Local security authority process consuming high memory

Luca Crescini 0 Reputation points
2023-08-16T09:24:17.9766667+00:00

Hello , I have a Virtual machine, OS 2019 standard, Version 1809, OS Build 17763.4499.

32GB ram installed, Intel Xeon gold 6226R CPU 2.90 GHz (2 processor)

We raise a memory leak of ISASS.exe. local Security Authority Process is increasing about 100 Mb a day, also appear a lot of svchost.exe. Any help is welcome.

Windows for business | Windows Server | User experience | Other
{count} votes

2 answers

Sort by: Most helpful
  1. Wesley Li-MSFT 4,576 Reputation points Microsoft External Staff
    2023-08-17T07:18:33.1466667+00:00

    Hello

    I’m sorry to hear that you’re experiencing a memory leak with the ISASS.exe process. This issue has been reported by other users as well. It appears that the issue may be related to a bug in the Local Security Authority Subsystem Service (LSASS) that can cause a memory leak.

    https://github.com/microsoft/Windows-Containers/issues/146

    Microsoft has released a fix for this issue, which was affecting Windows Server machines. You can try installing the December Patch Tuesday updates to fix the LSASS memory leak problem on your Windows Server machine.

    https://support.microsoft.com/en-us/topic/december-13-2022-kb5021237-os-build-17763-3770-8c1506cc-e030-4cf1-8cd6-774091f46f34

    The latest patch for this update is KB5029247:

    https://support.microsoft.com/en-us/topic/august-8-2023-kb5029247-os-build-17763-4737-9f99a6da-ef38-4744-aef2-df38365f9203

    As for the svchost.exe processes, these are normal and are used by Windows to host services. Svchost.exe is a generic host process name for services that run from dynamic-link libraries (DLLs). It’s common to see many instances of svchost.exe running in Task Manager because Windows groups similar services together.


  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.