Lsass.exe error causing machines to restart - EventID 1000

Question

Hello! My organization has recently encountered an issue in Windows 10 with lsass.exe failing and causing machines to restart, seemingly at random. This is happening to multiple computers. I would great appreciate some help in figuring out what is causing this.

Answer 1

Faulting module is Ntdll.dll. It's errors can be tricky because it's a core Windows system file. A fault here can point to various underlying issues.

Open Command Prompt as administrator and type sfc /scannow followed by Enter.

Open Command Prompt as administrator and type DISM /Online /Cleanup-Image /CheckHealth followed by Enter.

Open Command Prompt as administrator and type DISM /Online /Cleanup-Image /RestoreHealth followed by Enter.

n some cases, the DISM tool might require an external source of healthy files to repair the image. This is typically the Windows installation media or a mounted ISO file. You can specify the source using the /Source option in the command.

Answer 2

Hello,

LSASS.exe is the Local Security Authority Process in Windows and is responsible for enforcing the security policy on the system. I suggest that check for update firstly. If any security update could be found, install it to check.

Best Regards,

Hania Lian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.