Solved

C:\WINNT\system32\lsass.exe, failed with status code c0000354

Posted on 2004-09-07
6
2,919 Views
Last Modified: 2012-06-27
I have a Small Business Server 2003 that is suffering from the error outlined in the below knowledge base article and rebooting every couple of days as a result.

http://support.microsoft.com/?kbid=818080

At the bottom of the article, it says:

To work around this problem, remove the Deny ACE from the OU.

Can someone please step me through this process (step-by-step) and also let me know the negatives of doing this?

Alternatively, if someone has a better fix for this issue, then please let me know.

Thanks.
0
Comment
Question by:fiendish1
  • 3
  • 2
6 Comments
 
LVL 6

Expert Comment

by:karel_jespers
ID: 11997236
in the properties of the ou check if there a
0
 
LVL 6

Expert Comment

by:karel_jespers
ID: 11997248
hi,

in the properties of the ou check if there a deny setup and remove it

that's what they ask you to do

karel
0
 
LVL 6

Accepted Solution

by:
karel_jespers earned 125 total points
ID: 12000011
Configure the GPO so that it applies to the members of the Ou group only. Select Allow for the Apply Group Policy ACE for the Ou group, and then remove the Allow Group Policy ACE from the Authenticated Users group. By changing the ACEs that are applied to different groups, administrators can customize how a GPO affects the users or computers that are subject to that GPO. Write access is required for modifications to be made; Read and Allow Group Policy ACEs are required for a policy to affect a group (for the policy to apply to the group). Use the Deny ACE with caution. A Deny ACE setting for any group has precedence over any Allow ACE given to a user or computer because of membership in another group.
0
 

Author Comment

by:fiendish1
ID: 12001230
Thanks for the responses Karel... I understand what it is asking. I just don't know how to implement it. I am currently running an internal SBS2003 network and learning as I go. I am not familiar with GPO, ACE, OU, etc but I am sure I will know that little bit more when I have done this.

What utility do I use to make these changes (Active Directory, etc). What is the OU (I have a domain and a server)?

As you can see (and I asked in my question), I would appreciate a bit more guidance.
0
 

Author Comment

by:fiendish1
ID: 12864579
I will just award karel_jespers the points. Even though he never provided an answer that I was able to implement.

0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

827 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question