Microsoft KB Archive/838501

= &quot;LSASS.EXE terminated unexpectedly with status code -1073741571&quot; error message after you upgrade a Windows 2000 domain controller to Windows Server 2003 =

Article ID: 838501

Article Last Modified on 6/15/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Web Edition

-



Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SYMPTOMS
When you upgrade a Microsoft Windows 2000 domain controller to Microsoft Windows Server 2003, and then you restart the domain controller, you may receive one of the following error messages:

The system process LSASS.EXE terminated unexpectedly with status code -1073741571. The system will now shut down and restart.

The system process LSASS.EXE terminated unexpectedly with status code -1073741819. The system will now shut down and restart.



CAUSE
The &quot;-1073741571&quot; error may occur if the registry data type for the SearchList entry is set to a Dword value type (REG_DWORD) instead of to a String value type (REG_SZ) in the registry.

The &quot;-1073741819&quot; error may occur if the registry data type for the NSPI interface protocol sequences entry is set to a String value type (REG_SZ) instead of a Multi-String value type (REG_MULTI_SZ) in the registry.



RESOLUTION
Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk. To resolve the problem that is related to the &quot;-1073741571&quot; error, follow these steps:  Start your computer in Safe Mode. Click Start, click Run, type regedit in the Open box, and then click OK. Locate and expand the following registry subkey:

 

 Change the data type from REG_DWORD to REG_SZ. To do this, follow these steps:  In the right pane, right-click SearchList, and then click Delete. Click Yes to confirm that you want to delete this entry.</li> On the Edit menu, point to New, and then click String Value.</li> Type SearchList, and then click OK.</li></ol> </li> Quit Registry Editor.</li> Restart your computer.</li></ol>

To resolve the problem that is related to the &quot;-1073741819&quot; error, follow these steps: <ol> Start your computer in safe mode.</li> Click Start, click Run, type regedit in the Open box, and then click OK.</li> Locate and expand the following registry subkey: HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters</li> Change the data type from REG_SZ to REG_MULTI_SZ. To do this, follow these steps: <ol style="list-style-type: lower-alpha;"> In the right pane, right-click NSPI interface protocol sequences, and then click Delete.</li> Click Yes to confirm that you want to delete this entry.</li> On the Edit menu, point to New, and then click Multi-String Value.</li> Type NSPI interface protocol sequences, and then click OK.</li></ol> </li> Exit Registry Editor.</li> Restart your computer.</li></ol>

<div class="status_section">

STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section. This problem will be corrected in Windows Server 2003 Service Pack 1.

<div class="references_section">