Solved

Network Administrator

Posted on 2009-05-15
3
889 Views
Last Modified: 2012-05-07
We have a domain controller that is a DC, GC and print server. We noticed that the CPU usage is very high. It goes up to 100 % then it drops down to 20% then back to 85%...etc.  The file that is consuming the most CPU is LSASS.exe.

Any help would be appriciated.
0
Comment
Question by:rogermendieta
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 6

Expert Comment

by:0791882310
ID: 24397437
lsass.exe is a security manager for windows (I.E... windows logons and what not)... so it shouldn't be taking up any resources... unless your running a terminal server.... in other cases lsass.exe is a trojan... make sure where the file in running from... the file location should be [root drive]\[windows root]\system32\...

i would recommend doing some virus scans and what not
0
 
LVL 18

Accepted Solution

by:
Andrej Pirman earned 500 total points
ID: 24397459
Here is what Microsoft says about it and provides a hotfix:
http://support.microsoft.com/kb/842382

It is also very likely that your AD is corrupted. You may try to restore it from backup, or try some AD repair tools available, like "ntdsutil".
0
 
LVL 1

Expert Comment

by:rwetmore
ID: 24411767
You might want to try checking out this blog from MS.  It also has some good tips on troubleshooting LSASS.exe high CPU utilization.

http://blogs.technet.com/askds/archive/2009/04/16/conficker-causes-lsass-to-consume-cpu-time-on-domain-controllers.aspx

Hopefully your client don't have Confiker.
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Problem Description: Actually I found the below issue with some customers after migration from SMS 2003 to SCCM 2007 and epically if they change site code, some clients may appear in the console with old site code, plus old sites still appearing …
Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question