LSASS Crashing Winlogon/rebooting and KB826819 secur32.dll hotfix

All:

I'm trying to troubleshoot LSASS crashing Winlogon.exe on a Windows Server
2003 Standard DC. We recently upgraded it from 2000, as well as our whole
domain. I've checked it for viruses. It likes to crash seven hours after our
Mac OSX 10.3.8 Server attempts to authenticate a user from Active Directory
(the Mac makes LDAP queries against our Windows domain). I know MS has a
hotfix (ref. above) with version 5.2.3790.79. I'm willing to call PSS and
get that fix, but I'm wondering if the SP1 RC2 file is even better for this
(5.2.3790.1433) Or should we just go ahead and deploy SP1 RC2 on this box?
(THis server holds all of the master DC roles-Domain Owner, Infrastrcture
Owner, PDC Owner, RID Owner, Schema Owner).

All the times I have heard of the LSASS crashing was due to a virus
infection, in every case.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"msnews.microsoft.com" <(E-Mail Removed)> wrote in message
news:%23L%230$(E-Mail Removed)...
> All:
>
> I'm trying to troubleshoot LSASS crashing Winlogon.exe on a Windows Server
> 2003 Standard DC. We recently upgraded it from 2000, as well as our whole
> domain. I've checked it for viruses. It likes to crash seven hours after
our
> Mac OSX 10.3.8 Server attempts to authenticate a user from Active
Directory
> (the Mac makes LDAP queries against our Windows domain). I know MS has a
> hotfix (ref. above) with version 5.2.3790.79. I'm willing to call PSS and
> get that fix, but I'm wondering if the SP1 RC2 file is even better for
this
> (5.2.3790.1433) Or should we just go ahead and deploy SP1 RC2 on this box?
> (THis server holds all of the master DC roles-Domain Owner, Infrastrcture
> Owner, PDC Owner, RID Owner, Schema Owner).
>
>

Thank you for the reply. As previously stated, the system was scanned with
Symantec, CA eTrust, McAfee, and AVG. There are no viruses. I've heard of
many cases where the error is caused by other factors. Just reference the
included K B.

Anyone else out there who can give me some informative help?



"Phillip Windell" <@.> wrote in message
news:(E-Mail Removed)...
> All the times I have heard of the LSASS crashing was due to a virus
> infection, in every case.
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
> "msnews.microsoft.com" <(E-Mail Removed)> wrote in message
> news:%23L%230$(E-Mail Removed)...
>> All:
>>
>> I'm trying to troubleshoot LSASS crashing Winlogon.exe on a Windows
>> Server
>> 2003 Standard DC. We recently upgraded it from 2000, as well as our whole
>> domain. I've checked it for viruses. It likes to crash seven hours after
> our
>> Mac OSX 10.3.8 Server attempts to authenticate a user from Active
> Directory
>> (the Mac makes LDAP queries against our Windows domain). I know MS has a
>> hotfix (ref. above) with version 5.2.3790.79. I'm willing to call PSS and
>> get that fix, but I'm wondering if the SP1 RC2 file is even better for
> this
>> (5.2.3790.1433) Or should we just go ahead and deploy SP1 RC2 on this
>> box?
>> (THis server holds all of the master DC roles-Domain Owner, Infrastrcture
>> Owner, PDC Owner, RID Owner, Schema Owner).
>>
>>
>
>

Hi,

My first reaction is always the one Phil Windell already suggested to you.
And that is the one which is listed at the top of my notes for this problem.
A more obscure reason for the behavior of Lsass.exe crashing is described
below.

Computer does not respond to client requests after Lsass.exe stops
responding:
http://support.microsoft.com/Default...b;en-us;821265

--
Todd J Heron, MCSE
Windows Server 2003/2000/NT
----------------------------------------------------------------------------
Note: I do not top-post or bottom-post so that my responses are always easy
to read in this forum and the Google Archives. This posting is provided
"as is" with no warranties and confers no rights.

Thanks Todd. What about 826819?

"Todd J Heron" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
>
> My first reaction is always the one Phil Windell already suggested to you.
> And that is the one which is listed at the top of my notes for this
> problem.
> A more obscure reason for the behavior of Lsass.exe crashing is described
> below.
>
> Computer does not respond to client requests after Lsass.exe stops
> responding:
> http://support.microsoft.com/Default...b;en-us;821265
>
> --
> Todd J Heron, MCSE
> Windows Server 2003/2000/NT
> ----------------------------------------------------------------------------
> Note: I do not top-post or bottom-post so that my responses are always
> easy
> to read in this forum and the Google Archives. This posting is provided
> "as is" with no warranties and confers no rights.
>

That's certainly another possibility.

--
Todd J Heron, MCSE
Windows Server 2003/2000/NT
----------------------------------------------------------------------------
Note: I do not top-post or bottom-post so that my responses are always easy
to read in this forum and the Google Archives. This posting is provided
"as is" with no warranties and confers no rights.