The Server service and the Workstation service do not start in Windows 2000, and you receive a "The specified file could not be found" error message

Article translations Article translations
Article ID: 951025 - View products that this article applies to.
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all

SYMPTOMS

On a Microsoft Windows 2000-based computer, a service appears in Event Viewer that is called "Local security authority sub system (LSASS)." This is not a valid Microsoft service. The service does not start in Windows 2000, and you receive the following error message:
The specified file could not be found
Additionally, the Server service and the Workstation service may not start.

CAUSE

This problem occurs because the computer is infected by one of the following kinds of software:
  • malware
  • spyware
  • malicious software
The software may cause the Server service and the Workstation service not to start.

RESOLUTION

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows
To resolve this problem, remove the dependency on the LSASS service for the Server service and for the Workstation service. To do this, follow these steps:
  1. Click Start, click Run, type regedit, and then click OK.
  2. Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer
  3. In the details pane, double-click the DependOnService registry entry.
  4. In the Value data box, delete LsaSrv, and then click OK.
  5. Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation
  6. In the details pane, double-click the DependOnService registry entry.
  7. In the Value data box, delete LsaSrv, and then click OK.
  8. Delete the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LSASRV
  9. Restart the computer.

Properties

Article ID: 951025 - Last Review: October 21, 2013 - Revision: 1.0
APPLIES TO
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 Server
Keywords: 
kbnosurvey kbarchive kbexpertiseinter kbtshoot kbprb KB951025

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com