Windows 2008 File Server stop responding when accessing an Enterprise Vault (EV) File System Archiving (FSA) placeholder

  • Article ID:100025116
  • Modified Date:
  • Product(s):


The FSA target file server may stop responding when all conditions below are met:

  • Server version is Windows Server 2008
  • EV placeholder service is installed
  • Client is accessing to a placeholder shortcut

Error Message

There are no clear error messages. The file server may become unresponive or stop responding when a placeholder is accessed.

If dump file can be collected, there should be a thread which has stack trace like this:


fffff880`0a5df630 fffff880`067a0f7d : 00000000`00000004 fffffa80`29298140 fffffa80`1e1012c0 fffffa80`35751d50 : fltmgr!FltSetInformationFile+0xde
fffff880`0a5df690 fffff880`0679fbe0 : 00000000`00000000 fffffa80`183dfa58 fffffa80`0dad1630 00000000`00010800 : evmf+0x9f7d
fffff880`0a5df740 fffff880`0679f0d8 : fffffa80`183dfa60 00000000`00000000 00000000`00000000 fffff8a0`46f20700 : evmf+0x8be0
fffff880`0a5df820 fffff880`0679ec13 : fffffa80`183dfa30 fffff880`0a5df980 00000000`00000000 fffffa80`0dad1630 : evmf+0x80d8
fffff880`0a5df870 fffff880`0175d027 : fffffa80`0dad16d0 fffffa80`29298450 fffffa80`0dad1580 00000000`00000000 : evmf+0x7c13
fffff880`0a5df930 fffff880`0175dbe9 : fffff880`0a5dfa00 fffffa80`1e101203 fffff880`0a5dfb00 fffffa80`211c0a00 : fltmgr!FltpPerformPreCallbacks+0x2f7

It means FltpPerformPreCallBacks (a part of NTFS system) calls evmf (a mini filter which is a part of Enterprise Vault placeholder service), then evmf calls FltSetInformationFile (a NTFS API). Actual address values (like "fffff880`0a5df630") may vary by environments.


An API parameter flag FLTFL_IO_OPERATION_SYNCHRONOUS_PAGING is newly introduced in Windows Server 2008 and Windows 7. Earlier versions of Windows OS do not have this flag. In the particular request which EV mini filter (evmf.sys) issued through Windows API need this flag on Windows Server 2008 to control synchronous paging mode properly, but the EV mini filter (evmf.sys) doesn't describe this flag for the API.

The EV mini filter (evmf.sys) was changed to add appropriate flags depending on the version of Windows.


This issue has been addressed in the following release:

Enterprise Vault 9.0.3 - Release Details

Enterprise Vault 10.0.1 - Release Details


Applies To

Windows Server 2008 for FSA target.

Enterprise Vault 8.0, 9.0


Was this content helpful?

Get Support