Hot fix issues

Posted on 2005-04-05
Medium Priority
Last Modified: 2008-01-09

My windows 2003 server is rebooting on every wed and monday with the errors of lsass.exe I am trying ot install the hotfix of microsoft windows that is KB826819 but it doesnt seem to install gving the error "Setup has detected that version of the service pack installed on your system is lower than what is necessary to apply this hotifx. At minium, you must have service pack 1 instal". We currently running SP2.

What would be cause and how should i fix it

Question by:arpitbhargava
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 5
LVL 71

Expert Comment

by:Chris Dent
ID: 13704852
Hi Arpit,

Could you confirm the Operating system please. Windows 2003 doesn't have a Service Pack 2 yet, so you either have the wrong operating system or the wrong patch level.

If you already have SP1 installed you might want to try reinstalling it as a first step.



Author Comment

ID: 13705874
Hi chris

I am in Uk and working with schools and so we are having RM network. And currently we are having CC3 Network in which we are having windows 2003 server and XP as client  So windows is modified by the RM.
LVL 71

Accepted Solution

Chris Dent earned 1500 total points
ID: 13705943

RM and CC3 are pretty much exclusive to educational environments which doesn't really help when trying to fix things.

Still, Windows 2003 only has SP1 available, and to install the HotFix you're attempting to you may have to ensure that the correct SP is there.

I didn't think RM altered the system to the extent that MS patches cannot be applied, but if so you would be better contacting RM support directly.

Perhaps you could post the exact LSASS errors that are appearing?
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 13751108
Hi Chris

This the error which i am getting.

"As per previous closed call 1521217 - we are getting recurring instances of server1 rebooting at 23:30 at night

(happened on Mon and Wed this week.)
The system event log shows slightly different series of events on either day, but it seems that winlogon (see below)

crashes, then the auditor service starts & stops every second until the shutdown.
What might be causing the winlogon error?
Event Type: Information
Event Source: USER32
Event Category: None
Event ID: 1074
Date: 14/03/2005
Time: 23:30:45
Computer: EPH-SR-001
The process winlogon.exe has initiated the restart of computer EPH-SR-001 on behalf of user for the following

reason: No title for this reason could be found
Reason Code: 0x50006
Shutdown Type: restart
Comment: The system process 'C:\WINNT\system32\lsass.exe' terminated unexpectedly with status code -1073740972.

The system will now shut down and restart.

For more information, see Help and Support Center at

0000: 06 00 05 00 43 00 3a 00 ....C.:.
0008: 5c 00 57 00 49 00 4e 00 \.W.I.N.
0010: 4e 00 54 00 5c 00 73 00 N.T.\.s.
0018: 79 00 73 00 74 00 65 00 y.s.t.e.
0020: 6d 00 33 00 32 00 5c 00 m.3.2.\.
0028: 4c 00 6f 00 67 00 46 00 L.o.g.F.
0030: 69 00 6c 00 65 00 73 00 i.l.e.s.
0038: 5c 00 53 00 68 00 75 00 \.S.h.u.
0040: 74 00 44 00 6f 00 77 00 t.D.o.w.
0048: 6e 00 5c 00 53 00 68 00 n.\.S.h.
0050: 75 00 74 00 44 00 6f 00 u.t.D.o.
0058: 77 00 6e 00 5f 00 32 00 w.n._.2.
0060: 30 00 30 00 35 00 30 00
0068: 33 00 31 00 34 00 32 00
0070: 33 00 33 00 30 00 33 00
0078: 32 00 2e 00 78 00 6d 00 2...x.m.
0080: 6c 00 00 00 l...

LVL 71

Expert Comment

by:Chris Dent
ID: 13751152

I take it you've checked the machine for viruses?

Author Comment

ID: 13751502

We have installed the norton edition  on it and it is running fine and dont think that there is any virus on it as the virus is updated every day and is schedule to scan daily and in reports as well that there is no virus on the server.

LVL 71

Expert Comment

by:Chris Dent
ID: 13751562

There is also the possibilty that a virus attacking the operating system is causing the reboot - without actually causing infection.

A few versions / clones of MSBlast were known to cause this type of problem when attempting to connect to the target, instead of successfully connecting they would cause a reboot.

Does the server have a Firewall in front of it to protect it from the outside world?

And how are viruses monitored and controlled within the internal network?

Author Comment

ID: 13751608
yeah we are having firewall and that is managed through equinoxsolutions and as we have norton antivirus corporate edition, and all the computers are scanned, so it is done through this only.
LVL 71

Expert Comment

by:Chris Dent
ID: 13751822

Could you possibly confirm the Operating system and patch level?

Author Comment

ID: 13771882
Operating system is 2003 server, SR 4
LVL 71

Expert Comment

by:Chris Dent
ID: 13772330

If that's really what it's reporting to be then you definately need to go back to RM Support.

You can have Windows 2003 SP1 or Windows 2000 SP4.

If it's 2000 SP4 then the patch you're attempting won't work because of a lack of Windows 2003.

Featured Post

WordPress Tutorial 4: Recommended Plugins

Now that you have WordPress installed, understand the interface, and know how to install new parts, let’s take a look at our recommended plugins.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Just about everyone has an old PC laying around.  Ask anyone in the IT industry, whether they are a professional or play in it as a hobby.  From outdated Desktops to cheap "throwaway" laptops, they are all around and not as hard to "fix up" as you m…
Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question