?
Solved

Network Administrator

Posted on 2009-05-15
3
Medium Priority
?
892 Views
Last Modified: 2012-05-07
We have a domain controller that is a DC, GC and print server. We noticed that the CPU usage is very high. It goes up to 100 % then it drops down to 20% then back to 85%...etc.  The file that is consuming the most CPU is LSASS.exe.

Any help would be appriciated.
0
Comment
Question by:rogermendieta
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 6

Expert Comment

by:0791882310
ID: 24397437
lsass.exe is a security manager for windows (I.E... windows logons and what not)... so it shouldn't be taking up any resources... unless your running a terminal server.... in other cases lsass.exe is a trojan... make sure where the file in running from... the file location should be [root drive]\[windows root]\system32\...

i would recommend doing some virus scans and what not
0
 
LVL 18

Accepted Solution

by:
Andrej Pirman earned 2000 total points
ID: 24397459
Here is what Microsoft says about it and provides a hotfix:
http://support.microsoft.com/kb/842382

It is also very likely that your AD is corrupted. You may try to restore it from backup, or try some AD repair tools available, like "ntdsutil".
0
 
LVL 1

Expert Comment

by:rwetmore
ID: 24411767
You might want to try checking out this blog from MS.  It also has some good tips on troubleshooting LSASS.exe high CPU utilization.

http://blogs.technet.com/askds/archive/2009/04/16/conficker-causes-lsass-to-consume-cpu-time-on-domain-controllers.aspx

Hopefully your client don't have Confiker.
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After having deployed hundreds of thousands of Terminal Services seats worldwide, I still see all the time people asking me that same old question: "If TS/RDS is that reliable why are you telling me I should reboot it that often? My DC/SQL/Exchange/…
The environment that this is running in is SCCM 2007 R2 running on a Windows 2008 R2 server. The PXE Distribution point is running on its own Windows 2008 R2 box. This is what Event viewer showed after trying to start the WDS service:  An erro…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…
Suggested Courses

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question