LSASS 1005 Randomly.

[Guest]

Hi,

We're experiencing hangs on one of our Domain Controllers on a regular basis
(about once every three days). The LSASS Service hangs at 100%, and we need
to reboot the server as it causes a complete slowdown of access to network
resources.

The Server is a Windows2000 Active Directory, Global Catalog Server. It is
the first server of a pair of Domain Controllers in a site containing about
400 desktop users.

We also have an Exchange 2000 Server in this site.

From following lots of other peoples posts in this newsgroup I've:

Checked the server for Viruses/Ad Ware - all clear.
Ran Windows Updates and patched the domain controllers and Exchange boxes to
the latest patches available.
I've also installed the latest exchange patches to no avail.

Is there any sort of extra logging I can turn on to assist with this? This
might help to be able to see what's happening when this happens.

Any assistance would be greatly appreciated.

Padraic

 

[Denis Wong @ Hong Kong]

Hi Padraic,

Check if you have an event id 5000.

The Lsass.exe process stops
responding or uses 100 percent
of the CPU resources on a
Microsoft Windows 2000-based
computer
http://support.microsoft.com/default.aspx?scid=kb;en-us;896179&sd=rss&spid=3071

br,
Denis

 

[Jorge_de_Almeida_Pinto]

Hi,

We're experiencing hangs on one of our Domain Controllers on a
regular basis
(about once every three days). The LSASS Service hangs at
100%, and we need
to reboot the server as it causes a complete slowdown of
access to network
resources.

The Server is a Windows2000 Active Directory, Global Catalog
Server. It is
the first server of a pair of Domain Controllers in a site
containing about
400 desktop users.

We also have an Exchange 2000 Server in this site.

From following lots of other peoples posts in this newsgroup
I've:

Checked the server for Viruses/Ad Ware - all clear.
Ran Windows Updates and patched the domain controllers and
Exchange boxes to
the latest patches available.
I've also installed the latest exchange patches to no avail.

Is there any sort of extra logging I can turn on to assist
with this? This
might help to be able to see what's happening when this
happens.

Any assistance would be greatly appreciated.

Padraic

Is this event id and source correct? can not find anything on this id
number and source

Cheers,

 

[Guest]

My fault for this confusion - it should have read 100% not 1005 - a typo.

Thanks for your help so far. Any more ideas?

Padraic