Questions tagged [lsass]

24 questions
0
votes
0 answers

lsass.exe uses 2.4GB of memory when resolving a web page

I have a user who has been noticing slowdowns with his machine frequently. When investigating his system (Windows Server 2008 R2) processes, we saw that lsass.exe was using 2.4GB of memory. A reboot took it back down to 80MB. It kept happening…
Tony
  • 457
  • 3
  • 11
  • 23
0
votes
0 answers

lsass.exe and UDP port 53

We have DC and DNS on the same server (Windows Server 2012), but today I had seen that lsass.exe uses UDP :53 and our DNS server also requires this incomming UDP port to serve queries through UDP. Is't possible to resolve this conflict between DNS…
0
votes
1 answer

SBS Server 2008 with periodic lsass.exe using 100% of 1 Core

SBS Server 2008 with everything running on it (AD/PDC, SQL 2012, FileServer, RDP Gateway, WSUS, No Exchange though). Every 30 minutes on the hour and half hour, lsass.exe uses 25% of the CPU (1 core at 100%). At this time it's reading/writing from…
Dom
  • 741
  • 1
  • 8
  • 19
0
votes
1 answer

LSASS.Exe using 100% CPU usage on SBS2003

LSASS.exe is using 100% CPU usage on my SBS2003 DC. For the life of me, I can't figure out what's causing it. I've checked the event logs and found a few things. I can't see if any of it is related. Nothing except ActiveSync errors (which started…
Ewan
  • 21
  • 4
0
votes
1 answer

Windows 2000 Domain Controller CPU running at 100%

We are running a Windows 2000 Server as a domain controller and file server. 2 weeks ago, the machine was running fine. Then, after a power-outage and a restart, the machine became sluggish and intermittently stopped giving out DHCP (this can be…
cop1152
  • 2,656
  • 3
  • 21
  • 32
0
votes
1 answer

lsass.exe is sending lots of ldap search queries to a NAS device

I just noticed that my dc (W2k3 R2 Enterprise SP2) is sending ldap queries to an IP address that is assigned to a NAS device (snapserver). The snapserver is in another AD site and has Active Directory integration listed as a feature. I have no idea…
Datapimp23
  • 191
  • 1
  • 3
  • 21
0
votes
0 answers

Windows 11 security connection issues

I applied a windows update to Windows 11 and since then I have been unable to connect to remote machines using MSTSC, the error is "An authentication error has occured. The Local Security Authority cannot be contacted." I can connect to the same…
DJIDave
  • 109
  • 3
0
votes
0 answers

Debug lsass.exe to find process responsible for account lockouts

One of our users gets locked from AD once a week. I have identified the source computer which causes the lockout by checking event 4740 on our domain controller. By monitoring network activity via Procmon from Sysinternal tools, the only process…
David Trevor
  • 205
  • 1
  • 12
-3
votes
1 answer

Windows Server 2012r2: Lsass.exe getting hammered from Internet

guys. My gateway server has been getting hammered for about a day, now. Internet access slows to a crawl for about an hour at a time, internally, and I noticed that when it is slow, lsass.exe is busy sending something out to external machines on…
Olive It
  • 1
  • 1
  • 1
1
2