Microsoft KB Archive/831982

= CPU usage in Lsass.exe increases to 99 percent when you try to access a network share from a Windows 2000-based computer =

Article ID: 831982

Article Last Modified on 10/26/2006

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Professional Edition
 * Microsoft Windows 2000 Advanced Server

-



SYMPTOMS
When you try to connect to a network share from your Microsoft Windows 2000-based computer, you may experience one or more of the following symptoms after you type your user name and password to access the network share:
 * CPU usage reaches 99 percent in Lsass.exe.
 * In Microsoft Windows Explorer, the folder that represents the share is not displayed or is slow to appear.



CAUSE
This problem may occur if all the following conditions are true:  One or both of the hotfixes that are documented in the following articles in the Microsoft Knowledge Base are installed on the server:  

828684 MIT Kerberos v5 authenticated users cannot access Active Directory resources

 

830264 &quot;Failure Audit&quot; Stop error occurs when you try to build a trust relationship



These hotfixes both contain version 5.0.2195.6863 of the Kerberos.dll file. The network share that you are trying to access requires authentication.



RESOLUTION
To resolve this problem, obtain and apply the hotfix that is described in Microsoft Knowledge Base article 822377 to the server. For additional information about this hotfix, click the following article number to view the article in the Microsoft Knowledge Base:

822377 Failure audit event ID 628 occurs when the domain local group member changes the password of another account



WORKAROUND
To work around this problem, remove the hotfixes that are described in the following articles in the Microsoft Knowledge Base from the server:  

828684 Users who are authenticated by MIT Kerberos v5 cannot access Active Directory resources

</li> 

830264 &quot;Failure Audit&quot; Stop error occurs when you try to build a trust relationship

</li></ul>

<div class="status_section">

STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section of this article.

<div class="moreinformation_section">

MORE INFORMATION
For additional information about how hotfix packages are named, click the following article number to view the article in the Microsoft Knowledge Base:

816915 New naming schema for Microsoft Windows hotfix packages

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional query words: sps

Keywords: kbpending kbbug kbfix kbqfe kbwin2000presp5fix KB831982

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.