Distributed Processing Engine (DPE) utilization drops to zero
Description:
While using DPEs to process evidence, the user may see that the utilization suddenly drops to zero. Additionally, the FTK Examiner system's Windows Event logs will likely be contain multiple instances of Error 2017 (Windows 7 Nonpaged Pool Srv Error 2017). It is believed that this is happening because there are too many requests to server which runs out of non-paged memory.
Solution:
Set the following registry key to 1:
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management | LargeSystemCache
and
Set the following registry key to 3:
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters | Size