Windows Forum

Ask something
Discussion Locked

LSASS DR. Watson Error

0 helpful
7 replies

by rumark007

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Every time I get a DR. Watson with Lsass error on my Primary domain controller. The RPC stop working and my logon authenication doesn't work. I had to hard boot my PDC because I cannot do a soft shutdown. Does anybody know an answer to this problem?

7 replies

by vn

Sounds to me like you haven't given enough.... but, here are a couple of issues with this LSASS.EXE file...
FIRST... I HOPE YOU HAVE SP4 or greater installed. If not. STOP! This is your problem. The other thing... The problem occurs when the Netlogon service is starting and fails to deallocate memory needed to process the imported accounts. The other thing is that while running Windows NT, you may receive an Access Violation error message in Lsass.exe. After this error occurs, you cannot logon locally and the administrative tools that rely on LSA/LSARPC (such as Event Viewer and Server Manager) do not function. The failure occurs when a remote client connects to the Local Security Authority over a named pipe and passes an incorrect buffer size (fragment length).
Try to go to this ftp site...ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/ and obtain the file lsa2-fix This is NT's hotfix. Good Luck... Oh...you can always reinstall too! Yeah right...

by rumark007

I already have service pack 6a and when I tried to install the new lsa fix, it said that I already have it on my computer. I noticed that when I get a Dr Watson error, it happens at approximately between 12:30 AM to 12:40 AM all the time. Could it be security issue or SMS doing it?

by vn

Nice to know that there is a time that it always occurs. Do you have a tape backup or SCHEDULED event going on? Check it out and let me know if so.

by techadmin

Try
*SMS hardware/software inventory
*Data replication,
*Tape backup
*Any process you scheduled

This discussion is closed to new replies.