+ Post New Thread
Results 1 to 11 of 11
Windows Server 2008 R2 Thread, High lsass.exe CPU hitting 100% when clients logon on our DC in Technical; We've got an issue at the moment where at the start of each lesson, when users are logging onto our ...
  1. #1

    Sylv3r's Avatar
    Join Date
    Jul 2005
    Location
    Co. Durham
    Posts
    3,254
    Thank Post
    377
    Thanked 386 Times in 342 Posts
    Rep Power
    149

    High lsass.exe CPU hitting 100% when clients logon on our DC

    We've got an issue at the moment where at the start of each lesson, when users are logging onto our workstations the DC runs at 100% with lsass.exe running high basically killing our box. It is taken users up to 3 minutes to logon, eventually after about 5 minutes once everybody gets logged on the load drops again to 4% and continues fine. The network isn't slow or anything and the users experience isn't affected once they finally get logged onto to the network.

    I have been tinkering with things over the last few days and can't for the live of me work out why it is doing it. We've restarted the servers and the AV across the school is fully up-to-date. Nothing out of the ordinary appears in the event viewer. It's just basically seems that AD can't cope with the number of requests at the same time.

    If anybody has any idea, what could be up or any pointers that would be great. I've trawled the internet looking for possible causes and lots of people seem to have the issue, but nobody really knows how to fix it.

    The DC is Windows 2008 R2 and all the clients are running Windows 7 SP1.

    Cheers

  2. #2
    Gaz
    Gaz is offline

    Join Date
    Feb 2011
    Location
    Preston
    Posts
    904
    Thank Post
    165
    Thanked 77 Times in 66 Posts
    Rep Power
    21
    I wonder if its worth trying process monitor to find out exactly what the process is doing. Process Monitor
    Monitor the lsass.exe process during the busy period and see if you can decipher what its doing exactly.

  3. #3

    Sylv3r's Avatar
    Join Date
    Jul 2005
    Location
    Co. Durham
    Posts
    3,254
    Thank Post
    377
    Thanked 386 Times in 342 Posts
    Rep Power
    149
    Thanks Gaz

    I had already tried that the other day, but had planned to give it another shot. Nothing out of the ordinary appeared to show up - but no harm in trying again

    Cheers

  4. #4

    Join Date
    Oct 2012
    Posts
    3
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    I personally have never seen the problem you are describing, but if all this box is doing is AD, it is pretty easy to spin up a new DC and migrate the roles over. Something might just be fluky with this DC and migrating everything to a fresh install could be your quickest fix.

  5. #5
    xenonive's Avatar
    Join Date
    Mar 2008
    Location
    Colchester
    Posts
    222
    Thank Post
    37
    Thanked 47 Times in 41 Posts
    Rep Power
    25
    I had this with a corrupt active directory object mostly caused by hard power off at some point . Might be worth running check for corruptions in active directory else look group policy corruptions .

  6. #6

    Join Date
    Jul 2006
    Location
    London
    Posts
    1,272
    Thank Post
    114
    Thanked 244 Times in 195 Posts
    Blog Entries
    1
    Rep Power
    75

  7. #7

    Join Date
    Jul 2006
    Location
    London
    Posts
    1,272
    Thank Post
    114
    Thanked 244 Times in 195 Posts
    Blog Entries
    1
    Rep Power
    75
    For reference: How many DCs do you have and how many clients?

  8. #8
    xenonive's Avatar
    Join Date
    Mar 2008
    Location
    Colchester
    Posts
    222
    Thank Post
    37
    Thanked 47 Times in 41 Posts
    Rep Power
    25
    Quote Originally Posted by psydii View Post
    For reference: How many DCs do you have and how many clients?
    That is a good point could just be too many client requests for one DC

  9. #9

    Sylv3r's Avatar
    Join Date
    Jul 2005
    Location
    Co. Durham
    Posts
    3,254
    Thank Post
    377
    Thanked 386 Times in 342 Posts
    Rep Power
    149
    Thanks for the pointers guys. Will take a look at some of the hot fixes posted here.

    We've got 4 DC's for around 1,200 clients. Everything has worked fine for 3+ years with a similar number of clients. Obvioussly all clients aren't logging in at the same time as some may have already logged in earlier or standing alone at the logon screen.

  10. #10

    Join Date
    Jul 2006
    Location
    London
    Posts
    1,272
    Thank Post
    114
    Thanked 244 Times in 195 Posts
    Blog Entries
    1
    Rep Power
    75
    That should be fine. Following on from @xenonive and a little more research... since hotfix builds of specific files are cumulative, perhaps actually your should also install
    " http://support.microsoft.com/kb/2878563/en-us " to get the latest esent.dll and then follow the advice in " http://support.microsoft.com/kb/2566592/en-us " to check and repair any damage to the AD database.
    Last edited by psydii; 4th May 2014 at 09:53 AM.

  11. #11
    free780's Avatar
    Join Date
    Sep 2012
    Posts
    1,078
    Thank Post
    46
    Thanked 87 Times in 82 Posts
    Rep Power
    23
    Have you got the antivirus exception s configured as per ms recommendations.



SHARE:
+ Post New Thread

Similar Threads

  1. lsass.exe
    By penfold in forum Windows
    Replies: 6
    Last Post: 28th January 2010, 04:27 PM
  2. Lsass.exe error
    By HodgeHi in forum Windows
    Replies: 11
    Last Post: 24th June 2009, 05:53 PM
  3. Lsass.exe - System Error
    By sLiDeR in forum Windows
    Replies: 4
    Last Post: 24th April 2008, 12:08 PM
  4. cpu usage 100%!!
    By marky2027 in forum Hardware
    Replies: 12
    Last Post: 22nd November 2007, 05:51 PM
  5. Lsass.exe and Lssas.exe
    By ndavies in forum Network and Classroom Management
    Replies: 5
    Last Post: 30th October 2007, 04:19 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •