Re: Kerberos & lsass errors

Tech-Archive recommends: Speed Up your PC by fixing your registry

Sorry Omar, finger trouble.

the path is c:\windows\system32\lsass.exe - it's just that I can't type!!!

"Omar Torres" <otorres_@xxxxxxxxx> wrote in message
news:uWYJE9LOHHA.2236@xxxxxxxxxxxxxxxxxxxxxxx
Alan C wrote:
It is up to SP1, but I've just noticed that autoupdates is disabled. I'll
do all the patches and if the problem reoccurs I'll repost.
Thanks for the pointer.

"Headbolt" <David.Treadgold@xxxxxxxxxxxxx> wrote in message
news:eofZqJJOHHA.448@xxxxxxxxxxxxxxxxxxxxxxx
I guess the most sensible place to start is patching, is the server
totally up to date with all the latest windows and exchange patches ??

If So then I'd suggest re-applying the latest Service pack for Windows
and Exchange and then re-patch with all the updates, should hopefully
re-install clean versions of the affected files.


"Alan C" <nospam@xxxxxxxxx> wrote in message
news:OnRnnDJOHHA.960@xxxxxxxxxxxxxxxxxxxxxxx
We have a w2k3 member server running exchange that periodically reboots
for no apparent reason.

After each reboot, the system error log contains 3 instances of:-
Event Source: LsaSrv
Event Category: Security Package Manager
Event ID: 5000
Description: The security package Kerberos generated an exception.

Followed by:-
Event Source: USER32
Event Category: None
Event ID: 1074
Description: The Process winlogon.exe has initiated the restart of
computer EXSERV on behalf of user for the following reason: No title
for this reason could be found
Reason Code: 0x50006
Shutdown Type restart
Comment: The system process 'C:\WINDOWS\system32.lsass.exe terminated
unexpectedly with status code -1073740972.

Help please, any clues/suggestions/etc. gratefully accepted.
--
-------------------------------------------------------------------------------
This message has been checked for all known viruses.

The information contained in this e-mail and any attachments is
confidential and may be the subject of legal, professional or other
privilege. It is intended for the named addressee only and may not be
disclosed to any other parties without the prior permission of the
originator.






I think someone is on your server. The path to the lsass.exe is wrong. It
says 'C:\WINDOWS\system32.lsass.exe terminated unexpectedly with status
code -1073740972.' and there should be a back slash after system32 like
c:\WINDOWS\SYSTEM32\lsass.exe

Check the path and see if a file exists called system32.lsass.exe

--
Omar Torres
MCSA, MCDST


.

Relevant Pages

  • Re: Kerberos & lsass errors
    ... all the patches and if the problem reoccurs I'll repost. ... If So then I'd suggest re-applying the latest Service pack for Windows and Exchange and then re-patch with all the updates, should hopefully re-install clean versions of the affected files. ... Description: The Process winlogon.exe has initiated the restart of computer EXSERV on behalf of user for the following reason: No title for this reason could be found ... Shutdown Type restart ...
    (microsoft.public.windows.server.general)
  • Re: Kerberos & lsass errors
    ... all the patches and if the problem reoccurs I'll repost. ... for no apparent reason. ... Reason Code: 0x50006 ... Shutdown Type restart ...
    (microsoft.public.windows.server.general)
  • Re: [uml-devel] Re: [RFC] [patch 0/18] remap_file_pages protection support (for UML), try 3
    ... I assume I should redo the patches rather than fix ... > it would waste the advantage of avoiding VMA splitting. ... Perhaps there is a reason ... your minimum permissions idea seems neither natural nor ...
    (Linux-Kernel)
  • Re: BK kernel workflow
    ... > place easier to apply and merge a lot of patches, ... you don't use BK and Andrea doesn't use BK and the arch developers ... nobody has replicated BK in the last 5 years gives us some reason to ... As for my ego, my friend, don't flatter yourself that I would come to ...
    (Linux-Kernel)
  • Re: Gothic III moans n woes
    ... Ok, so you have G3, you've patched it to 1.07/1.08 (only version I know of that has a working no-cd, you've tweaked your system performance to optimise memory usage for system cache, put in all the .ini tweaks for best performance on your system & it all runs reasonably well? ... If so, I don't think there's any reason to wait for further patches, unless you hit the dreaded memory leak which I believe 1.08/1.09 fixes, so you'd wait for that no-cd to come out presumably. ...
    (comp.sys.ibm.pc.games.rpg)