You are currently offline, waiting for your internet to reconnect

Dr. Watson Error in Lsass.exe with Event ID 4097 When You Log On to an Active Directory Domain Environment

This article has been archived. It is offered "as is" and will no longer be updated.
When you log on to a Microsoft Active Directory directory services domain environment, you may experience a Dr. Watson error in the Lsass.exe program with an event ID of 4097.
This issue occurs because of a synchronization problem in the domain list that is maintained by the Key Distribution Center (KDC) service. Specifically, one thread is looking up the domain list to find a specific domain name while another thread is trying to modify the domain list.

Hotfix Information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.


No prerequisites are required.

Restart Requirement

You must restart your computer after you apply this hotfix.

Hotfix Replacement Information

This hotfix does not replace any other hotfixes.

File Information

The English version of this hotfix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.
   Date         Time   Version        Size       File name   ----------------------------------------------------------   19-Jun-2003  12:52  5.0.2195.6748    124,688  Adsldp.dll   19-Jun-2003  12:52  5.0.2195.6748    132,368  Adsldpc.dll   19-Jun-2003  12:52  5.0.2195.6748     63,760  Adsmsext.dll   19-Jun-2003  12:52  5.0.2195.6743    381,200  Advapi32.dll   06-Jun-2003  08:53  5.0.2195.6753     69,392  Browser.dll   19-Jun-2003  12:52  5.0.2195.6680    134,928  Dnsapi.dll   19-Jun-2003  12:52  5.0.2195.6663     92,432  Dnsrslvr.dll   19-Jun-2003  12:52  5.0.2195.6753     47,376  Eventlog.dll   19-Jun-2003  12:52  5.0.2195.6759    148,240  Kdcsvc.dll   18-Jun-2003  06:43  5.0.2195.6758    205,072  Kerberos.dll   26-Mar-2003  10:37  5.0.2195.6695     71,888  Ksecdd.sys   28-May-2003  09:39  5.0.2195.6749    509,712  Lsasrv.dll   28-May-2003  09:39  5.0.2195.6749     33,552  Lsass.exe   04-Apr-2003  13:12  5.0.2195.6680    117,520  Msv1_0.dll   19-Jun-2003  12:52  5.0.2195.6601    311,568  Netapi32.dll   19-Jun-2003  12:52  5.0.2195.6695    371,984  Netlogon.dll   19-Jun-2003  12:52  5.0.2195.6697  1,040,144  Ntdsa.dll   19-Jun-2003  12:52  5.0.2195.6742    392,464  Samsrv.dll   19-Jun-2003  12:52  5.0.2195.6737    131,344  Scecli.dll   19-Jun-2003  12:52  5.0.2195.6737    306,448  Scesrv.dll   17-Jun-2003  06:54  5.0.2195.6756  4,576,768  Sp3res.dll   19-Jun-2003  12:52  5.0.2195.6601     51,472  W32time.dll   16-Aug-2002  02:32  5.0.2195.6601     57,104  W32tm.exe   19-Jun-2003  12:52  5.0.2195.6741    126,224  Wldap32.dll
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
816915 New Naming Schema for Microsoft Windows Hotfix Packages

Article ID: 822360 - Last Review: 12/08/2015 03:01:35 - Revision: 4.5

Microsoft Windows 2000 Server, Microsoft Windows 2000 Professional Edition, Microsoft Windows 2000 Advanced Server

  • kbnosurvey kbarchive kbautohotfix kbhotfixserver kbqfe kbbug kbfix kbqfe kbwin2000presp5fix KB822360