Solved

Network Administrator

Posted on 2009-05-15
3
880 Views
Last Modified: 2012-05-07
We have a domain controller that is a DC, GC and print server. We noticed that the CPU usage is very high. It goes up to 100 % then it drops down to 20% then back to 85%...etc.  The file that is consuming the most CPU is LSASS.exe.

Any help would be appriciated.
0
Comment
Question by:rogermendieta
3 Comments
 
LVL 6

Expert Comment

by:0791882310
ID: 24397437
lsass.exe is a security manager for windows (I.E... windows logons and what not)... so it shouldn't be taking up any resources... unless your running a terminal server.... in other cases lsass.exe is a trojan... make sure where the file in running from... the file location should be [root drive]\[windows root]\system32\...

i would recommend doing some virus scans and what not
0
 
LVL 18

Accepted Solution

by:
Andrej Pirman earned 500 total points
ID: 24397459
Here is what Microsoft says about it and provides a hotfix:
http://support.microsoft.com/kb/842382

It is also very likely that your AD is corrupted. You may try to restore it from backup, or try some AD repair tools available, like "ntdsutil".
0
 
LVL 1

Expert Comment

by:rwetmore
ID: 24411767
You might want to try checking out this blog from MS.  It also has some good tips on troubleshooting LSASS.exe high CPU utilization.

http://blogs.technet.com/askds/archive/2009/04/16/conficker-causes-lsass-to-consume-cpu-time-on-domain-controllers.aspx

Hopefully your client don't have Confiker.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Every system administrator encounters once in while in a problem where the solution seems to be a needle in haystack.  My needle was an anti-virus version causing problems with my Exchange server. I have an HP DL350 with Windows Server 2008 Stand…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
Delivering innovative fully-managed cloud services for mission-critical applications requires expertise in multiple areas plus vision and commitment. Meet a few of the people behind the quality services of Concerto.
A simple description of email encryption using a secure portal service. This is one of the choices offered by The Email Laundry for email encryption. The other choices are pdf encryption which creates an encrypted pdf of your email and any attachmen…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now