Dr. Watson of LSASS.exe causes DC to reboot

[Rob McShinsky]

The application, lsass.exe, generated an application error The error
occurred on 10/06/2003 @ 12:00:46.839 The exception generated was c0000005
at address 757B5954 (DsaEnableUpdates)
Has anyone seen this happen. We have it narrowed down to when a particular
administrator tries to create a mailbox through active directory. We
currently have an Exchange 5.5 server with an active directory connector in
place and a Exchange 2000 server in place. The 5.5 server is scheduled to
be taken out soon when all users have migrated over successfully. Below is
the timeline of system events.
Thanks
Rob McShinsky
Event Type: Information
Event Source: DrWatson
Event Category: None
Event ID: 4097
Date: 10/6/2003
Time: 12:01:17 PM
User: N/A
Computer: DH324
Description:
The application, lsass.exe, generated an application error The error
occurred on 10/06/2003 @ 12:00:46.839 The exception generated was c0000005
at address 757B5954 (DsaEnableUpdates)
Data:

Event Type: Error
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8026
Date: 10/6/2003
Time: 12:02:34 PM
User: N/A
Computer: DH324
Description:
LDAP Bind was unsuccessful on directory DH324 for distinguished name
'DHMCMASTER\AdminDHMC'. Directory returned error:[0x51] Server Down.
(Connection Agreement 'PubFold-Agree' #1912)
Event Type: Error
Event Source: MSADC
Event Category: Replication
Event ID: 8206
Date: 10/6/2003
Time: 12:02:34 PM
User: N/A
Computer: DH324
Description:
Couldn't find the password for the credential 'DHMCMASTER\AdminDHMC' in the
LSA Private Data. If this problem persist after 15 minutes, try to reset the
password in the Connection Agreement properties. (Connection Agreement
'PubFold-Agree' #1912)
Event Type: Warning
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8033
Date: 10/6/2003
Time: 12:02:34 PM
User: N/A
Computer: DH324
Description:
LDAP search result on directory dh324.dhmcmaster.dh.hitchcock.org for entry
'' was unsuccessful with error:[0x52] Local Error.
Event Type: Warning
Event Source: EventSystem
Event Category: Firing Agent
Event ID: 4098
Date: 10/6/2003
Time: 12:02:34 PM
User: N/A
Computer: DH324
Description:
The COM+ Event System failed to fire the StopScreenSaver method on
subscription {2F519218-754D-4CFE-8DAA-5215CD0DE0EB}. The subscriber
returned HRESULT 8007000E.

Event Type: Error
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8026
Date: 10/6/2003
Time: 12:02:35 PM
User: N/A
Computer: DH324
Description:
LDAP Bind was unsuccessful on directory dh324.dhmcmaster.dh.hitchcock.org
for distinguished name ''. Directory returned error:[0x51] Server Down.


Event Type: Error
Event Source: MSADC
Event Category: LDAP Operations
Event ID: 8026
Date: 10/6/2003
Time: 12:03:30 PM
User: N/A
Computer: DH324
Description:
LDAP Bind was unsuccessful on directory DH324 for distinguished name
'DHMCMASTER\AdminDHMC'. Directory returned error:[0x51] Server Down.
(Connection Agreement 'Config CA_DHMC_DH586' #1904)


Event Type: Error
Event Source: MSADC
Event Category: Replication
Event ID: 8206
Date: 10/6/2003
Time: 12:03:30 PM
User: N/A
Computer: DH324
Description:
Couldn't find the password for the credential 'DHMCMASTER\AdminDHMC' in the
LSA Private Data. If this problem persist after 15 minutes, try to reset the
password in the Connection Agreement properties. (Connection Agreement
'Config CA_DHMC_DH586' #1904)

 

[mmcgough [MSFT]]

This looks like what you are experiencing.
824226 LSASS May Cause an Access Violation During an LDAP Search
http://support.microsoft.com/?id=824226
This posting is provided "AS IS" with no warranties, and confers no rights.