Discussion Locked

lsass.exe consumes too much cpu

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

i have a remote server running RRAS (to vpn to main server), active directory (child) and dns. It has two network interfaces, one to the private intranet, one with public address.

after a day of activity, lsass.exe shows in the task manager/processes consuming 99 in the cpu field.

is this indicative of an attack? i disabled both the network interfaces and after a few minutes, i got the cpu cycle back to the System Idle process.

any suggestions?

this happens alot. thanks.

R.A. Caluste

5 replies

by jamrock

If you have Anti-virus (Mcafee) and Exchange running on this system, this is the cause.

by curtisinterruptus

LSASS.EXE is the local security authority, and it could be using lots of CPU resources because it's processing a lot of logon requests--say, if a hacker were trying to brute-force one of your passwords.

On another thought, what SP are you at? There were some memory leak issues with it once.

http://support.microsoft.com/default.aspx?scid=kb;en-us;262539

http://support.microsoft.com/default.aspx?scid=kb;en-us;258817
http://support.microsoft.com/default.aspx?scid=kb;en-us;258817

This discussion is closed to new replies.