Hi, We are getting an error "not enough storage to process this command " while taking RDP of Windows 2003 server. While troubleshooting we observed that lsass.exe is gradually utilizing full memory. Server details - Windows 2003 Enterprise server + SP2 + latest patch till date. Kindly suggest any permanent solution for the same.

Hi, Please help clarify the following questions first: 1. Did you receive the error “not enough storage to process this command” when trying to connect to a Remote Desktop Server? Or after the connecting? 2. If the error was encountered after connecting, what did you do when the error occurred? Such as running a program or command? 3. What is your client OS version? 4. Is the Remote Desktop Server a DC? Lsass.exe is related to authentication. Please check event log to see whether there are lots of authentication failure or authentication attempts when the issue occurs. Also, is there any account lockout events? To help narrow down the root cause of the issue, please help gather the following files for research. MPSReport on both the client and the RD server ------------------------------------------------------------------- The MPS report is utilized to gather detailed information regarding a system's current configuration. The data collected will assist me with problem isolation. To do this: a. Download Microsoft Product Support Reports tool from the following link, according to your system architecture. http://www.microsoft.com/downloads/details.aspx?FamilyId=CEBF3C7C-7CA5-408F-88B7-F9C79B7306C0&displaylang=en b. Right click on downloaded mpsreports_x86.exe or mpsreports_x64.exe, and choose Run as Administrator. c. Agree the License Agreement, and choose This Computer. d. Select General, Internet and Networking, Business Networks, Server Components, and click Next. e. After finishing collecting logs, please choose Save the result to save it to a .CAB file, and send the CAB file to the workspace. Note: Sometimes the CAB file may fail to be generated on your machine. This is usually caused by the interference from some third-party application such as certain antivirus program. If it still cannot be generated after another attempt, then please manually zip all the output files in the following folder and send the .zip file to the workspace. "%systemroot%\MPSReports\DirSvc\Logs Upload these file to the following workspace. ------------------------------------------------------------ You can upload the information files to the following link. (Please choose "Send Files to Microsoft") Workspace URL: (https://sftus.one.microsoft.com/choosetransfer.aspx?key=be006f53-8327-4637-8a4f-6c297dbce5eb) Password: foj)WEph7PO9jDi Note: Due to differences in text formatting with various email clients, the workspace link above may appear to be broken. Please be sure to include all text between '(' and ')' when typing or copying the workspace link into your browser. Meanwhile, please note that files uploaded for more than 72 hours will be deleted automatically. Please ensure to notify me timely after you have uploaded the files. Thank you for your understanding. You can also check whether the following articles help: Memory usage by the Lsass.exe process on domain controllers that are running Windows Server 2003 or Windows 2000 Server http://support.microsoft.com/kb/308356 A memory leak occurs in the Lsass.exe process after you configure constrained delegation in Windows Server 2003 http://support.microsoft.com/kb/907524/en-us Thanks. Nina This posting is provided "AS IS" with no warranties, and confers no rights.

Dear Nina, 1) I getting this error “not enough storage to process this command” after putting username & password in RDP console as well as logon locally. 2) Our client OS is windows XP + SP3 from which we are taking RDP. 3) Remote desktop server is not a DC. We observed that lsass.exe is gradually utilizing full memory. When it reach to max. memory size then we are facing following issues i) Unable to get access to the server.(prompt above error) ii) All the services will get stop. (Like..Mailing services & other) As per your instruction i have uploaded the logs (.CAB) file to the given location. Workspace URL: (https://sftus.one.microsoft.com/choosetransfer.aspx?key=be006f53-8327-4637-8a4f-6c297dbce5eb) Kindly check the same & suggest permanent solution. Regards, Kaps Kalpesh Pawar

Hi Nina, Any Updates ? Waiting for your reply.... Regards,Kalpesh Pawar

Hi, Thanks for attaching the MPSReport on Windows Server 2003 Enterprise. Meanwhile, there is no event log included in it. Have you checked the event log for the authentication failure, authentication attempts and account lockout events? What is the result? You can also send us the event log for further research. Also, please confirm when the issue begin to occur and whether the issue occurs on one server only. This time, please refer to the following suggestion for troubleshooting: Suggestions: Clean Boot ====================== 1. Click "Start", go to "Run", and type "msconfig" in the open box to start the System Configuration Utility. 2. Click the "Services" tab, check the "Hide All Microsoft Services" box and click Disable All (if it is not gray). 3. Click the "Startup" tab, click "Disable All" and click "OK". 4. Restart your computer. If the "System Configuration Utility" window appears, please check the box and click "OK". Did the issue occur in this mode? Please check the results via both locally or via RDP. If it is inconvenient to boot into Clean Boot mode, please try disabling antivirus software and the Dell utilities for troubleshooting. If the issue persists, please help gather the event log files for research: 1. Click "Start", click “Run”, input "eventvwr" and press Enter. 2. Expand the "Windows Logs" node on the left pane, right-click on "Application" and click "Save All Events As"; in the pop-up window, click to choose the Desktop icon on the left frame, input "app" in the "File name" blank, and then click save. 3. Right click on "Security", with the same method, save it as "sec". 4. Right click on "System", with the same method, save it as "sys". 5. Locate the saved log files on the Desktop and send them to us. Thanks. Nina This posting is provided "AS IS" with no warranties, and confers no rights.

Dear Nina, We can't perform the clean boot & disabling antivirus option as the affected server is our production mail server.We are having mailing server (Mail Enable) & ZFTP appplication installed on the server.Our mailing application could not use windows authentication. Following windows patch installed during Dec 2010 on the server & this issue occur since December 2010 only. Is it happening because of any new windows update ? Security Update for Windows Server 2003 (KB2440591) Security Update for Windows Server 2003 (KB2296199) Update for Internet Explorer for Windows Server 2003 (KB2467659) Security Update for Windows Server 2003 (KB2436673) Security Update for Windows Server 2003 (KB979687) Security Update for Windows Server 2003 (KB2296011) Update for Windows Server 2003 (KB2345886) Security Update for Windows Server 2003 (KB2378111) Security Update for Windows Server 2003 (KB2360937) Security Update for Windows Server 2003 (KB2279986) Security Update for Windows Server 2003 (KB981957) Security Update for Windows Server 2003 (KB982132) Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB2360131) Security Update for Windows Server 2003 (KB2387149) Security Update for Windows Server 2003 (KB2387149) Windows Malicious Software Removal Tool - October 2010 (KB890830) Security Update for Windows Server 2003 (KB2443105) Security Update for Windows Server 2003 (KB2423089) Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB2416400) Can u please suggets any other solution or any tool to check this issue. Regards, Kalpesh Pawar

Hi, As the issue is complicate and involved email server product, I suggest you contact Microsoft Customer Service and Support (CSS). You can speak directly with a Microsoft Support Professional to analyze the problem in an efficient way. For a complete list of Microsoft Product Support Services phone numbers, please go to the following address on the World Wide Web, to find the local number: How and when to contact Microsoft Customer Service and Support http://support.microsoft.com/kb/295539 Thanks for your understanding. Best Regards, Nina This posting is provided "AS IS" with no warranties, and confers no rights.

Hi, We are experiencing the same problem with lsass.exe on a Windows Unified Data Storage Server 2003 SP2. lsass.exe currently consumes 3GB of memory and it's still increasing. The problem started since the last windows updates in December and we never had these problems before. Following updates were installed in December: http://support.microsoft.com/?kbid=2440591 http://support.microsoft.com/?kbid=2296199 http://support.microsoft.com/?kbid=2423089 http://support.microsoft.com/?kbid=2443685 http://support.microsoft.com/?kbid=2467659 http://support.microsoft.com/?kbid=2443105 http://support.microsoft.com/?kbid=2436673 http://support.microsoft.com/?kbid=2416400 The server only runs file services (including NFS and DFS), no other software products. Any suggestions to solve this issue are welcome. Regards, Ronny