Hello, URGENT question, because our Server restarted unexpected. System: Version 5.2 R2 (Build 3790.srv03_sp2_gdr.100216-1301: Service Pack 2) Member Server with Exchange 2003 Version 6.5 (Build 7638.2: Service Pack 2) In System eventviewer the following type of information is available: Source: LsaSrv Event ID: 5000 Description: The security package Kerberos generated an exception. The exception information is the data. Number of times: 3 (in 1 second) Time: 10:44:01 Source: USER32 Event ID: 1074 Description: The process winlogon.exe has initiated the restart of computer ..... on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\WINDOWS\system32\lsass.exe' terminated unexpectedly with status code -1073741788. The system will now shut down and restart. Time: 10:44:39 Source: Application Popup Event ID: 26 Description: Application popup: System Shutdown : The system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM. Shutdown will begin in 58 seconds. Shutdown message: The system process 'C:\WINDOWS\system32\lsass.exe' terminated unexpectedly with status code -1073741788. The system will now shut down and restart.. Time: 10:44:39 Can somebody please tell me why this happend en how to prevent this? Kind regards.Kind regards.

Hello, are all additional updates after SP2 installed on the server? LSASS errors are solved with some of them.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Hello, All additional updates after SP2 are installed. All updates are distrubuted thropugh WSUS. I've checked through Microsoft Update with custom: High Priority: KB973923 Software: KB982671, KB2388210, KB968930, KB982632, KB971513, KB943729, KB940157 and KB2416427Kind regards.

Hi , this might be helpful http://support.microsoft.com/kb/938482 after installing sp2 this issue occurs as per MS . So you need to install latest kerberos.dll

Hi , this might be helpful http://support.microsoft.com/kb/938482 after installing sp2 this issue occurs as per MS . So you need to install latest kerberos.dll Can you tell me how to install the latest kerberos.dll because KB938482 only gives me information about IPSecsvc.dllKind regards.

Hi, So what's happening here is that lsass is encountering an exception in an underlying authentication package. This exception triggers an error handling process that causes us to shut down the server as a security measure, and that's why you're getting the event messages. There are a lot of reasons that this can occur - some are documented in KB articles, others are not, and as software evolves we find (and fix) new issues on a fairly regular basis. The best thing to do in this situation, if the issue keeps occurring, is to open a case with Microsoft support. When you do that, the support engineers can analyze a memory dump of the failure and determine what caused it, and how best to proceed. Sometimes a hotfix may be required, or in other cases a configuration change may correct the issue. In some cases third-party software, such as security or monitoring software, can also trigger this kind of issue. To open a support case, if you have a premier support contract with us, simply contact your Technical Account Manager and they can open the case for you. If you don't have a contract, there are several options for support which you can view here: http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone If you do open a support case, the engineers will need information from the servers experiencing the issue, so make sure that you have access to the servers in order to get that information.David Beach - Microsoft Online Community Support

David, first thank you for your answer. This issue happened 1 time, no other issues have occur. In the further I will open a support case. Kind regards.Kind regards.