CPU usage in Lsass.exe increases to 99 percent when you try to access a network share from a Windows 2000-based computer (831982)

SYMPTOMS

When you try to connect to a network share from your Microsoft Windows 2000-based computer, you may experience one or more of the following symptoms after you type your user name and password to access the network share:

CPU usage reaches 99 percent in Lsass.exe.
In Microsoft Windows Explorer, the folder that represents the share is not displayed or is slow to appear.

CAUSE

This problem may occur if all the following conditions are true:

One or both of the hotfixes that are documented in the following articles in the Microsoft Knowledge Base are installed on the server:
- 828684 MIT Kerberos v5 authenticated users cannot access Active Directory resources
- 830264 "Failure Audit" Stop error occurs when you try to build a trust relationship
These hotfixes both contain version 5.0.2195.6863 of the Kerberos.dll file.
The network share that you are trying to access requires authentication.

RESOLUTION

To resolve this problem, obtain and apply the hotfix that is described in Microsoft Knowledge Base article 822377 to the server. For additional information about this hotfix, click the following article number to view the article in the Microsoft Knowledge Base:

822377 Failure audit event ID 628 occurs when the domain local group member changes the password of another account

WORKAROUND

To work around this problem, remove the hotfixes that are described in the following articles in the Microsoft Knowledge Base from the server:

828684 Users who are authenticated by MIT Kerberos v5 cannot access Active Directory resources
830264 "Failure Audit" Stop error occurs when you try to build a trust relationship

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section of this article.

MORE INFORMATION

For additional information about how hotfix packages are named, click the following article number to view the article in the Microsoft Knowledge Base:

816915 New naming schema for Microsoft Windows hotfix packages

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates