lsass.exe terminated unexpectedly with Status Code – 1073740972

The server is restarting often.

The following message appears on the screen before it shuts down:

             C:\WINDOWS\system32\lsass.exe  terminated unexpectedly with Status Code – 1073740972.
            The System will ShutDown and Restart.

After restarting the following message appears:
1.         The system has restarted after an unplanned shutdown.
             A log of this event has been created.

2.                   The error report shows:
Error Signature:
  OS Ver: 5_2_3790  SP:0_0  Product: 274_3

3.                   Technical Error Report Contents:

Can anyone please help with this.

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Greetings bajman_aus,

     If you can provide more information like check you event id number for this error and you can post otherwise i can suggest below things

1) try to turn on your firewall in your network interface

2) try to run any antivirus and warm detection software

please check the microsoft article for the details;EN-US;826819;[LN];829993;en-us;818080

hope this helps

Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Hi bajman_aus,

This is something that's been popping up all week for folks... I would guess you're experiencing the same thing.

Please check out this KB for more info and the hotfix:

Hope it's easy!

(Please post all SBS Questions to the Server 2003 TA -- thanks!)

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
if you're having problems getting anything done before the stupid thing restarts again...

go to a cmd promt.  type "shutdown /a" it will cancel the reboot (in most cases) and allow you to finish whatever you were doing.
bajman_ausAuthor Commented:
I did a virus scan and there is no virus.
I am able to abort the shutdown with shutdown /a but I cannot get around this issue.

Event ID number 1000
Faulting application lsass.exe, version 5.2.3790.0, faulting module lsasrv.dll, version 5.2.3790.0, fault address 0x00023036.

Event ID number 1015
A critical system process, C:\WINDOWS\system32\lsass.exe, failed with status code c0000354.  The machine must now be restarted.

Widnows is up-to-date.

I am not sure where to go from here...

Please help.  Thanks for all your assistance.
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Did you look at the knowledge base article I linked above (893246)??  It sure sounds like that is your problem and Microsoft has a free Hotfix available per the KB article.

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.