Solved

LSASS High CPU and Memory Utilization

Posted on 2013-10-22
4
419 Views
Last Modified: 2015-06-23
Hi all,

We have a very curious issue with a Windows 2008 R2 SP1 box (NOT a DC).
In essence lsass seems to be leaking handles and memory.
It goes through periods of high cpu (25% on a 4 core box, so 1 complete CPU).
I have managed to isolate the timing of these periods of high CPU usage down to one event, SQL Server backups.

In investigating this I stumbled across http://www.sqlservercentral.com/Forums/Topic1341522-391-1.aspx and sure enough we did not have the hotfix applied referenced in that (http://support.microsoft.com/kb/2545833). So that was applied last night and I put in performance monitoring on the lsass process.

Come this morning we still get CPU spikes every time SQL backups are running (transaction log backups every 15 minutes) and lsass is currently using 325,000 handles and 191,692K. From my performance stats I could see the gradual increase overnight.

SQL Server itself is suffering with it's transaction logs backups going from taking seconds to complete to now taking over 15 minutes.

Any insights or advice would be appreciated.

Cheers
Terry
0
Comment
Question by:qz8dsw
  • 2
4 Comments
 
LVL 15

Author Comment

by:qz8dsw
ID: 39592542
OK, found out some more info.
The backup drive for SQL backups had recently been replaced. When they replaced it they copied the files, but not the permissions. SQL did not have access to delete old transaction logs.

This has now been rectified and am waiting to see if this is a resolution to our problem.
0
 
LVL 15

Accepted Solution

by:
qz8dsw earned 0 total points
ID: 39593270
Confirmed this is a resolution for our issue.
The handles lsass.exe was holding onto were user tokens going back to an ad account SQL server 2008 uses (Found by using handles.exe from sysinternals/microsoft).

I spose my question has now changed slightly since I have found resolution to the initial issue.

Why would lsass hold onto these resources and continue to build them up for what is in essence an access denied on deleting a file. (SQL Server trying to purge old transaction logs)

Any insight would be appriciated.

Cheers
Terry
0
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 40845784
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Gigs: Get Your Project Delivered by an Expert

Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article I will describe the Backup & Restore method as one possible migration process and I will add the extra tasks needed for an upgrade when and where is applied so it will cover all.
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now