Questions tagged [lsass]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
0 answers
123 views

Lsass.exe high CPU usage on Windows Server 2012 R2 for HTTPS request

Recently we faced CPY spikes on our production servers & our web applications runs on Windows Server 2016 as well 2012 server. It looks as follows: IIS with 10 applications running with SSL: MVC ...
user avatar
  • 121
2 votes
0 answers
1k views

Lsass.exe high CPU usage on Windows Server 2016

My website runs on Windows Server 2016. It looks as follows: IIS with 3 applications running with SSL: MVC website (.Net Framework 4.7). Two .Net Core 3.1 Api's. MS SQL Express 2019. If the ...
user avatar
1 vote
0 answers
983 views

Determine the root cause of Windows update rendering PCs unbootable

Dozens of Windows 8.1 PCs across my environment show Fatal Error: C0000022 and cannot boot any further after installing either KB4541505 or KB4541509. Automatic Repair fails; they cannot be restored ...
user avatar
0 votes
0 answers
144 views

Problems with the DSA-Signature attribute in windows server 2016

I have problems with the DSA-Signature attribute being updated in the schema naming context (NC schema) when backing up the system state of a domain controller. Windows clients running ADSI ...
user avatar
0 votes
1 answer
886 views

Lost in the upload bandwidth in Windows Server 2016

I have problems with the performance of my network connector, the upload speed exceeds the bandwidth. I look at the resource monitor and I realize that the Lsass.exe process with PID 844 is the cause ...
user avatar
4 votes
3 answers
1k views

Protect against password cracking in Windows

I know that exists tools for get the passwords in plain text from memory in Windows (read memory and decrypt password from LSASS process). This behavior still exists in The Windows Server 2019 ? Is ...
user avatar
  • 53
2 votes
0 answers
114 views

Lsass authenticates to ADFS on windows login

I am researching a domain user lockdown problem that involves an ADFS. What happens is that anytime a domain user logins into a windows 10 machine, lsass connects to ADFS to authenticate the user ...
user avatar
  • 21
-3 votes
1 answer
3k views

Windows Server 2012r2: Lsass.exe getting hammered from Internet

guys. My gateway server has been getting hammered for about a day, now. Internet access slows to a crawl for about an hour at a time, internally, and I noticed that when it is slow, lsass.exe is ...
user avatar
4 votes
1 answer
4k views

Server 2012 stuck in a reboot loop - lsass.exe failed

My Server 2012 server boots up fine and the login screen is visible (from a local console). Password entry works but attempting to submit the password - either by clicking the arrow or pressing the ...
user avatar
0 votes
1 answer
553 views

lsass.exe has different version on different Windows 7 x64 machines

On most of machines lsass.exe has version 6.1.7601.23002 On several machines lsass.exe has version 6.1.7601.18798 I suspect that this is a cause of errors ...
user avatar
  • 103
4 votes
2 answers
18k views

Lsass.exe high CPU usage and causing request queuing on webserver

I have a webserver with Windows 2012 R2, running only one website, on ASP.NET 4.5.1, IIS 8.5. It does not have, and has never had, the AD role installed. Last Sunday, the process lsass.exe, suddenly ...
user avatar
0 votes
1 answer
2k views

High CPU Usage by LSASS.exe when installing Exchange Server 2013

We have a Windows 2008 R2 DC and we are installing Exchange Server 2013 (New installation) on a Windows 2012 R2 Server. During the installation I noticed it is getting stuck after completing 18% or 19%...
user avatar
  • 1
0 votes
0 answers
2k views

lsass.exe uses 2.4GB of memory when resolving a web page

I have a user who has been noticing slowdowns with his machine frequently. When investigating his system (Windows Server 2008 R2) processes, we saw that lsass.exe was using 2.4GB of memory. A reboot ...
user avatar
  • 447
0 votes
0 answers
1k views

lsass.exe and UDP port 53

We have DC and DNS on the same server (Windows Server 2012), but today I had seen that lsass.exe uses UDP :53 and our DNS server also requires this incomming UDP port to serve queries through UDP. Is'...
user avatar
0 votes
1 answer
755 views

SBS Server 2008 with periodic lsass.exe using 100% of 1 Core

SBS Server 2008 with everything running on it (AD/PDC, SQL 2012, FileServer, RDP Gateway, WSUS, No Exchange though). Every 30 minutes on the hour and half hour, lsass.exe uses 25% of the CPU (1 core ...
user avatar
  • 731
0 votes
1 answer
2k views

LSASS.Exe using 100% CPU usage on SBS2003

LSASS.exe is using 100% CPU usage on my SBS2003 DC. For the life of me, I can't figure out what's causing it. I've checked the event logs and found a few things. I can't see if any of it is related. ...
user avatar
  • 21
2 votes
1 answer
308 views

Guest account disabled but Guest listed at Task Manager

Because of high CPU usage by the lsass.exe process I googled then discovered the guest account is enabled. I disabled it yesterday & rebooted, as the result CPU usage became normal. Today I ...
user avatar
2 votes
2 answers
1k views

LSASS - Directory Services could not start - 0xc000006a

LSASS - Directory Services could not start - 0xc000006a This is the error message I am getting after restoring an old registry backup. I read somewhere that this has to do with the backup being more ...
user avatar
1 vote
0 answers
290 views

can SECEDIT.exe be used to only add 1 group to 1 security policy? example?

I am assuming based on my research for using SECEDIT.exe -- that a template would be added to the exisitng security .SDB file. That this template would be very tiny... only naming the security policy ...
user avatar
0 votes
1 answer
309 views

Windows 2000 Domain Controller CPU running at 100%

We are running a Windows 2000 Server as a domain controller and file server. 2 weeks ago, the machine was running fine. Then, after a power-outage and a restart, the machine became sluggish and ...
user avatar
  • 2,616
2 votes
1 answer
2k views

LSASS.exe trying to communicate over port 80

We are running a standalone web server (Windows 2008 + IIS 7), and our antivirus is blocking LSASS.exe (C:\Windows\system32\lsass.exe) from making outbound connections over port 80. Why is LSASS ...
user avatar
  • 21
0 votes
1 answer
1k views

lsass.exe is sending lots of ldap search queries to a NAS device

I just noticed that my dc (W2k3 R2 Enterprise SP2) is sending ldap queries to an IP address that is assigned to a NAS device (snapserver). The snapserver is in another AD site and has Active Directory ...
user avatar