Questions tagged [lsass]
The lsass tag has no usage guidance.
24
questions
0
votes
0
answers
116
views
Windows 11 security connection issues
I applied a windows update to Windows 11 and since then I have been unable to connect to remote machines using MSTSC, the error is "An authentication error has occured. The Local Security ...
- 109
0
votes
0
answers
548
views
Debug lsass.exe to find process responsible for account lockouts
One of our users gets locked from AD once a week. I have identified the source computer which causes the lockout by checking event 4740 on our domain controller.
By monitoring network activity via ...
- 287
2
votes
0
answers
763
views
Lsass.exe high CPU usage on Windows Server 2012 R2 for HTTPS request
Recently we faced CPY spikes on our production servers & our web applications runs on Windows Server 2016 as well 2012 server. It looks as follows:
IIS with 10 applications running with SSL:
MVC ...
- 121
2
votes
0
answers
2k
views
Lsass.exe high CPU usage on Windows Server 2016
My website runs on Windows Server 2016. It looks as follows:
IIS with 3 applications running with SSL:
MVC website (.Net Framework 4.7).
Two .Net Core 3.1 Api's.
MS SQL Express 2019.
If the ...
- 121
1
vote
0
answers
2k
views
Determine the root cause of Windows update rendering PCs unbootable
Dozens of Windows 8.1 PCs across my environment show Fatal Error: C0000022 and cannot boot any further after installing either KB4541505 or KB4541509. Automatic Repair fails; they cannot be restored ...
- 338
0
votes
0
answers
211
views
Problems with the DSA-Signature attribute in windows server 2016
I have problems with the DSA-Signature attribute being updated in the schema naming context (NC schema) when backing up the system state of a domain controller.
Windows clients running ADSI ...
- 129
0
votes
1
answer
949
views
Lost in the upload bandwidth in Windows Server 2016
I have problems with the performance of my network connector, the upload speed exceeds the bandwidth.
I look at the resource monitor and I realize that the Lsass.exe process with PID 844 is the cause ...
- 129
4
votes
3
answers
1k
views
Protect against password cracking in Windows
I know that exists tools for get the passwords in plain text from memory in Windows (read memory and decrypt password from LSASS process).
This behavior still exists in The Windows Server 2019 ?
Is ...
- 53
2
votes
0
answers
149
views
Lsass authenticates to ADFS on windows login
I am researching a domain user lockdown problem that involves an ADFS.
What happens is that anytime a domain user logins into a windows 10 machine, lsass connects to ADFS to authenticate the user ...
- 21
-3
votes
1
answer
3k
views
Windows Server 2012r2: Lsass.exe getting hammered from Internet
guys. My gateway server has been getting hammered for about a day, now. Internet access slows to a crawl for about an hour at a time, internally, and I noticed that when it is slow, lsass.exe is ...
- 1
4
votes
1
answer
4k
views
Server 2012 stuck in a reboot loop - lsass.exe failed
My Server 2012 server boots up fine and the login screen is visible (from a local console). Password entry works but attempting to submit the password - either by clicking the arrow or pressing the ...
- 71
0
votes
1
answer
568
views
lsass.exe has different version on different Windows 7 x64 machines
On most of machines lsass.exe has version 6.1.7601.23002
On several machines lsass.exe has version 6.1.7601.18798
I suspect that this is a cause of errors ...
- 103
4
votes
2
answers
19k
views
Lsass.exe high CPU usage and causing request queuing on webserver
I have a webserver with Windows 2012 R2, running only one website, on ASP.NET 4.5.1, IIS 8.5.
It does not have, and has never had, the AD role installed.
Last Sunday, the process lsass.exe, suddenly ...
- 43
0
votes
1
answer
2k
views
High CPU Usage by LSASS.exe when installing Exchange Server 2013
We have a Windows 2008 R2 DC and we are installing Exchange Server 2013 (New installation) on a Windows 2012 R2 Server. During the installation I noticed it is getting stuck after completing 18% or 19%...
- 1
0
votes
0
answers
3k
views
lsass.exe uses 2.4GB of memory when resolving a web page
I have a user who has been noticing slowdowns with his machine frequently. When investigating his system (Windows Server 2008 R2) processes, we saw that lsass.exe was using 2.4GB of memory. A reboot ...
- 457
0
votes
0
answers
1k
views
lsass.exe and UDP port 53
We have DC and DNS on the same server (Windows Server 2012), but today I had seen that lsass.exe uses UDP :53 and our DNS server also requires this incomming UDP port to serve queries through UDP.
Is'...
- 181
0
votes
1
answer
783
views
SBS Server 2008 with periodic lsass.exe using 100% of 1 Core
SBS Server 2008 with everything running on it (AD/PDC, SQL 2012, FileServer, RDP Gateway, WSUS, No Exchange though).
Every 30 minutes on the hour and half hour, lsass.exe uses 25% of the CPU (1 core ...
- 741
0
votes
1
answer
3k
views
LSASS.Exe using 100% CPU usage on SBS2003
LSASS.exe is using 100% CPU usage on my SBS2003 DC.
For the life of me, I can't figure out what's causing it. I've checked the event logs and found a few things. I can't see if any of it is related. ...
- 21
2
votes
1
answer
353
views
Guest account disabled but Guest listed at Task Manager
Because of high CPU usage by the lsass.exe process I googled then discovered the guest account is enabled. I disabled it yesterday & rebooted, as the result CPU usage became normal.
Today I ...
- 476
2
votes
2
answers
1k
views
LSASS - Directory Services could not start - 0xc000006a
LSASS - Directory Services could not start - 0xc000006a
This is the error message I am getting after restoring an old registry backup. I read somewhere that this has to do with the backup being more ...
- 21
1
vote
0
answers
298
views
can SECEDIT.exe be used to only add 1 group to 1 security policy? example?
I am assuming based on my research for using SECEDIT.exe -- that a template would be added to the exisitng security .SDB file. That this template would be very tiny... only naming the security policy ...
- 111
0
votes
1
answer
318
views
Windows 2000 Domain Controller CPU running at 100%
We are running a Windows 2000 Server as a domain controller and file server. 2 weeks ago, the machine was running fine. Then, after a power-outage and a restart, the machine became sluggish and ...
- 2,656
2
votes
1
answer
3k
views
LSASS.exe trying to communicate over port 80
We are running a standalone web server (Windows 2008 + IIS 7), and our antivirus is blocking LSASS.exe (C:\Windows\system32\lsass.exe) from making outbound connections over port 80.
Why is LSASS ...
- 21
0
votes
1
answer
1k
views
lsass.exe is sending lots of ldap search queries to a NAS device
I just noticed that my dc (W2k3 R2 Enterprise SP2) is sending ldap queries to an IP address that is assigned to a NAS device (snapserver). The snapserver is in another AD site and has Active Directory ...
- 191