Q. The Lsass.exe process may stop responding if you have many external trusts on a Windows Server 2003 domain controller?

The Lsass.exe (Local Security Authentication Server) process on your Windows Server 2003 domain controller may hang if you have many external trusts and many simultaneous logon requests that do not specify the domain name.

This behavior will occur because the Lsass.exe process runs out of resources if the 'number of simultaneous logons' multiplied by the 'number of trusts' is grater than 1,000.

To resolve this problem:

1. Install the latest service pack for Windows Server 2003.

2. Open a CMD.EXE window.

3. Type the following command and press Enter:

REG ADD HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters /V NeverPing /T REG_DWORD /F /D 1


Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• The Microsoft
Technology Roadmap
• Office 365 Implementation
• Hyper-V Optimizing
• Windows 8 Deployment
and much more!

Come See Paul Thurrott & Rod Trent in Person!

Early Registration Now Open

Upcoming Training

Mastering SharePoint 2013: Succeeding, Not Just Surviving

Building on the success of the “Mastering SharePoint 2010” seminars, the presenters have updated the content to cover the latest and greatest SharePoint product: SharePoint 2013. While SharePoint 2013 is relatively new on the marketplace, the presenters have been working with SharePoint 2013 for well over a year, and have implemented it with a number of clients in production environments.

Register Now

Current Issue

May 2013 - The NameTranslate object is useful when you need to translate Active Directory object names between different formats, but it's awkward to use from PowerShell. Here's a PowerShell script that eliminates the awkwardness.

CURRENT ISSUE / ARCHIVE / SUBSCRIBE

Windows Forums

Get answers to questions, share tips, and engage with the Windows Community in our Forums.