lsass.exe error causes system to reboot
Has anyone experineced an issues where after unlocking Windows 7 a critical error message is displayed and the system reboots? Below is the entry form the event log.

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 27/08/2009 08:28:33 AM
Event ID: 1015
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Grp-sna.TCLGROUP.COM
Description:
A critical system process, C:\Windows\system32\lsass.exe, failed with status code 255. The machine must now be restarted.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="49152">1015</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-08-27T12:28:33.000000000Z" />
<EventRecordID>5624</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Grp-sna.TCLGROUP.COM</Computer>
<Security />
</System>
<EventData>
<Data>C:\Windows\system32\lsass.exe</Data>
<Data>255</Data>
</EventData>
</Event>
August 27th, 2009 12:43pm

Hi,
this kind of crash can be caused by an outdated or incompatible program (for Vista people mentioned older versions of HPfingerprint reader software and of VMWare).
Best greetings from Germany
Olaf
Free Windows Admin Tool Kit Click here and download it now
August 27th, 2009 1:10pm

Hi Olaf,

Thanks for the suggestion but this is a clean install of Windows 7 RTM (32-bit) with only Office 2007 andForefront installed. The problem only occurs when I am connect to Active Directory. If I am out of office the problem does not occur.

Any further assistance would be greatly appreciated.

Rgds
Khalid
August 27th, 2009 1:15pm

Hi Khalid,
out of office or disconnected from any network?

I would recommend to check, if this happens also w/o Forefront installed.
(Office 2007 is installed on my own system, which is also in AD, and it does not crash here.)
You could also disable automatic restart on crash to see the BSOD (which may provide more informations eventually).

Best greetings from Germany
Olaf
Free Windows Admin Tool Kit Click here and download it now
August 27th, 2009 1:33pm

Not connected to an Active Directory/Domain. It does not happen while connected to my home network.

Will try without FCS (forefront) and update the thread.

thanks again
Khalid

August 27th, 2009 1:36pm


Hi Olaf,

I have created an exclusion on Forefront to omit lsass.exe from being scanned. So far the problem has not happened. I will update further tomorrow.


Rgds
Khalid
Free Windows Admin Tool Kit Click here and download it now
August 27th, 2009 6:23pm

The exclusion has solved the problem.

thanks Olaf

August 29th, 2009 3:40pm

Thanks for reporting back!
Best greetings from Germany
Olaf
Free Windows Admin Tool Kit Click here and download it now
August 30th, 2009 11:16am

Hi Khalidr,

Could You talk detail about creating an exclusion on Forefront to omit Lsass.exe? I'm meeting the problem which is same you!

Thanks

April 4th, 2015 1:06am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics