Windows 10: Extremely High RAM utilization, high Paged Pool

The issue started in mid-February when I received multiple warnings and critical alerts from my RMM software for several PCs I administer - the RMMs settings for RAM alerts are a warning at 85% and critical at 90%.
All of these systems have been deployed for over 2 years and I've never had any of them give high memory alerts before. Now, of the 12 PCs in the office, 10 PCs are going to critical alert with the RAM use slowly creeping up over a 4+ day period. The users are complaining of the PCs becoming slow, lagging, or unresponsive. A reboot tends to make the PC usable again until the RAM gets critical again.


Image 1 is RMM metrics from a users PC showing RAM (purple line) before the issues started, and after February 12th, the RAM creeping to +90% after the issues started
Image 2 is a current image of the RMM metrics for the last month









To make the issue more obvious, here is an image from our conference room Intel NUC, that is idle most of the time. I know that the spikes are the right side are while the PC was mostly idle and I was rebooting the PC to get the RAM to drop:




To help you understand some of the things I have tried, here are samples of the alerts I got from my RMM software:











As I mentioned above, I have 10 PCs, some are idle, having this issue. I have 2 actively used PCs that are NOT having the issue. In trying to troubleshoot, I have basically compared the idle systems with the issue to the 2 active user PCs that are not having the issue.
Here are images from Process Explorer, Task Manager and RAMMAP from an idle system that is having the issue:










Initially seeing epsecurityservice at the top of Process Explorer and in the RMM alert, I thought BitDefender Endpoint Security (GravityZone) was the issue. I applied a disable policy to BitDefender on an idle system and the issue did seem to stop after a reboot.

HOWEVER, seeing svchost in the list, I also tried a Clean Boot, but disabled everything EXCEPT BitDefender and my RMM software so I could continue to connect to the system.

Again, the issue seemed to stop with a Clean Boot and BitDefender still enabled.

So I compared Process Explorer metrics for a system with the issue and one that doesnt have the issue and found that epsecurityservice.exe had roughly the same RAM use between the two systems and the numbers were not increasing steadily over time.
This made me think BitDefender isnt the issue but perhaps something it uses in the OS.

So I then looked at RAMMAP and Task Manager, and that is when I saw the extremely high Paged Pool on the idle system and a relatively small Paged Pool on the system in use. So I checked all the systems with the issue and they all have extremely high paged pools, even on systems that have been rebooted and left idle for days.

Here are screenshots of for one of my systems that is not having the RAM issue:










And just for a comparison reference, here is what my RMM metrics for RAM look like on one of my PCs that doesn't have the issue:





Here is a quick rundown of these systems configurations which is making it hard to determine if it is a driver issue since 4 different configurations are having the issue:





I'm not sure whether the huge Page Pool is okay, but it doesn't seem normal when compared to how my RAM utilization is for the 2 systems that are not having any issues.

If anyone has suggestions on what else I should try to resolve this, Id greatly appreciate it.

If you want more information, please give me step-by-step simply to save time I dont want to waste any time assuming I know what you want and giving you the wrong info.

Thanks in advance for the help!!

:)

 

High ram usage with non paged pool size

I posted in my topic poolman result .
poolman boot - Hızlı Resim
You cant see in task manager .Highest usage ram non paged ismc tag

 

High paged pool memory after leaving system on for quite sometime

1.2 GB Paged pool does not seem unreasonable for a system with 32 GB RAM. This value is higher for systems with large RAM sizes. In any event it is hardly likely to be the cause of your problem.

The paged and non paged memory pools are used by kernel level components such as drivers and the kernel itself. The paged pool can be paged out at the memory managers discretion while the non paged pool must remain in RAM at all times. Task Manager will not tell you how much of the paged pool is in RAM.

Memory usage in any modern OS is controlled by the system memory manager, always with the goal of maximizing overall system performance. When available memory is plentiful, as is shown in the screenshots, the memory manager will allow processes and other Windows components to use pretty much whatever memory they want without restrictions. But if there is memory pressure it is fully capable of reducing the paged pool usage to a small fraction of it's current value. But it will only do this if needed. Doing it at any other time would serve no useful purpose and would likely impair performance. Note that this is the RAM resident portion of the paged pool, not what is shown in Task Manager which would be unaffected.

High memory usage, even if it is seriously abnormal, will not impair performance unless it causes a shortage. I have seen many Internet articles that get this wrong. It is not unusual for the paged pool to grow over time. Unless there is a memory leak, and there is nothing to suggest that here, this growth will stop.

 

High ram usage with non paged pool size

enable the nonpaged pool column and sort by it and post another screenshot since you said nonpaged pool is too high.

Also post a clear screenshot without multiple windows overlapping each other please.