A Memory Leak Occurs in Lsass.exe (312320)



The information in this article applies to:

  • Microsoft Windows 2000 Server SP1
  • Microsoft Windows 2000 Server SP2
  • Microsoft Windows 2000 Advanced Server SP1
  • Microsoft Windows 2000 Advanced Server SP2
  • Microsoft Windows 2000 Professional SP1
  • Microsoft Windows 2000 Professional SP2

This article was previously published under Q312320

SYMPTOMS

Under severe internal stress conditions, a user mode memory leak may occur in Lsass.exe. The Processes tab in Task Manager shows a marked increase in Lsass.exe memory usage.

CAUSE

This memory leak occurs only if the API NetrEnumerateTrustedDomains is called remotely from a client to a Windows 2000-based server.

This API returns the names of the domains that are trusted by the domain that the server belongs to. If a domain has trust relationships with many domains, and you try to enumerate those trusted domains, the memory leak occurs on the server that is running Lsass.exe.

RESOLUTION

To resolve this problem, obtain the latest service pack for Microsoft Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Microsoft Windows 2000 Service Pack 4.

Modification Type:MinorLast Reviewed:9/26/2005
Keywords:kbHotfixServer kbQFE kbDirServices kbWin2kSP4fix kbbug kbenv kbnetwork kbpending KB312320