W2k3 - lsass shutdown problem

From: Ronny (ronny.skroblin_at_web.de)
Date: 12/09/04 

Date: Thu, 9 Dec 2004 19:52:19 +0100

Hi @ll,

got a little problem - hope anyone can help.

Suddenly my Windows 2003 server (acting as domain controller) always shuts
down and restarts with the well-known message 'system is shutting down...
initiated by NT AUTHORITY\SYSTEM... system process
c:\windows\system32\lsass.exe...status code -1073741819...' After restarting
it lasts very long until the login message comes up - and if I press
CTRL-ALT-DEL nothing happens, I get no login prompt, only the shutdown
message appears again. Did anyone of you already get a similar problem?

'cause I can't login I also cannot stop the shutdown process with
'shutdown -a' and analyze what happened. I started the server in safe mode
and checked all the well-known folders and registry keys for Sasser, Blaster
& Co., checked the system with the current Stinger tool from NAI - but
nothing was found.
And yes, the system was up-to-date with all the security patches offered by
Microsoft and had the current virus scan signatures.

Appreciate your help...

Thanks and regards,
Ronny

Relevant Pages

  • Re: SP1, Services, Reboots
    ... We have one 2003 server that belongs to a vendor who's app will not run ... But now it restarts whenever their app is run so we are going to ... > all of the latest patches required by MBSA were installed. ... > This shutdown was initiated by NT Authority\System. ...
    (microsoft.public.windows.server.general)
  • Re: W2k3 - lsass shutdown problem
    ... | down and restarts with the well-known message 'system is shutting down... ... | CTRL-ALT-DEL nothing happens, I get no login prompt, only the shutdown ...
    (microsoft.public.security.virus)
  • Re: How do I enable the "shutdown" button on the remote desktop lo
    ... I agree simply use the shutdown command and that will do it. ... server, and the firewall on the servers must allow it. ... and I dont think it applies to my situation. ... without the need to login (so I dont really have a session yet I ...
    (microsoft.public.windows.terminal_services)
  • Re: Remove shutdown in remote desktop
    ... Thanks for the info but we are not using rww we are using remote desktop, ... We'd like to diable the shutdown option so as not to shutdown the server by ... for these guy's without affecting their normal login profiles. ...
    (microsoft.public.windows.server.sbs)
  • Re: Applying a group policy to one server
    ... moved my one TS server into this unit. ... GPO to this Org Unit that simply adds the login button to the start ... My problem is now the shutdown button is removed from the users ...
    (microsoft.public.windows.server.sbs)