LSAsrv 5000 error - Unable to login

[thorsten]

Hi there,


We got 3 Windows 2000 Servers (all SP4) and one W2003 Domain
Controller.

I´m not able to login anymore to one of our Windows 2000 Servers, not
even locally.

Only one (for the time) Windows 2000 Server is affected. It
is serving as a Exchange 2k and SQL2k for our network. The Exchange
System is separated from the outside world throug a mailrelay. Only the

IIS (which is needed for OWA) is directly connected via the firewall to

the internet.


After receiving the LSAsrv Error you can only hard reset your system.
We did not install any software updates to our system, so it´s a very
strange issue. I scanned for viruses with two different scanners,
nothing found. I reapplied SP4, no change.

Now I installed every security fix I can get from MS Update. But I
don´t think that this will fix the problem.

Furthermore I shut down the IIS (OWA Access), to
ensure the system did not have any direct access from the internet.


If anybody got an idea how to troubleshoot please post ist.


Maybe it´s an issue for Microsoft, cause it´s strange the a lot of
people have the same behaviour at nearly the same time


regards,


thorsten

 

[Guest]

See my post titled "Help! LsaSrv dies w/Event ID: 5000"

 

[thorsten]

It seems to be solved !

What I did: I installed the lastet security patches AND deactived the
IIS. The IIS was reachable via the internet, cause it was serving as a
OWA gateway. Now the system run´s stable for more than 48 hours !
Before it crashed every two hours. So it seems to be an attack on the
IIS from the internet.

Hope that helps.

Thorsten