SOLVED
Home

Deleting snapshot of Windows Server VM inflates thin VMDKs, VMware says in-guest OS task responsible

%3CLINGO-SUB%20id%3D%22lingo-sub-551664%22%20slang%3D%22en-US%22%3EDeleting%20snapshot%20of%20Windows%20Server%20VM%20inflates%20thin%20VMDKs%2C%20VMware%20says%20in-guest%20OS%20task%20responsible%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-551664%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Microsoft%20community%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20currently%20investigating%20a%20strange%20issue%20we%20recently%20discovered%20in%20our%20vCenter%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOur%20thin-provisioned%20Windows%20Server%202012%20VMs%20get%20their%20VMDKs%20inflated%20to%20maximum%20size%20after%20deleting%20their%20snapshot.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20snapshot%20is%20taken%20before%20deploying%20Windows%20Updates%20with%20SCCM.%20Once%20Windows%20Updates%20are%20installed%2C%20the%20VM%20is%20rebooted%20and%20is%20normally%20in%20a%20clean%20state.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EA%20few%20days%20later%20the%20snapshot%20is%20deleted%20either%20automatically%20or%20manually.%20I%20noticed%20that%20datastore%20space%20usage%20was%20going%20up%2C%20so%20I%20started%20searching%20what%20was%20eating%20up%20space%20and%20it's%20snapshot%20deletion.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EVmware%20support%20was%20contacted%2C%20I%20was%20told%20it's%20a%20known%20issue%20if%20a%20task%20like%20defragmentation%2C%20anti-malware%2C%20or%20Windows%20Updates%20is%20running%20at%20the%20same%20time%20when%20the%20snapshot%20is%20deleted.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20checked%20the%20Windows%20logs%20at%20the%20time%20of%20snapshot%20deletion%20and%20there%20was%20no%20defragmentation%20task%20running%20when%20the%20snapshot%20was%20deleted.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThere's%20a%20an%20anti-virus%20but%20I%20disabled%20it%20and%20VMDKs%20still%20expand%20to%20max%20size.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWindows%20updates%20are%20normally%20finished%204%20or%205%20days%20prior%20to%20snapshot%20deletion.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20you%20any%20clue%20how%20can%20I%20find%20what%20tasks%20in%20Windows%20could%20possibly%20be%20responsible%20for%20the%20expansion%20of%20the%20Windows%20thin-provisioned%20disks%20to%20their%20maximum%20allocated%20size%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-551664%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EStorage%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-554055%22%20slang%3D%22en-US%22%3ERe%3A%20Deleting%20snapshot%20of%20Windows%20Server%20VM%20inflates%20thin%20VMDKs%2C%20VMware%20says%20in-guest%20OS%20task%20respons%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-554055%22%20slang%3D%22en-US%22%3EI%20did%20another%20test%20which%20will%20probably%20discard%20any%20issues%20with%20the%20guest%20OS%20(Windows)%3A%20I%20powered%20off%20a%20VM%20with%20snapshot%20and%20deleted%20the%20snapshot.%20VMDKs%20inflated%20to%20maximum%20size.%3CBR%20%2F%3EI'm%20closing%20this%20post.%3C%2FLINGO-BODY%3E
lucien62
New Contributor

Hello Microsoft community,

 

I'm currently investigating a strange issue we recently discovered in our vCenter:

 

Our thin-provisioned Windows Server 2012 VMs get their VMDKs inflated to maximum size after deleting their snapshot.

 

The snapshot is taken before deploying Windows Updates with SCCM. Once Windows Updates are installed, the VM is rebooted and is normally in a clean state.

 

A few days later the snapshot is deleted either automatically or manually. I noticed that datastore space usage was going up, so I started searching what was eating up space and it's snapshot deletion.

 

Vmware support was contacted, I was told it's a known issue if a task like defragmentation, anti-malware, or Windows Updates is running at the same time when the snapshot is deleted.

 

I checked the Windows logs at the time of snapshot deletion and there was no defragmentation task running when the snapshot was deleted.

 

There's a an anti-virus but I disabled it and VMDKs still expand to max size.

 

Windows updates are normally finished 4 or 5 days prior to snapshot deletion.

 

Have you any clue how can I find what tasks in Windows could possibly be responsible for the expansion of the Windows thin-provisioned disks to their maximum allocated size?

 

1 Reply
Solution
I did another test which will probably discard any issues with the guest OS (Windows): I powered off a VM with snapshot and deleted the snapshot. VMDKs inflated to maximum size.
I'm closing this post.
Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies