for years with the use of universal print servers like uniprint, screwdrivers, thinprint, etc. Basically you print on the terminal server, it compresses the print job to your client and it uses your client printer to expand and print the job locally. This worked great for dial up users trying to print locally when using rdp connecting to the server at the office. It saved a ton on bandwidth and kept printing quick vs waiting 30 min to print a job.

I'm sorry, but I don't think it's that easy. Since he's an outside user, he has his own printer and he prints to that. It doesn't do him that well since he works out of the office however he has the ability to print to a printer here. He doesn't though, and even if you he did, he's not printing stuff all day. Today he's transfered 7.71GB to our print server on port 49162 if that helps anyone. Almost all day it has transfered at 1.6 mb/s continuously.

One of the users that it happens to here I was on her computer, she was definetly not printing anything. It also transfers a small amount about all day.

Grand Master

sc302 Veteran

Posted
  • Veteran
Posted

I just printed out a 2.9MB pdf. Watching the spooler it was a 800+MB raw file being printed. You can easily see that if I were to print that over the internet it would take a lot of bandwidth and it would take forever to print on a slow connection.

Does he print to the printer there, is that were you are seeing this or does he print to his printer next to him and that is where you are seeing it?

If he is printing next to him through a remote desktop connection or someone is send him a job over the internet, oh yes it will take every bit of that and is absolutely no surprise to me. Just think, how many times I would have to print that to reach your total...maybe 8 copies?

The only way around that is to compress it and get it to spool locally.

post-118098-0-44693900-1361569978.jpg

post-118098-0-09697900-1361570124.jpg

Grand Master

sc302 Veteran

Posted
  • Veteran
Posted

Ok, if you aren't printing, how are you monitoring this on your network? Ignore the above if you are sure the end users aren't printing.

btw

http://www.neuber.co...poolsv.exe.html

"The spoolsv.exe file is located in the folder C:\Windows\System32. In other cases, spoolsv.exe is a virus, spyware, trojan or worm!"

Could be something not nice.

Grand Master

TrevorLahey

Posted
  • Author
Posted

I just printed out a 2.9MB pdf. Watching the spooler it was a 800+MB raw file being printed. You can easily see that if I were to print that over the internet it would take a lot of bandwidth and it would take forever to print on a slow connection.

Does he print to the printer there, is that were you are seeing this or does he print to his printer next to him and that is where you are seeing it?

If he is printing next to him through a remote desktop connection or someone is send him a job over the internet, oh yes it will take every bit of that and is absolutely no surprise to me. Just think, how many times I would have to print that to reach your total...maybe 8 copies?

The only way around that is to compress it and get it to spool locally.

I'm telling you it's not that easy. If he prints it's going to be to the printer next to him, not over the VPN back to the main office. We can monitor how much and where the data is going from meraki. 2 days he sent 13.13 gb over the VPN. 11.26gb of that was to the print server, and he's not printing anything. Definetly not any books! The rest of the 1.87gb is email, VOIP phone, and file sharing...

Ok, if you aren't printing, how are you monitoring this on your network? Ignore the above if you are sure the end users aren't printing.

btw

http://www.neuber.co...poolsv.exe.html

"The spoolsv.exe file is located in the folder C:\Windows\System32. In other cases, spoolsv.exe is a virus, spyware, trojan or worm!"

Could be something not nice.

Meraki gives you a lot of information on what is going on, on your network. I can look at how much file sharing is going on, what computers are sending a lot of data and to who. They've got graphs and everything.. I noticed a lot of data going across the VPN from one user, I look and see most of the data is going to our print server. On our print server (Windows 2008), I went to Performance Monitor and you can drill down to what process is using the network. I did that and found it was spoolsv.exe.

It's defenetly not a virus... (On the server anyway, it's a brand new build).

The only thing I found so far was that it's possibly a corrupt printer install. I'm going to attempt to reinstall the printers sometime this week. Here is where I found some more information.

http://devhen.wordpress.com/2006/12/18/windows-spoolsvexe-using-99-cpu

It's not causing any CPU usage problem...

  • 2 months later...
  • 3 years later...
This topic is now closed to further replies.
 Share
Go to topic listing

  • Posts

    • Apple MacBook Neo is a blessing for Windows users, here's why

      By +samw61 · Posted

      But the reality is it will work for people's needs, and they don't care about the technology that makes it. Clearly not everyone's needs, but that low end space where personal laptops were only used to type emails, watch content and browse websites, but they didn't want to do that on a small screen device. Heck, writing that out I can now see the connection and reason it'll do so well. Apple is about experience. If the experience is bad, they don't release it. Low end Windows laptop manufacturers up until this point have not taken that into consideration ever before, so slow laggy usage with brittle slimey plastic shells were common. I hope that the low end space at least creates better physical products that last a bit longer, and if Microsoft get their act together, they could also have a solid OS on such low end hardware that would actually make the experience work for what the hardware was intended for. The fact that the CPU is a "cellphone", sorry mobile phone processor is irrelevant. It's about the experience, and so far, that sounds quite solid.
    • Module Blocked - Is this Okay?

      By goretsky · Posted

      Hello, Bonjour is Apple's implementation of a multicast-DNS service, which allows devices running Apple's software and/or hardware to find each other on your local network.  I believe the Windows version was last updated around 2010. If you do not need it, you can stop and disable the Bonjour service in the Services Control Manager (filename: SERVICES.MSC).  Once you have done that, the operating system will no longer attempt to load the service. Regards, Aryeh Goretsky  
    • This AMD RX 9070 16GB GPU that performs close to Nvidia 5070 is under $600

      By hellowalkman · Posted

      This AMD RX 9070 16GB GPU that performs close to Nvidia 5070 is under $600 by Sayan Sen With the memory shortage that's prevalent nowadays, discounts are super-hard to get. As such we post good deals whenever they pop up. Recently, we covered a few great discounts on SSDs wherein you can get a 4TB TeamGroup NVMe PCIe Gen4 drive for just $400 thanks to a special coupon. If you want a faster product but don't need all that capacity, you can also opt for Samsung's 990 PRO 2TB that is on sale for its lowest price in over three months. Let's say though that you are on the hunt for a 1440p gaming card. In that case AMD's RX 9070 non-XT can help, and with its 16GB VRAM, you can also run AI models locally without worrying about bottlenecking (check out our recent 9070 GRE reviews for gaming and productivity to get an idea). The PowerColor Reaper variant of the RX 9070 is currently on sale for just $580 which is a very good price in the current state of affairs (purchase link under the specs table down below). The Reaper cooler on this 9070 uses a triple‑fan design with ring‑blade fans, paired with premium dual ball bearings to extend lifespan and reduce friction. "Intelligent" fan control allows the fans to remain idle at lower temperatures, only spinning up when the GPU is under load. A nickel‑plated copper base makes direct contact with both the GPU and memory modules, helping to spread heat evenly. PowerColor also applies Honeywell PTM7950 phase‑change thermal interface material (TIM), which fills microscopic gaps between the die and heatsink for more efficient thermal transfer. The fan shroud is shorter in height as the firm has made it such that it can be used in certain SFF (small form factor) cases. The technical specifications of the Reaper RX 9070 are given in the table below: Specification Value Stream Processors 3584 Units Video Memory 16GB GDDR6 Memory Speed 20.0 Gbps Memory Interface 256-bit Engine Clock Game Clock: up to 2070 MHz Boost Clock: up to 2520 MHz Bus Standard PCI Express 5.0 x16 Display Connectors 1 x HDMI 2.1b, 3 x DisplayPort 2.1a Maximum Resolution DisplayPort: 7680 × 4320 HDMI: 7680 × 4320 Board Dimensions 289mm × 111mm × 41mm 304mm × 127mm × 42mm (with bracket) Slot 2 Minimum System Power Requirement 600W Power Connectors Two 8-pin PCI Express Get the PowerColor Reaper RX 9070 at the links below (you get only a 90-day warranty on Woot): PowerColor Reaper Radeon RX 9070 16GB Graphics Card (RX9070 16G-A): $579.99 (Sold and Shipped by Amazon US) (Was: $700) PowerColor Reaper Radeon RX 9070 16GB Graphics Card (RX9070 16G-A): $559.99 (Sold and Shipped by Woot US) Good to know This Amazon deal is U.S. specific, and not available in other regions unless specified. We only use first-party seller links (at the time of article publishing); ensure that you purchase from a first-party seller link only. Check out Today's Deals on Amazon | or our recent tech deals. Become a Prime member (for Students or SNAP) via Neowin Get Prime Access - Prime for half price (for qualifying Medicaid, EBT, SNAP) Subscribe to Prime Video, Audible Plus, Music Unlimited or Kindle Unlimited via Neowin As an Amazon Associate, we earn from qualifying purchases.
    • DWARF mini review: the world's smallest smart telescope for night and day sky captures

      By ZipZapRap · Posted

      Are they marketed as an entry into astronomy or astrophotography? I do astrophotography. With big rigs, lots of computers, cables and headaches. I love it. And by learning this ridiculously complex hobby, I’ve learned about the objects I’m shooting. Astronomy followed from photography.
    • Microsoft confirms Recycle Bin bug across all versions of Windows

      By Usama Jawad96 · Posted

      Microsoft confirms Recycle Bin bug across all versions of Windows by Usama Jawad A couple of days ago, we reported that the latest Patch Tuesday update has seemingly resulted in a lot of issues for many users, including OneDrive and Dropbox access problems, BitLocker recovery lockouts, and BSODs. Although Microsoft is yet to acknowledge these bugs, it has confirmed another, relatively smaller issue across all supported versions of Windows. In an update on its Windows Release Health Dashboard, Microsoft has confirmed that after installing June's Patch Tuesday update (KB5094126), you'll experience unexpected behavior when leveraging Recycle Bin. Basically, when you attempt to delete an item from the Recycle Bin, the confirm dialog will show you the internal file name of that content rather than the actual name. For example, the file may be named abc.png, but the confirm dialog will ask if you're sure that you want to permanently delete $Rxxxxx.png from the Recycle Bin. This is pretty much it for the scope of the bug itself; it just displays the wrong name in the confirm dialog. The correct name will be shown in the list view of the Recycle Bin and if you restore the file, it will return with the correct name as well. This issue affects pretty much all supported versions of Windows client and server, including: Client: Windows 11, version 26H1; Windows 11, version 25H2; Windows 11, version 24H2; Windows 11, version 23H2; Windows 10, version 22H2; Windows 10 Enterprise LTSC 2021; Windows 10 Enterprise LTSC 2019; Windows 10 Enterprise LTSB 2016 Server: Windows Server 2025; Windows Server 2022; Windows Server 2019; Windows Server 2016; Windows Server 2012 R2; Windows Server 2012 As things currently stand, Microsoft is working on a concrete solution that will be released in a "future" Windows update. It remains to be seen if the firm will wait till the next Patch Tuesday or roll out an out-of-band (OOB) fix. The good news is that commercial customers can deploy a workaround right now, but they will have to reach out to Microsoft Support for Business for additional details.

  • Recent Achievements

    • Week One Done
      Jordan Smith earned a badge
      Week One Done
    • Reacting Well
      BizSAR earned a badge
      Reacting Well
    • First Post
      AndreaB earned a badge
      First Post
    • Week One Done
      Huge Trailer earned a badge
      Week One Done
    • Week One Done
      Classifyskilleducation earned a badge
      Week One Done

  • Popular Contributors

    1. 1
      +primortal
      582
    2. 2
      +Edouard
      185
    3. 3
      PsYcHoKiLLa
      75
    4. 4
      Michael Scrip
      73
    5. 5
      neufuse
      64
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!