I have a suspicion that the issue with XenDesktop and another program (it might be SCCM in my environment) fighting over the WMI repository. I have never been able to kill the spiked process.
When CPU spike occured, the processes was always a svhost.exe process tied to winmgmt (WMI) service. Then boot the machine back to normal mode and it would function again. from Admin CMD "winmgmt /resetrepository". Generally I would do this from safe-mode as there are fewer services relying on WMI. On the occasions where a hard-reset didn't return the server to functionality, I had to do a WMI repository reset. Using a CLI tool (taskkill, etc.) would just hang tryin to end the process. Trying to kill them from task manager would have no effect. I left myself logged into the server until the problem reoccured, at which point I was able to see that numerous sessions where not logging off correctly (still had 4-5 windows processes running) - I was unable to foribly kill these programs. There where generally numerous half-closed sessions on the bugged servers. Ever since I segregated RDP sessions and XenDesktop sessions onto seperate servers the problem has been much less frequent. 
Problem was much more common when dealing with Servers where there were mixed ICA/RDP sessions.
I haven't tracked down the precise cause but here are some things I've noticed. My experience has been that it generally fixes itself after a hard reboot.
0 kommentar(er)
