LSASS.EXE Error

[Guest]

Hi,
Domain controller and Workstations in a child domain of mine are getting
restarted all of a sudden. The error that I see is "The system process
lsass.exe terminated
unexpectedly with status code -1073741819. The system
will now shut down and restart. ". Could anybody help me to sort out this
problem.
Thanks
Chandimal

 

[Meinolf Weber]

Hello Chandimal,

Seems that you have the sasser virus, which will reboot the machine always.
Here is a removal from MS:
http://support.microsoft.com/kb/841720/en-us

What SP do you use on the machines?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

 

[Guest]

Dear Meinolf,

All our machines had an AV but we could not find a virus. But they have not
been patched. But since we could not find a problem we demoted our DC and
Promoted it back again and attached the workstations. Afterwards it did not
occur. Before that server and some of the work stations rebooted. Any ides
why this happened. Is it really because of a virus or and issue with active
directory.

Thanks
Chandimal

 

[Meinolf Weber]

Hello Chandimal,

You should really patch your machines to the actual level!!!!

Check Active Directory with dcdiag and netdiag from the resource kit tools
(on the installation disk)

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

 

[Guest]

Dear Meinolf,

Thank you for your prompt reply. As you've said I'll try to patch the
systems and run dcdiag and netdiag to check for problems in the AD.

Thanks
Chandimal

 

[Mark Renoden [MSFT]]

Hi Chandimal

There are a number of causes for this issue. A quick look at the Microsoft
Knowledge Base gives

940925 A Windows Server 2003-based domain controller restarts unexpectedly
after you install hotfix 918442 or Windows Server 2003 Service Pack 2
http://support.microsoft.com/default.aspx?scid=kb;EN-US;940925

838501 "LSASS.EXE terminated unexpectedly with status code -1073741571"
error message after you upgrade a Windows 2000 domain controller to Windows
Server 2003
http://support.microsoft.com/default.aspx?scid=kb;EN-US;838501

There are more.
--
Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Dear Mark,
The status code i get is -1073741819. Workstations in the domain are XP/2000
professional. DCs (Child DC) are 2000 with service pack 3. Still I am looking
for clues to this error. As a resolution what we did was to demote the DC
and Promote it back to a different Child DC. Another DCs we reformatted and
attached as a child DC. So far we did not come across a problem as such. But
if it comes againg I think we are not prepared and what we did previously is
not practical. Appreciate if you could provide any clues.

Thanks
Chandimal

Hi Chandimal

There are a number of causes for this issue. A quick look at the Microsoft
Knowledge Base gives

940925 A Windows Server 2003-based domain controller restarts unexpectedly
after you install hotfix 918442 or Windows Server 2003 Service Pack 2
http://support.microsoft.com/default.aspx?scid=kb;EN-US;940925

838501 "LSASS.EXE terminated unexpectedly with status code -1073741571"
error message after you upgrade a Windows 2000 domain controller to Windows
Server 2003
http://support.microsoft.com/default.aspx?scid=kb;EN-US;838501

There are more.
--
Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Dear Meinolf,

Thank you for your prompt reply. As you've said I'll try to patch the
systems and run dcdiag and netdiag to check for problems in the AD.

Thanks
Chandimal

 

[Mark Renoden [MSFT]]

Hi Chandimal

I'd certainly upgrade to Service Pack 4 and the latest rollup. This way
you'll address any issues Microsoft has already fixed. If the issue occurs
again, I would spend some time on the Knowledge base looking at possible
causes. As I mentioned, there are quite a few.
--
Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Dear Mark,
The status code i get is -1073741819. Workstations in the domain are
XP/2000
professional. DCs (Child DC) are 2000 with service pack 3. Still I am
looking
for clues to this error. As a resolution what we did was to demote the DC
and Promote it back to a different Child DC. Another DCs we reformatted
and
attached as a child DC. So far we did not come across a problem as such.
But
if it comes againg I think we are not prepared and what we did previously
is
not practical. Appreciate if you could provide any clues.

Thanks
Chandimal

Hi Chandimal

There are a number of causes for this issue. A quick look at the
Microsoft
Knowledge Base gives

940925 A Windows Server 2003-based domain controller restarts
unexpectedly
after you install hotfix 918442 or Windows Server 2003 Service Pack 2
http://support.microsoft.com/default.aspx?scid=kb;EN-US;940925

838501 "LSASS.EXE terminated unexpectedly with status code -1073741571"
error message after you upgrade a Windows 2000 domain controller to
Windows
Server 2003
http://support.microsoft.com/default.aspx?scid=kb;EN-US;838501

There are more.
--
Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no
rights.

Dear Meinolf,

Thank you for your prompt reply. As you've said I'll try to patch the
systems and run dcdiag and netdiag to check for problems in the AD.

Thanks
Chandimal

 

[Guest]

Dear Mark,

Thank you very much for your support. I'll patch these servers soon.

Thanks & Best Regards
Chandimal

Hi Chandimal

I'd certainly upgrade to Service Pack 4 and the latest rollup. This way
you'll address any issues Microsoft has already fixed. If the issue occurs
again, I would spend some time on the Knowledge base looking at possible
causes. As I mentioned, there are quite a few.
--
Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

Dear Mark,
The status code i get is -1073741819. Workstations in the domain are
XP/2000
professional. DCs (Child DC) are 2000 with service pack 3. Still I am
looking
for clues to this error. As a resolution what we did was to demote the DC
and Promote it back to a different Child DC. Another DCs we reformatted
and
attached as a child DC. So far we did not come across a problem as such.
But
if it comes againg I think we are not prepared and what we did previously
is
not practical. Appreciate if you could provide any clues.

Thanks
Chandimal

Hi Chandimal

There are a number of causes for this issue. A quick look at the
Microsoft
Knowledge Base gives

940925 A Windows Server 2003-based domain controller restarts
unexpectedly
after you install hotfix 918442 or Windows Server 2003 Service Pack 2
http://support.microsoft.com/default.aspx?scid=kb;EN-US;940925

838501 "LSASS.EXE terminated unexpectedly with status code -1073741571"
error message after you upgrade a Windows 2000 domain controller to
Windows
Server 2003
http://support.microsoft.com/default.aspx?scid=kb;EN-US;838501

There are more.
--
Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no
rights.
Dear Meinolf,

Thank you for your prompt reply. As you've said I'll try to patch the
systems and run dcdiag and netdiag to check for problems in the AD.

Thanks
Chandimal