Question : Event ID 2020 SVR - After HP Software install, reboots needed a couple times a day

The saga, I hope not to get too lengthy, but I want to give all pertinent information! :)

I have a Windows 2000 Server, running Terminal Services that 3 users log in with.

The three locations all got three new printers (that I did not recommend), HP Officejet 5610s.

In the past I have been able to finagle the drivers on the server for other past printers to work properly through Terminal Services.

While installing the Officejet driver, I was forced to install everything from the CD, the install would not continue telling me the OS was not supported.

After physically attaching a Officejet 5610 to the server, I was able to get a Printer installed and the locations could log in and their 5610 was properly created.

The next morning, I found that when the remote and local users went to a mapped drive they received an error saying the server ( I am paraphrasing) Did not have enough space to process the request.

The event view showed tons of Event ID 2020 from source SVR, "The server was unable to allocate from the system paged pool because the pool was empty."

Rebooting the server made it OK again, but I noticed a pattern that the 2020 errors occurred not long after a remote user logged in and their printer was created.

I removed all remote printers physically and uninstalled the so they did not appear in the Printers window.
This alleviated it, but the 2020s still persisted.

I went through the server and removed every HP folder, every HP registry entry, cleaned out the c:\winnt\system32\spool\drivers folder.

An occasional Terminal Service user logged in, she has a Deskjet 3740, this set off another set of 2020 errors again. The event viewer said the printer could not be created because it couldn't find a suitable driver.

I have installed the support tools so I could use poolmon and see where the memory leak is, but I am not sure how to interpret the numbers, I see the processes and the numbers change, but nothing really shoots through the roof or anything. Also, I cannot figure out how to get a dump from poolmon to post as part of this message.

poolmon /? gives me an unknown switch error

The others I have read about to create a text file to post also give me that unknown switch

So, I am sure it is a memory leak somewhere, I am relatively sure it is HP or printer related, I just need help tracking it down!!

Thanks in advance

Answer : Event ID 2020 SVR - After HP Software install, reboots needed a couple times a day

since this is a windows 2000 machine, we also need to enable pooltagging before running poolmon in case its not enabled. check out this article http://www.microsoft.com/whdc/Driver/tips/PoolMem.mspx for information about pooltagging and http://support.microsoft.com/kb/177415 on how to enable pool tagging through the registry. you need not do it again if its already been enabled. pool tagging is enabled by default on windows 2003 servers.