Lsass generates a lot of errors in userenv.log
Hello, I've seen that userenv on my computer contains a lot of entries like theses : USERENV(408.214) 11:11:33:021 GetUserDNSDomainName: Failed to impersonate user USERENV(408.214) 11:12:00:291 ImpersonateUser: Failed to impersonate user with 5. USERENV(408.214) 11:12:00:291 GetUserNameAndDomain Failed to impersonate user USERENV(408.214) 11:12:00:291 ImpersonateUser: Failed to impersonate user with 5. USERENV(408.214) 11:12:00:291 GetUserDNSDomainName: Failed to impersonate user USERENV(408.214) 11:12:00:604 ImpersonateUser: Failed to impersonate user with 5. USERENV(408.214) 11:12:00:604 GetUserNameAndDomain Failed to impersonate user Looking to the processid (hex:408), it seems that the source of theses errors are related to the process lsass.exe How can I further troubleshoot ? Regards,
January 23rd, 2012 8:09am

I hope you have seen this article. Thanks
Free Windows Admin Tool Kit Click here and download it now
January 23rd, 2012 8:32am

Yes, I've read this excellent article and that is how I found that lsass was the source of the error messages. Since I cannot disable this process, I have to fix it. Regards,
January 23rd, 2012 8:37am

Hello, Based on my experience, there are many possibilities that may cause this issue. I suggest to perform a clean boot on the Windows Server side firstly, in order to exclude the 3rd party application and services. In most cases that the 3rd party software background may cause the DNS registry issue and have similar logs in your case. Clean Boot the Windows Server manually 1. Click Start, type msconfig in the Start Search box, and then press ENTER. 2. On the General tab, click Selective startup. 3. Under Selective Startup, click to clear the Load startup items check box. 4. Click the Services tab, click to select the Hide All Microsoft services check box, and then click Disable all. 5. Click OK, and then click Restart. Please check the issue after the clean boot. If it persists, please follow up here and we’d like to provide further assistance. TechNet
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2012 2:51am

Hello, The problem is that I've no access to the server side. Log is from an XP client. I've already tryied clean boot on client side without result. Is there a way to enable some logging for the lsass service on the xp client ? Regards,
January 25th, 2012 2:52am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics