Microsoft KB Archive/300621

From BetaArchive Wiki
Knowledge Base


Lsass.exe Stops Working Intermittently on a Domain Controller or Global Catalog

Article ID: 300621

Article Last Modified on 2/21/2007



APPLIES TO

  • Microsoft Windows 2000 Service Pack 1
  • Microsoft Windows 2000 Service Pack 2
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Service Pack 1
  • Microsoft Windows 2000 Service Pack 2



This article was previously published under Q300621

SYMPTOMS

When Lsass.exe is running on a domain controller, Lsass.exe may generate an access violation. The server reboots automatically after the access violation. This problem may occur on a domain controller that is a global catalog and is also the target of the Recipient Update service from Microsoft Exchange 2000 Server. When this problem occurs, the following stack trace appears in the Dr. Watson log.

0d6df464 77d64034 1012cec8 757bb5da 0a991000 RPCRT4!RPC_UUID__ConvertToString+0x3 
0d6df46c 757bb5da 0a991000 0d6df54c 00000002 RPCRT4!UuidToStringW+0x33 
0d6df550 757bb815 0a9b9538 0a991010 00000000 NTDSA!CheckPermissions+0x69
0d6df598 7579da45 0a9b9538 0a990ff8 00000100 NTDSA!CheckPermissionsAnyClient+0x10f
0d6df680 7579dddf 0a9b9538 0a990ff8 00000100 NTDSA!IsAccessGrantedByObjectTypeList+0x74 
0d6df6d0 757c01c8 0a9b9538 0a990ff8 1235ebe0 NTDSA!IsControlAccessGranted+0x8e 
0d6df730 757c0524 0a9b4008 0a990b98 0000000d NTDSA!findBestGALInList+0x169
0d6df7c0 7580bf9e 00000000 00000000 0d6df8a4 NTDSA!HTGetGALAndTemplateDNT+0x1db
0d6df8b0 75809451 0a9b4008 00000000 00000003 NTDSA!ABBind_local+0x30c
0d6dfa78 77d445e0 1012b8b8 00000003 100decf4 NTDSA!NspiBind+0x269
0d6dfaa0 77da2579 758091e8 0d6dfab4 00000005 RPCRT4!_Invoke+0x30
0d6dfd10 77da29cc 00000000 00000000 0d6dfdfc RPCRT4!NdrStubCall2+0x63d
0d6dfd2c 77d448bc 0d6dfdfc 000f2bf0 0d6dfdfc RPCRT4!NdrServerCall2+0x17 
0d6dfd64 77d447ec 758309d0 0d6dfdfc 0d6dfe40 RPCRT4!DispatchToStubInC+0x84 
0d6dfdbc 77d446fe 00000000 00000000 0d6dfe40 RPCRT4!RPC_INTERFACE__DispatchToStubWorker+0x100 
0d6dfddc 77d4c6ea 0d6dfdfc 00000000 0d6dfe40 RPCRT4!RPC_INTERFACE__DispatchToStub+0x5e
0d6dfe44 77d4c63d 00000000 100decf0 1012b8b8 RPCRT4!OSF_SCALL__DispatchHelper+0xa4 
0d6dfe58 77d4c43e 00000000 00000000 00000001 RPCRT4!OSF_SCALL__DispatchRPCCall+0x115 
0d6dfe90 77d4c199 100decd8 00000003 00000000 RPCRT4!OSF_SCALL__ProcessReceivedPDU+0x43 
0d6dfeb0 77d4bd7d 100decd8 00000070 00015f90 RPCRT4!OSF_SCALL__BeginRpcCall+0xd0<BR/>
......
                    

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack


The English version of this fix should have the following file attributes or later:

Date         Time    Version          Size     File name
   -----------------------------------------------------------------
6/4/2001    05:16p   5.0.2195.3680   501,520   Lsasrv.dll(56-bit)
6/11/2001   06:24p   5.0.2195.3692   355,088   Advapi32.dll
6/11/2001   06:20p   5.0.2195.3680   519,440   Instlsa5.dll
6/11/2001   06:24p   5.0.2195.3698   142,608   Kdcsvc.dll
6/7/2001    11:54a   5.0.2195.3703   209,008   Kerberos.dll
5/29/2001   09:26a   5.0.2195.3649    69,456   Ksecdd.sys
6/4/2001    05:16p   5.0.2195.3680   501,520   Lsasrv.dll
6/4/2001    05:16p   5.0.2195.3680    33,552   Lsass.exe
6/11/2001   06:24p   5.0.2195.3719   909,072   Ntdsa.dll
6/11/2001   06:24p   5.0.2195.3678   382,736   Samsrv.dll
5/29/2001   09:53a   5.0.2195.3649   128,784    Scecli.dll 



STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 3.

MORE INFORMATION

For additional information about how to obtain a hotfix for Windows 2000 Datacenter Server, click the article number below to view the article in the Microsoft Knowledge Base:

265173 The Datacenter Program and Windows 2000 Datacenter Server Product


For additional information about how to install multiple hotfixes with only one reboot, click the article number below to view the article in the Microsoft Knowledge Base:

296861 Use QChain.exe to Install Multiple Hotfixes with One Reboot


For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the article number below to view the article in the Microsoft Knowledge Base:

249149 Installing Microsoft Windows 2000 and Windows 2000 Hotfixes



Additional query words: kbDirServices

Keywords: kbbug kbfix kbwin2000presp3fix kbqfe kbwin2000sp3fix kbdirservices kbhotfixserver KB300621