I have problems with the performance of my network connector, the upload speed exceeds the bandwidth.

I look at the resource monitor and I realize that the Lsass.exe process with PID 844 is the cause of the exessive network activity.

I tried to change the network connector, I installed the updates but I could not find the root cause of the problem.

WAN Adapter

Lsass.exe Process


Run tcpview and check what is the remote endpoint, it will provide you knowledge of what cause it.

Edit: I seen your result from tcpview. Please know that multihoming a DC bring challenge.. As such your tcpview show that it’s your own server that talk to itself. A badly binded ADDS service to your WAN IP is the culprit. Be advised the traffic never actually hit the internet on the other side, but nonetheless it’s not ok.

As it come from lsass.exe I suspect update (and/or wsus) or upload to azure if you are linked to Azure, but in anycase the tcpview will provide you the direct answer.

  • Process: Lsass.exe | PID: 844 | TCP | LocalAddress: SERVIDOR | Local Port: ldap | Remote Address: SERVIDOR | Remote Port: 0 | Stated: LISTENING | Sent Packets: 44.775 | Sent Bytes: 135.589.750 | Rcvd Packets: 45.007 | Rcvd Bytes: 2.297.315 – Diego Martinez Jun 7 at 20:18
  • @DiegoMartinez thanks! updated my answer – yagmoth555 Jun 7 at 21:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.