Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

LSASS High CPU and Memory Utilization

Posted on 2013-10-22
4
Medium Priority
?
629 Views
Last Modified: 2015-06-23
Hi all,

We have a very curious issue with a Windows 2008 R2 SP1 box (NOT a DC).
In essence lsass seems to be leaking handles and memory.
It goes through periods of high cpu (25% on a 4 core box, so 1 complete CPU).
I have managed to isolate the timing of these periods of high CPU usage down to one event, SQL Server backups.

In investigating this I stumbled across http://www.sqlservercentral.com/Forums/Topic1341522-391-1.aspx and sure enough we did not have the hotfix applied referenced in that (http://support.microsoft.com/kb/2545833). So that was applied last night and I put in performance monitoring on the lsass process.

Come this morning we still get CPU spikes every time SQL backups are running (transaction log backups every 15 minutes) and lsass is currently using 325,000 handles and 191,692K. From my performance stats I could see the gradual increase overnight.

SQL Server itself is suffering with it's transaction logs backups going from taking seconds to complete to now taking over 15 minutes.

Any insights or advice would be appreciated.

Cheers
Terry
0
Comment
Question by:qz8dsw
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 15

Author Comment

by:qz8dsw
ID: 39592542
OK, found out some more info.
The backup drive for SQL backups had recently been replaced. When they replaced it they copied the files, but not the permissions. SQL did not have access to delete old transaction logs.

This has now been rectified and am waiting to see if this is a resolution to our problem.
0
 
LVL 15

Accepted Solution

by:
qz8dsw earned 0 total points
ID: 39593270
Confirmed this is a resolution for our issue.
The handles lsass.exe was holding onto were user tokens going back to an ad account SQL server 2008 uses (Found by using handles.exe from sysinternals/microsoft).

I spose my question has now changed slightly since I have found resolution to the initial issue.

Why would lsass hold onto these resources and continue to build them up for what is in essence an access denied on deleting a file. (SQL Server trying to purge old transaction logs)

Any insight would be appriciated.

Cheers
Terry
0
 
LVL 35

Expert Comment

by:Seth Simmons
ID: 40845784
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Veeam Task Manager for Hyper-V

Task Manager for Hyper-V provides critical information that allows you to monitor Hyper-V performance by displaying real-time views of CPU and memory at the individual VM-level, so you can quickly identify which VMs are using host resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
Ever needed a SQL 2008 Database replicated/mirrored/log shipped on another server but you can't take the downtime inflicted by initial snapshot or disconnect while T-logs are restored or mirror applied? You can use SQL Server Initialize from Backup…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question