local security authority process comsuming high memory on one of my domain controller

xhope 221 Reputation points
2023-01-03T14:05:29.353+00:00

dear expert,

the local security authority process is comsuming very high memory usage on one of my domain controllers and I have checked app and system log, nothing was found.

I want to know how to troubleshoot the issue

275734-image.png

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,497 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,125 questions
{count} votes

4 answers

Sort by: Most helpful
  1. Dave Patrick 426.4K Reputation points MVP
    2023-01-03T14:20:48.637+00:00

    The much simpler solution may be to stand up a new one for replacement.

    I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new one, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  2. RLWA32 42,286 Reputation points
    2023-01-03T15:09:43.843+00:00

    The lsass service memory leak surfaced with the November updates. According to the article in the following link the issue was fixed by Microsoft in its December updates.

    microsoft-fixes-windows-server-issue-causing-freezes-restarts


  3. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

  4. Vaidish 76 Reputation points
    2023-04-03T10:51:47.31+00:00

    Hi,

    What windows version are you using? Make sure machines are updated to latest patches.
    Moreover, check if you are facing LSASS high CPU in safe mode and clean boot.
    In clean boot hide all Microsoft services and disable all third-party services and keep only Microsoft services.

    Refer below article on how to perform clean boot.

    https://support.microsoft.com/en-us/topic/how-to-perform-a-clean-boot-in-windows-da2f9573-6eec-00ad-2f8a-a97a1807f3dd