Sorry folks, I think i got this one on my own. Below is what I have found:
**The IIS Worker service was using high amounts of CPU. After further investigation we found the issue to be with the WsusPool Worker Process on the server. It would climb up and service a few clients and then recycle on a regular basis. We noticed the same IP addresses were in the "current requests" for the worker service each time before it crashed. It was the Windows Server 2016 servers, which were coincidentally the Advanced Threat Analytics servers (not related). **
After many searches and digging on this topic it would appear it is an IIS configuration change issue, which is reflected in the following articles:
Output Cache Increase (for response file size):
- Output Cache Settings increase to 1048576 (in bytes)
Maximum Worker Processes:
-Maximum Worker Processes from 1 to 0 (System must be NUMA aware for this and will essentially trigger as many worker processes as there are NUMA nodes).
We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.