LSASS.exe terminates unexpectedly and Operating System reboots when a user is accessing an encrypted file system (EFS) file from a remote computer in a cluster on Windows Server 2008 R2

Vrijedi za: Windows Server 2008 R2 DatacenterWindows Server 2008 R2 EnterpriseWindows Server 2008 R2 for Itanium-Based Systems Više

Symptoms


Consider the following environment:
  • Microsoft Failover Cluster is installed
  • SQL Server is installed as a cluster resource
  • SMB File share resource is added in SQL cluster resource
  • SMB File share resource name and SQL server resource name have same resource name

In this environment, when a user encrypts a file or folder in file share resource, then LSASS.exe running on cluster server is terminated unexpectedly and OS is rebooted.

Cause


This problem occurs because Named Pipe RPC remapping does not work when both File resource and SQL resource have same name.

Resolution


To work around this problem, do either one of the following methods:

Method 1

Recreate SMB File share resource and set the different resource name from SQL server resource name.
This problem does not occur if SMB File share resource name has different name from SQL server resource name.

Reinstall SMB File share resource and set the different resource name.

  1. Open cluster service management console
  2. For the SQL server cluster service, click [add resource] - [client access point]
  3. Set the network name.
  4. For the SQL server cluster service, click [add share folder] and select network name created in step 3.

Method 2

  1. Click Start, type regedit in Start Search box, and then click regedit.exe in the programs list. If you are prompted for an administrator password or for confirmation, type a valid password, or click Continue.
  2. Locate and then click the following subkey in the registry:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Parameters
  3. In the right pane, right-click NoRemapPipes, and then click Modify.
  4. In the Value data box, add efsrpc, and then click OK.
  5. Exit Registry Editor.