Questions tagged [lsass]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
122 views

Isass.exe memory leak on Windows Server 2008 R2 [closed]

I found one of our Windows Server(2008 R2) use 98% memory(16GB in all). In Task manager, lsass.exe was found using about 15GB memory. After restart the server, lsass.exe occupy about 10MB memory, and ...
0 votes
0 answers
813 views

Debug lsass.exe to find process responsible for account lockouts

One of our users gets locked from AD once a week. I have identified the source computer which causes the lockout by checking event 4740 on our domain controller. By monitoring network activity via ...
0 votes
0 answers
146 views

Windows 11 security connection issues

I applied a windows update to Windows 11 and since then I have been unable to connect to remote machines using MSTSC, the error is "An authentication error has occured. The Local Security ...
0 votes
1 answer
2k views

High CPU Usage by LSASS.exe when installing Exchange Server 2013

We have a Windows 2008 R2 DC and we are installing Exchange Server 2013 (New installation) on a Windows 2012 R2 Server. During the installation I noticed it is getting stuck after completing 18% or 19%...
2 votes
1 answer
3k views

LSASS.exe trying to communicate over port 80

We are running a standalone web server (Windows 2008 + IIS 7), and our antivirus is blocking LSASS.exe (C:\Windows\system32\lsass.exe) from making outbound connections over port 80. Why is LSASS ...
2 votes
0 answers
806 views

Lsass.exe high CPU usage on Windows Server 2012 R2 for HTTPS request

Recently we faced CPY spikes on our production servers & our web applications runs on Windows Server 2016 as well 2012 server. It looks as follows: IIS with 10 applications running with SSL: MVC ...
2 votes
0 answers
2k views

Lsass.exe high CPU usage on Windows Server 2016

My website runs on Windows Server 2016. It looks as follows: IIS with 3 applications running with SSL: MVC website (.Net Framework 4.7). Two .Net Core 3.1 Api's. MS SQL Express 2019. If the ...
1 vote
0 answers
2k views

Determine the root cause of Windows update rendering PCs unbootable

Dozens of Windows 8.1 PCs across my environment show Fatal Error: C0000022 and cannot boot any further after installing either KB4541505 or KB4541509. Automatic Repair fails; they cannot be restored ...
0 votes
1 answer
962 views

Lost in the upload bandwidth in Windows Server 2016

I have problems with the performance of my network connector, the upload speed exceeds the bandwidth. I look at the resource monitor and I realize that the Lsass.exe process with PID 844 is the cause ...
0 votes
0 answers
224 views

Problems with the DSA-Signature attribute in windows server 2016

I have problems with the DSA-Signature attribute being updated in the schema naming context (NC schema) when backing up the system state of a domain controller. Windows clients running ADSI ...
4 votes
3 answers
1k views

Protect against password cracking in Windows

I know that exists tools for get the passwords in plain text from memory in Windows (read memory and decrypt password from LSASS process). This behavior still exists in The Windows Server 2019 ? Is ...
2 votes
0 answers
166 views

Lsass authenticates to ADFS on windows login

I am researching a domain user lockdown problem that involves an ADFS. What happens is that anytime a domain user logins into a windows 10 machine, lsass connects to ADFS to authenticate the user ...
4 votes
2 answers
19k views

Lsass.exe high CPU usage and causing request queuing on webserver

I have a webserver with Windows 2012 R2, running only one website, on ASP.NET 4.5.1, IIS 8.5. It does not have, and has never had, the AD role installed. Last Sunday, the process lsass.exe, suddenly ...
-3 votes
1 answer
3k views

Windows Server 2012r2: Lsass.exe getting hammered from Internet

guys. My gateway server has been getting hammered for about a day, now. Internet access slows to a crawl for about an hour at a time, internally, and I noticed that when it is slow, lsass.exe is ...
4 votes
1 answer
4k views

Server 2012 stuck in a reboot loop - lsass.exe failed

My Server 2012 server boots up fine and the login screen is visible (from a local console). Password entry works but attempting to submit the password - either by clicking the arrow or pressing the ...
0 votes
1 answer
3k views

LSASS.Exe using 100% CPU usage on SBS2003

LSASS.exe is using 100% CPU usage on my SBS2003 DC. For the life of me, I can't figure out what's causing it. I've checked the event logs and found a few things. I can't see if any of it is related. ...
0 votes
1 answer
575 views

lsass.exe has different version on different Windows 7 x64 machines

On most of machines lsass.exe has version 6.1.7601.23002 On several machines lsass.exe has version 6.1.7601.18798 I suspect that this is a cause of errors ...
0 votes
0 answers
3k views

lsass.exe uses 2.4GB of memory when resolving a web page

I have a user who has been noticing slowdowns with his machine frequently. When investigating his system (Windows Server 2008 R2) processes, we saw that lsass.exe was using 2.4GB of memory. A reboot ...
0 votes
0 answers
1k views

lsass.exe and UDP port 53

We have DC and DNS on the same server (Windows Server 2012), but today I had seen that lsass.exe uses UDP :53 and our DNS server also requires this incomming UDP port to serve queries through UDP. Is'...
0 votes
1 answer
792 views

SBS Server 2008 with periodic lsass.exe using 100% of 1 Core

SBS Server 2008 with everything running on it (AD/PDC, SQL 2012, FileServer, RDP Gateway, WSUS, No Exchange though). Every 30 minutes on the hour and half hour, lsass.exe uses 25% of the CPU (1 core ...
2 votes
1 answer
363 views

Guest account disabled but Guest listed at Task Manager

Because of high CPU usage by the lsass.exe process I googled then discovered the guest account is enabled. I disabled it yesterday & rebooted, as the result CPU usage became normal. Today I ...
2 votes
2 answers
1k views

LSASS - Directory Services could not start - 0xc000006a

LSASS - Directory Services could not start - 0xc000006a This is the error message I am getting after restoring an old registry backup. I read somewhere that this has to do with the backup being more ...
1 vote
0 answers
302 views

can SECEDIT.exe be used to only add 1 group to 1 security policy? example?

I am assuming based on my research for using SECEDIT.exe -- that a template would be added to the exisitng security .SDB file. That this template would be very tiny... only naming the security policy ...
0 votes
1 answer
321 views

Windows 2000 Domain Controller CPU running at 100%

We are running a Windows 2000 Server as a domain controller and file server. 2 weeks ago, the machine was running fine. Then, after a power-outage and a restart, the machine became sluggish and ...
0 votes
1 answer
1k views

lsass.exe is sending lots of ldap search queries to a NAS device

I just noticed that my dc (W2k3 R2 Enterprise SP2) is sending ldap queries to an IP address that is assigned to a NAS device (snapserver). The snapserver is in another AD site and has Active Directory ...