Share via

C:\Windows\system32\lsass.exe, failed with status code c0000409.

Anonymous
2025-02-11T08:13:00+00:00

i recently enabled openssh server and client on my pc and around the same time my pc started crashing every few hours. i have since removed openssh client and server but the issue persists. i have run sfc, DISM, chkdsk and mdsched and no issues have been found. the event viewer shows the same two errors before every restart. 

Faulting application name: lsass.exe, version: 10.0.19041.4239, time stamp: 0x4aaafe3f

Faulting module name: SshdPinAuthLsa.DLL, version: 10.0.19041.1, time stamp: 0x88646801

Exception code: 0xc0000409

Fault offset: 0x00000000000025b8

Faulting process id: 0x39c

Faulting application start time: 0x01db7c275fa076bb

Faulting application path: C:\Windows\system32\lsass.exe

Faulting module path: C:\Windows\system32\SshdPinAuthLsa.DLL

Report Id: e743e6f2-19fb-4b5c-a8e8-5a14e08e1315

Faulting package full name: 

Faulting package-relative application ID:   

A critical system process, C:\Windows\system32\lsass.exe, failed with status code c0000409.  The machine must now be restarted.
Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

  1. Francisco Montilla 30,255 Reputation points Independent Advisor
    2025-02-11T08:46:52+00:00

    Hi Michael,

    I'm an Independent Advisor and I'm happy to help you.

    It appears that remnants of the OpenSSH integration are still causing LSASS to load the SshdPinAuthLsa.DLL even after you removed OpenSSH. The best approach is to remove the leftover registry reference that tells LSASS to load this DLL.

    To do so, back up your registry (important!!), then open the Registry Editor (regedit) as an administrator and navigate to

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

    In the Notification Packages value, remove any reference to SshdPinAuthLsa. After you’ve made that change, restart your computer. This should stop LSASS from loading the problematic module and resolve the crashes.

    Let me know if this helps!

    1 person found this answer helpful.
    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more