We have a main office with 4 domain controllers. DC1, DC2, DC3 and DC4. Our SCOM monitoring system often reports the the LSASS process on DC1 is using a high amount of CPU. The exact error as reported by SCOM:
The Domain Controller has high processor load on the LSASS process over several polling intervals.
DC1 is the PDC Emulator and RID Master.
My question is - how can I pinpoint was is causing the LSASS process to use so much CPU? The other 3 DCs in the site are not having the same problem.