| Event Id | 8223 |
| Source | Exchange MOM |
| Description | The value for the Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\HeapDecommitFreeBlockThreshold is not configured correctly or does not exist on this server. This server has equal to or more than 1 gig of RAM and the value should be set to 262144. Please see the Knowledge Base for this Alert for more information. |
| Event Information | According to Microsoft: The heap manager does not necessarily combine all free blocks or make new allocations; therefore, blocks may be de-committed and become useless holes in the virtual address space. The HeapDecommitFreeBlockThreshold registry key provides better control of how the memory is handled as it is freed. To add this key, you need to edit the registry. |
| Reference Links | The "HeapDecommitFreeBlockThreshold" registry key |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.