Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

C:\WINNT\system32\lsass.exe, failed with status code c0000354

Posted on 2004-09-07
6
Medium Priority
?
2,947 Views
Last Modified: 2012-06-27
I have a Small Business Server 2003 that is suffering from the error outlined in the below knowledge base article and rebooting every couple of days as a result.

http://support.microsoft.com/?kbid=818080

At the bottom of the article, it says:

To work around this problem, remove the Deny ACE from the OU.

Can someone please step me through this process (step-by-step) and also let me know the negatives of doing this?

Alternatively, if someone has a better fix for this issue, then please let me know.

Thanks.
0
Comment
Question by:fiendish1
  • 3
  • 2
5 Comments
 
LVL 6

Expert Comment

by:karel_jespers
ID: 11997236
in the properties of the ou check if there a
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 11997248
hi,

in the properties of the ou check if there a deny setup and remove it

that's what they ask you to do

karel
0
 
LVL 6

Accepted Solution

by:
karel_jespers earned 250 total points
ID: 12000011
Configure the GPO so that it applies to the members of the Ou group only. Select Allow for the Apply Group Policy ACE for the Ou group, and then remove the Allow Group Policy ACE from the Authenticated Users group. By changing the ACEs that are applied to different groups, administrators can customize how a GPO affects the users or computers that are subject to that GPO. Write access is required for modifications to be made; Read and Allow Group Policy ACEs are required for a policy to affect a group (for the policy to apply to the group). Use the Deny ACE with caution. A Deny ACE setting for any group has precedence over any Allow ACE given to a user or computer because of membership in another group.
0
 

Author Comment

by:fiendish1
ID: 12001230
Thanks for the responses Karel... I understand what it is asking. I just don't know how to implement it. I am currently running an internal SBS2003 network and learning as I go. I am not familiar with GPO, ACE, OU, etc but I am sure I will know that little bit more when I have done this.

What utility do I use to make these changes (Active Directory, etc). What is the OU (I have a domain and a server)?

As you can see (and I asked in my question), I would appreciate a bit more guidance.
0
 

Author Comment

by:fiendish1
ID: 12864579
I will just award karel_jespers the points. Even though he never provided an answer that I was able to implement.

0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Are you ready to place your question in front of subject-matter experts for more timely responses? With the release of Priority Question, Premium Members, Team Accounts and Qualified Experts can now identify the emergent level of their issue, signal…

824 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question