1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

LSASS.EXE Consuming CPU Windows 2003 SP2

Discussion in 'Windows Home Server' started by AJ, Aug 28, 2009.

  1. AJ

    AJ Guest

    Hi Folks

    Just recently after installing ForeFront for SharePoint we have
    started having LSASS.EXE issues. Basically the problems starts by
    users not being able to log into their sharepoint site which is
    published by ISA. It's strange because one site can be inaccesible and
    the others fine. Looking at the server LSASS.EXE is pegging the
    processor at 25%. Eventually this increases in what seems like 25%
    increments until finally the server becomes competely unresponsive. I
    have applied all the latest Windows updates but nothing has fixed this
    issue. The problem seems to occur every 3 or 4 days. There are no
    errors in the event logs anywhere so I'm stuck as to how to tackle
    this one. Googling around I have come across one person who has the
    exact same issue as me however no fix has been offered. I have just
    uninstalled Forefront to see if that is the cause but I'm not
    confident this will fix it. A reboot is the only way to return
    LSASS.EXe to its normal CPU usage level. Nothing else has changed on
    the server at all apart from the installation of ForeFront.

    Anyone have any ideas?

    TIA

    AJ
     
    AJ, Aug 28, 2009
    #1
  3. Meinolf Weber [MVP-DS]

    Meinolf Weber [MVP-DS] Guest

    Hello AJ,

    Check this articles in detail if they apply:






    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!!

    <!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Hi Folks
    >
    > Just recently after installing ForeFront for SharePoint we have
    > started having LSASS.EXE issues. Basically the problems starts by
    > users not being able to log into their sharepoint site which is
    > published by ISA. It's strange because one site can be inaccesible and
    > the others fine. Looking at the server LSASS.EXE is pegging the
    > processor at 25%. Eventually this increases in what seems like 25%
    > increments until finally the server becomes competely unresponsive. I
    > have applied all the latest Windows updates but nothing has fixed this
    > issue. The problem seems to occur every 3 or 4 days. There are no
    > errors in the event logs anywhere so I'm stuck as to how to tackle
    > this one. Googling around I have come across one person who has the
    > exact same issue as me however no fix has been offered. I have just
    > uninstalled Forefront to see if that is the cause but I'm not
    > confident this will fix it. A reboot is the only way to return
    > LSASS.EXe to its normal CPU usage level. Nothing else has changed on
    > the server at all apart from the installation of ForeFront.
    >
    > Anyone have any ideas?
    >
    > TIA
    >
    > AJ
    > <!--colorc--><!--/colorc-->
     
    Meinolf Weber [MVP-DS], Aug 29, 2009
    #2
  4. AJ

    AJ Guest

    On 29 Aug, 09:17, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
    wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Hello AJ,
    >
    > Check this articles in detail if they apply:
    >
    >
    >
    >
    >
    > Best regards
    >
    > Meinolf Weber
    > Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    > no rights.
    > ** Please do NOT email, only reply to Newsgroups
    > ** HELP us help YOU!!!
    >
    >
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > > Hi Folks<!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > > Just recently after installing ForeFront for SharePoint we have
    > > started having LSASS.EXE issues. Basically the problems starts by
    > > users not being able to log into their sharepoint site which is
    > > published by ISA. It's strange because one site can be inaccesible and
    > > the others fine. Looking at the server LSASS.EXE is pegging the
    > > processor at 25%. Eventually this increases in what seems like 25%
    > > increments until finally the server becomes competely unresponsive. I
    > > have applied all the latest Windows updates but nothing has fixed this
    > > issue. The problem seems to occur every 3 or 4 days. There are no
    > > errors in the event logs anywhere so I'm stuck as to how to tackle
    > > this one. Googling around I have come across one person who has the
    > > exact same issue as me however no fix has been offered. I have just
    > > uninstalled Forefront to see if that is the cause but I'm not
    > > confident this will fix it. A reboot is the only way to return
    > > LSASS.EXe to its normal CPU usage level. Nothing else has changed on
    > > the server at all apart from the installation of ForeFront.<!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > > Anyone have any ideas?<!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > > TIA<!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > > AJ- Hide quoted text -<!--colorc--><!--/colorc-->
    >
    > - Show quoted text -<!--colorc--><!--/colorc-->

    Interesting, when the problem occured, prior to posting, I checked the
    ISA Server authentication delegation setting for one of the published
    sites. This site was the one that seemed to become inaccesible first.
    The ISA rule was configured to use NTLM and as soon as I changed it
    the site became accesible again, however the server still became
    inacccesible again a few days later. It looks like your NTLM link
    might be the fix, as I did not check remaining sites and ISA rules. I
    will do some more investigatory work into this and let you know.

    Thanks for the links, most helpful [​IMG]

    AJ
     
    AJ, Aug 30, 2009
    #3
  5. AJ

    AJ Guest

    On 30 Aug, 10:12, AJ <andyjone...@hotmail.co.uk> wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > On 29 Aug, 09:17, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
    > wrote:
    >
    >
    >
    >
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > > Hello AJ,<!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > > Check this articles in detail if they apply:<!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > >    <!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > >    <!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > > Best regards<!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > > Meinolf Weber
    > > Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    > > no rights.
    > > ** Please do NOT email, only reply to Newsgroups
    > > ** HELP us help YOU!!!    <!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    > > > Hi Folks<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    > > > Just recently after installing ForeFront for SharePoint we have
    > > > started having LSASS.EXE issues. Basically the problems starts by
    > > > users not being able to log into their sharepoint site which is
    > > > published by ISA. It's strange because one site can be inaccesible and
    > > > the others fine. Looking at the server LSASS.EXE is pegging the
    > > > processor at 25%. Eventually this increases in what seems like 25%
    > > > increments until finally the server becomes competely unresponsive. I
    > > > have applied all the latest Windows updates but nothing has fixed this
    > > > issue. The problem seems to occur every 3 or 4 days. There are no
    > > > errors in the event logs anywhere so I'm stuck as to how to tackle
    > > > this one. Googling around I have come across one person who has the
    > > > exact same issue as me however no fix has been offered. I have just
    > > > uninstalled Forefront to see if that is the cause but I'm not
    > > > confident this will fix it. A reboot is the only way to return
    > > > LSASS.EXe to its normal CPU usage level. Nothing else has changed on
    > > > the server at all apart from the installation of ForeFront.<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    > > > Anyone have any ideas?<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    > > > TIA<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro--><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    > > > AJ- Hide quoted text -<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    > > - Show quoted text -<!--colorc--><!--/colorc-->
    >
    > Interesting, when the problem occured, prior to posting, I checked the
    > ISA Server authentication delegation setting for one of the published
    > sites. This site was the one that seemed to become inaccesible first.
    > The ISA rule was configured to use NTLM and as soon as I changed it
    > the site became accesible again, however the server still became
    > inacccesible again a few days later. It looks like your NTLM link
    > might be the fix, as I did not check remaining sites and ISA rules. I
    > will do some more investigatory work into this and let you know.
    >
    > Thanks for the links, most helpful [​IMG]
    >
    > AJ- Hide quoted text -
    >
    > - Show quoted text -<!--colorc--><!--/colorc-->

    Just thought I would let you know that this indeed fixed my problem!

    THANK YOU!

    AJ
     
    AJ, Oct 1, 2009
    #4
  6. Meinolf Weber [MVP-DS]

    Meinolf Weber [MVP-DS] Guest

    Hello AJ,

    Nice to hear, thanks for the feedback.

    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!!

    <!--coloro:blue--><span style="color:blue <!--/coloro-->
    > On 30 Aug, 10:12, AJ <andyjone...@hotmail.co.uk> wrote:
    > <!--coloro:green--><span style="color:green <!--/coloro-->
    >> On 29 Aug, 09:17, Meinolf Weber [MVP-DS] <meiweb@(nospam)gmx.de>
    >> wrote:
    >> <!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    >>> Hello AJ,
    >>>
    >>> Check this articles in detail if they
    >>> apply:
    >>>
    >>>
    >>>
    >>>
    >>>
    >>> Best regards
    >>>
    >>> Meinolf Weber
    >>> Disclaimer: This posting is provided "AS IS" with no warranties, and
    >>> confers
    >>> no rights.
    >>> ** Please do NOT email, only reply to Newsgroups
    >>> ** HELP us help YOU!!!
    >>>> Hi Folks
    >>>>
    >>>> Just recently after installing ForeFront for SharePoint we have
    >>>> started having LSASS.EXE issues. Basically the problems starts by
    >>>> users not being able to log into their sharepoint site which is
    >>>> published by ISA. It's strange because one site can be inaccesible
    >>>> and the others fine. Looking at the server LSASS.EXE is pegging the
    >>>> processor at 25%. Eventually this increases in what seems like 25%
    >>>> increments until finally the server becomes competely unresponsive.
    >>>> I have applied all the latest Windows updates but nothing has fixed
    >>>> this issue. The problem seems to occur every 3 or 4 days. There are
    >>>> no errors in the event logs anywhere so I'm stuck as to how to
    >>>> tackle this one. Googling around I have come across one person who
    >>>> has the exact same issue as me however no fix has been offered. I
    >>>> have just uninstalled Forefront to see if that is the cause but I'm
    >>>> not confident this will fix it. A reboot is the only way to return
    >>>> LSASS.EXe to its normal CPU usage level. Nothing else has changed
    >>>> on the server at all apart from the installation of ForeFront.
    >>>>
    >>>> Anyone have any ideas?
    >>>>
    >>>> TIA
    >>>>
    >>>> AJ- Hide quoted text -
    >>>>
    >>> - Show quoted text -
    >>> <!--colorc--><!--/colorc-->
    >> Interesting, when the problem occured, prior to posting, I checked
    >> the ISA Server authentication delegation setting for one of the
    >> published sites. This site was the one that seemed to become
    >> inaccesible first. The ISA rule was configured to use NTLM and as
    >> soon as I changed it the site became accesible again, however the
    >> server still became inacccesible again a few days later. It looks
    >> like your NTLM link might be the fix, as I did not check remaining
    >> sites and ISA rules. I will do some more investigatory work into this
    >> and let you know.
    >>
    >> Thanks for the links, most helpful [​IMG]
    >>
    >> AJ- Hide quoted text -
    >>
    >> - Show quoted text -
    >> <!--colorc--><!--/colorc-->
    > Just thought I would let you know that this indeed fixed my problem!
    >
    > THANK YOU!
    >
    > AJ
    > <!--colorc--><!--/colorc-->
     
    Meinolf Weber [MVP-DS], Oct 1, 2009
    #5

Share This Page