Article ID: 812428 - Last Review: October 27, 2006 - Revision: 2.8

A Memory Leak Occurs in the Lsass Process

Hotfix Download Available
View and request hotfix downloads

View products that this article applies to.

System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

SYMPTOMS

Under stress, a Windows 2000-based server may leak memory in the Lsass process. You can see the leak by using the System Monitor tool. View the Private Bytes for Lsass process. If the leak continues for long enough, the server becomes unresponsive.

Back to the top

CAUSE

This issue is caused by a code problem.

Back to the top

RESOLUTION

Service Pack Information

To resolve this problem, obtain the latest service pack for Microsoft Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 (http://support.microsoft.com/kb/260910/EN-US/ ) How to Obtain the Latest Windows 2000 Service Pack

Back to the top

Hotfix Information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support (http://support.microsoft.com/contactus/?ws=support)

Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language. The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

Date         Time    Version         Size     File name 
----------------------------------------------------------
17-Feb-2003  00:30   5.0.2195.6613   124,176  Adsldp.dll 
17-Feb-2003  00:30   5.0.2195.6601   130,832  Adsldpc.dll 
25-Feb-2003  23:53   5.0.2195.6667    62,736  Adsmsext.dll 
25-Feb-2003  23:53   5.0.2195.6672   378,640  Advapi32.dll 
17-Feb-2003  00:30   5.0.2195.6611    49,936  Browser.dll 
17-Feb-2003  00:30   5.0.2195.6663   135,952  Dnsapi.dll 
17-Feb-2003  00:30   5.0.2195.6663    96,528  Dnsrslvr.dll 
17-Feb-2003  00:30   5.0.2195.6661    46,352  Eventlog.dll 
17-Feb-2003  00:30   5.0.2195.6627   148,240  Kdcsvc.dll 
21-Feb-2003  00:11   5.0.2195.6666   204,560  Kerberos.dll 
03-Dec-2002  03:09   5.0.2195.6621    71,888  Ksecdd.sys 
24-Jan-2003  22:40   5.0.2195.6659   509,712  Lsasrv.dll 
24-Jan-2003  22:41   5.0.2195.6659    33,552  Lsass.exe 
05-Feb-2003  16:59   5.0.2195.6662   109,328  Msv1_0.dll 
17-Feb-2003  00:30   5.0.2195.6601   312,592  Netapi32.dll 
17-Feb-2003  00:30   5.0.2195.6627   360,720  Netlogon.dll 
25-Feb-2003  23:53   5.0.2195.6669   929,552  Ntdsa.dll 
25-Feb-2003  23:53   5.0.2195.6666   392,464  Samsrv.dll 
25-Feb-2003  23:53   5.0.2195.6672   131,344  Scecli.dll 
25-Feb-2003  23:53   5.0.2195.6671   306,448  Scesrv.dll 
10-Feb-2003  23:22   5.0.2195.6663   166,912  Sp3res.dll 
17-Feb-2003  00:30   5.0.2195.6601    51,472  W32time.dll 
16-Aug-2002  13:32   5.0.2195.6601    57,104  W32tm.exe 
25-Feb-2003  23:53   5.0.2195.6666   125,200  Wldap32.dll 
24-Feb-2003  23:24   5.0.2195.6659   509,712  Lsasrv.dll

Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Microsoft Windows 2000 Service Pack 4.

Back to the top

MORE INFORMATION

For additional information about how to obtain a hotfix for Windows 2000 Datacenter Server, click the article number below to view the article in the Microsoft Knowledge Base:

265173 (http://support.microsoft.com/kb/265173/EN-US/ ) The Datacenter Program and Windows 2000 Datacenter Server Product

The hotfix that is described in this article (812428) changes some of the adminSDHolder object functionality. For additional information about these changes, click the following article number to view the article in the Microsoft Knowledge Base:

817433 (http://support.microsoft.com/kb/817433/ ) Delegated Permissions Are Not Available and Inheritance Is Automatically Disabled

Back to the top