we have three windows 2008r2 domaincontroller on vmware, on two of them the lsass.exe process is permantently on 100%. Especially the kerbereos-key services is response for that. the given solutions (http://support.microsoft.com/kb/2550044 http://blogs.technet.com/b/askds/archive/2007/08/20/troubleshooting-high-lsass-cpu-utilization-on-a-domain-controller-part-1-of-2.aspx) on the web are already done but no conclusion yet. the problem is still standing, when the dc is disconnect to the web.