Solved

C:\WINNT\system32\lsass.exe, failed with status code c0000354

Posted on 2004-09-07
6
2,894 Views
Last Modified: 2012-06-27
I have a Small Business Server 2003 that is suffering from the error outlined in the below knowledge base article and rebooting every couple of days as a result.

http://support.microsoft.com/?kbid=818080

At the bottom of the article, it says:

To work around this problem, remove the Deny ACE from the OU.

Can someone please step me through this process (step-by-step) and also let me know the negatives of doing this?

Alternatively, if someone has a better fix for this issue, then please let me know.

Thanks.
0
Comment
Question by:fiendish1
  • 3
  • 2
6 Comments
 
LVL 6

Expert Comment

by:karel_jespers
ID: 11997236
in the properties of the ou check if there a
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 11997248
hi,

in the properties of the ou check if there a deny setup and remove it

that's what they ask you to do

karel
0
 
LVL 6

Accepted Solution

by:
karel_jespers earned 125 total points
ID: 12000011
Configure the GPO so that it applies to the members of the Ou group only. Select Allow for the Apply Group Policy ACE for the Ou group, and then remove the Allow Group Policy ACE from the Authenticated Users group. By changing the ACEs that are applied to different groups, administrators can customize how a GPO affects the users or computers that are subject to that GPO. Write access is required for modifications to be made; Read and Allow Group Policy ACEs are required for a policy to affect a group (for the policy to apply to the group). Use the Deny ACE with caution. A Deny ACE setting for any group has precedence over any Allow ACE given to a user or computer because of membership in another group.
0
 

Author Comment

by:fiendish1
ID: 12001230
Thanks for the responses Karel... I understand what it is asking. I just don't know how to implement it. I am currently running an internal SBS2003 network and learning as I go. I am not familiar with GPO, ACE, OU, etc but I am sure I will know that little bit more when I have done this.

What utility do I use to make these changes (Active Directory, etc). What is the OU (I have a domain and a server)?

As you can see (and I asked in my question), I would appreciate a bit more guidance.
0
 

Author Comment

by:fiendish1
ID: 12864579
I will just award karel_jespers the points. Even though he never provided an answer that I was able to implement.

0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

Learn about cloud computing and its benefits for small business owners.
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now