LSASS.EXE causing reboot.

I have a domian with 3 Windows 2003 SP1 servers of which 2 are domain
controllers. Both DC's crash at (seemingly) random intervals with an Event
ID 100 "Faulting application lsass.exe version 5.2.3790.0, faulting module
msvcrt.dll, version 7.0.3790.1830, fault address 0x00038efa."

Winlogon Event ID 1015 " A critical system process,
c:\windows\system32\lsass.exe failed with status code c0000005. The machine
will be restarted"

I can almost alawys recreate the error by adding a machine (XP SP2) to the
domain. Both these servers are DC's with Integrated DNS.

Any help would be GREATLY appreciated.

Looks like there may be a hotfix for this. You'll need to contact PSS to
get it: http://support.microsoft.com/?id=818080

"Mike B." <MikeB@discussions.microsoft.com> wrote in message
news:6BE53485-E395-4EA5-8C65-A2F98360EC08@microsoft.com...
>I have a domian with 3 Windows 2003 SP1 servers of which 2 are domain
> controllers. Both DC's crash at (seemingly) random intervals with an
> Event
> ID 100 "Faulting application lsass.exe version 5.2.3790.0, faulting module
> msvcrt.dll, version 7.0.3790.1830, fault address 0x00038efa."
>
> Winlogon Event ID 1015 " A critical system process,
> c:\windows\system32\lsass.exe failed with status code c0000005. The
> machine
> will be restarted"
>
> I can almost alawys recreate the error by adding a machine (XP SP2) to the
> domain. Both these servers are DC's with Integrated DNS.
>
> Any help would be GREATLY appreciated.

Actually that hotfix is for another faulting module (authz.dll) and it is
also a pre-SP1 hotfix so since SP1 is installed it does not apply.

I don't see anything in KB referencing this fault, you probably will want to
contact PSS and open a case to troubleshoot the issue.
--
Brian Delaney, MCSE


"Bill" wrote:

> Looks like there may be a hotfix for this. You'll need to contact PSS to
> get it: http://support.microsoft.com/?id=818080
>
> "Mike B." <MikeB@discussions.microsoft.com> wrote in message
> news:6BE53485-E395-4EA5-8C65-A2F98360EC08@microsoft.com...
> >I have a domian with 3 Windows 2003 SP1 servers of which 2 are domain
> > controllers. Both DC's crash at (seemingly) random intervals with an
> > Event
> > ID 100 "Faulting application lsass.exe version 5.2.3790.0, faulting module
> > msvcrt.dll, version 7.0.3790.1830, fault address 0x00038efa."
> >
> > Winlogon Event ID 1015 " A critical system process,
> > c:\windows\system32\lsass.exe failed with status code c0000005. The
> > machine
> > will be restarted"
> >
> > I can almost alawys recreate the error by adding a machine (XP SP2) to the
> > domain. Both these servers are DC's with Integrated DNS.
> >
> > Any help would be GREATLY appreciated.
>
>
>