none
The system process lsass.exe terminated unexpectedly with status code 0.

    Question

  • Mine is a windows 2003 Enterprise Edition R2 server.

    when I go manage and click on groups under users and groups i an getting the below error

    the Following Error occured while attempting to read group properties: RPC server is unavailable.

    and the server restart giving the error

    The system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM. Shutdown will begin in 57 seconds. Shutdown message: The system process 'C:\WINDOWS\system32\lsass.exe' terminated unexpectedly with status code 0. The system will now shut down and restart..

    Please help me with this regfard

     

     

     

     

    Thursday, October 07, 2010 11:59 AM

Answers

  • Hi,

     

    For the error “The system process 'C:\WINDOWS\system32\lsass.exe' terminated unexpectedly…”, please check the following support article first:

     

    The Lsass.exe process may stop responding on a Windows Server 2003-based computer or on a Windows XP-based computer that is in an Active Directory domain environment

    http://support.microsoft.com/kb/938482

     

    To work around this problem, please make sure that the Authenticated Users group has the Read permission and the Apply Policy permission to access at least one GPO that is applied to domain computers. To do this, grant the Authenticated Users group the Read permission and the Apply Policy permission to the default domain policy.

     

    What is the result? If the issue persists, please help gather the following files for research:

     

    Error screenshots

    ===============

    1. When the error reoccurs, press the Print Screen key (PrtScn) on your keyboard.

    2. Click the "Start" menu, click “Run”, type "mspaint" and Press Enter.

    3. In the Paint program, click the "Edit" menu, click "Paste", click the "File" menu, and click "Save".

    4. The "Save As" dialogue box will appear. Type a file name in the "File name:" box, for example: "screenshot".

    5. Make sure "JPEG (*.JPG;*.JPEG;*.JPE;*.JFIF)" is selected in the "Save as type" box, click “Desktop” on the left pane and then click "Save". Please send this saved JPEG file to us.

     

    Event log

    ==========

    1. Click "Start", click “Run”, input "eventvwr" and press Enter.

    2. Expand the "Windows Logs" node on the left pane, right-click on "Application" and click "Save All Events As"; in the pop-up window, click to choose the Desktop icon on the left frame, input "app" in the "File name" blank, and then click save.

    3. Right click on "System", with the same method, save it as "sys".

    4. Locate the two saved log files on the Desktop and send them to us.

     

    Upload these file to the following workspace.

    ------------------------------------------------------------

    You can upload the information files to the following link.  (Please choose "Send Files to Microsoft")

     

    Workspace URL: (https://sftasia.one.microsoft.com/choosetransfer.aspx?key=6b036532-7f51-4877-9242-c142ff9f09d1)     

    Password: b35]W*0Ii_

     

    Note: Due to differences in text formatting with various email clients, the workspace link above may appear to be broken.  Please be sure to include all text between '(' and ')' when typing or copying the workspace link into your browser. Meanwhile, please note that files uploaded for more than 72 hours will be deleted automatically. Please ensure to notify me timely after you have uploaded the files. Thank you for your understanding.

     

    Thanks.

    Nina


    This posting is provided "AS IS" with no warranties, and confers no rights.
    Monday, October 11, 2010 8:27 AM

All replies

  • Hi,

     

    For the error “The system process 'C:\WINDOWS\system32\lsass.exe' terminated unexpectedly…”, please check the following support article first:

     

    The Lsass.exe process may stop responding on a Windows Server 2003-based computer or on a Windows XP-based computer that is in an Active Directory domain environment

    http://support.microsoft.com/kb/938482

     

    To work around this problem, please make sure that the Authenticated Users group has the Read permission and the Apply Policy permission to access at least one GPO that is applied to domain computers. To do this, grant the Authenticated Users group the Read permission and the Apply Policy permission to the default domain policy.

     

    What is the result? If the issue persists, please help gather the following files for research:

     

    Error screenshots

    ===============

    1. When the error reoccurs, press the Print Screen key (PrtScn) on your keyboard.

    2. Click the "Start" menu, click “Run”, type "mspaint" and Press Enter.

    3. In the Paint program, click the "Edit" menu, click "Paste", click the "File" menu, and click "Save".

    4. The "Save As" dialogue box will appear. Type a file name in the "File name:" box, for example: "screenshot".

    5. Make sure "JPEG (*.JPG;*.JPEG;*.JPE;*.JFIF)" is selected in the "Save as type" box, click “Desktop” on the left pane and then click "Save". Please send this saved JPEG file to us.

     

    Event log

    ==========

    1. Click "Start", click “Run”, input "eventvwr" and press Enter.

    2. Expand the "Windows Logs" node on the left pane, right-click on "Application" and click "Save All Events As"; in the pop-up window, click to choose the Desktop icon on the left frame, input "app" in the "File name" blank, and then click save.

    3. Right click on "System", with the same method, save it as "sys".

    4. Locate the two saved log files on the Desktop and send them to us.

     

    Upload these file to the following workspace.

    ------------------------------------------------------------

    You can upload the information files to the following link.  (Please choose "Send Files to Microsoft")

     

    Workspace URL: (https://sftasia.one.microsoft.com/choosetransfer.aspx?key=6b036532-7f51-4877-9242-c142ff9f09d1)     

    Password: b35]W*0Ii_

     

    Note: Due to differences in text formatting with various email clients, the workspace link above may appear to be broken.  Please be sure to include all text between '(' and ')' when typing or copying the workspace link into your browser. Meanwhile, please note that files uploaded for more than 72 hours will be deleted automatically. Please ensure to notify me timely after you have uploaded the files. Thank you for your understanding.

     

    Thanks.

    Nina


    This posting is provided "AS IS" with no warranties, and confers no rights.
    Monday, October 11, 2010 8:27 AM
  • Hi.

    Me also happen the same.

    Mi system is updated but the Windows 2003 Edition is: STD 32b.

    This shutdown was initiated by NT AUTHORITY\SYSTEM. Shutdown will begin in 50 seconds. Shutdown message: The system process 'C:\WINDOWS\system32\lsass.exe' terminated unexpectedly with status code-1. The system will now shut down and restart.

    In my case the error code -1 What is this?.

    Thanks for the answer.

     

    Regards.

     


    Tecsup
    Wednesday, October 13, 2010 4:32 PM
  • hi Mindadhoc,

     

    did you get any solution for this issue.....

    Monday, November 01, 2010 7:46 AM
  • Ninia,

     

    Authenticated users is having Read permission and the Apply Policy permission to the default domain policy. more over I have others servers in the same Doamin working with out any issue...

     

    Regards

    Anooop

    Monday, November 01, 2010 8:02 AM