The system process c:winnt\system32\lsass.exe terminated unexpectedly with status code 128
Posted on 2006-05-29
Let me give you a brief idea of whats happening :
The server was shipped to me pre configured by my colleague in UK with an IP address 192.168.0.254
I changed the IP to 192.168.100.222 as my router could not be configured for the other subnet.
The DNS and the active directory had to be reconfigured. Everything works fine..but just out of the blue i keep getting this error message "The system process c:winnt\system32\lsass.exe terminated unexpectedly with status code 128" and the system restarts in 60 seconds.
The even log shows the same erro repeated many times :
Date : 29/05/2006 Source : LsaSrv
Time: 13:29:09 Category: Security Package Manager
Type: Error Event ID: 5000
User : N/A
The security package Negotiate generated an exception. The exception information is the data.
I first suspected it to be a virus issue probably a sasser variant, but after thouroughly checking I had to rule it out.I think I may have messed it up by changing the IP address and really cant figure out how to fix this issue.
Oh yes let me just add in this point that we want to use terminal services for rdp. I am able to successfully connect to it thru rdp but thats when it gives this error and shuts down.
Just as i was typing this...it restarted..and there were no rdp sessions...i'm confused.. :(
Would really appreciate if I can get some feedback on this...Its URGENT..
Thanks in advance..