nV News Forums

 
 

nV News Forums (http://www.nvnews.net/vbulletin/index.php)
-   Microsoft Windows XP And Vista (http://www.nvnews.net/vbulletin/forumdisplay.php?f=11)
-   -   lsass.exe high disk IO rate (http://www.nvnews.net/vbulletin/showthread.php?t=126980)

chesterman 01-27-09 11:06 AM

lsass.exe high disk IO rate
 
hello people.

first of all, sorry about my poor english. i'm from brazil.

i have a virtualized win2k3 server running some services made by the company that i work.
from about 2 weeks until now, the lsass process started to make huge reads/writes to the disk (he's writing at the same rate as our firebird server!!!) and this is reducing our server performance (since our service is very disk dependent).
i've been searching on google and found that this issue goes back from the win2k days, but microsoft has no report about it. also, no one have found a solution for this.

the virus/malware hypothesis is almost discarted, since this machine have a very restricted access and i've already made the common testes (AV/antispy scan... )

it looks like that this behaviour is more common in machines that have the terminal service enable (this is my case), but i can't shut it down, because this is the only way i have to access this machine.

if someone knows something about this issue that can solve it or at least point me to some direction i'll be very grateful

Q 01-27-09 12:17 PM

Re: lsass.exe high disk IO rate
 
Why don't you install FreeSSHD. This way you could turn off TS but still have remote command line access using Tunnelier. You could then monitor the difference with TS on and off to see if that is your culprit.

chesterman 01-27-09 01:52 PM

Re: lsass.exe high disk IO rate
 
the machine is on a network that i have no authority and cannot foward more ports for any other service

Q 01-27-09 01:57 PM

Re: lsass.exe high disk IO rate
 
Dang. Can you run Process Explorer and find out more information about the instance of lsass.exe and share it with us?


All times are GMT -5. The time now is 11:10 PM.

Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Copyright 1998 - 2014, nV News.