dfssvc and lsass cause high cpu usage

[Christian]

Hello,

we have the following problem.
The services lsass.exe and dfssvc.exe cause a very high cpu usage, if
the dfs-service is started and someone is file-accessing the server.
(e.g. network shares)
When i stop all services of installed applications like
backup-software, the problem still exists.
It is occuring on Windows 2003 SP1 with Exchange 2003 SP1, incl. all
patches.
Does someone have an idea?

Thanks in advance, Christian

[Saah]

Hi,
Is there any antivirus software running?
If so, try to disable it.
--
Saah

Uzytkownik "Christian" <c...@innovasys.de> napisal w wiadomosci
news:1127407411.2...@g14g2000cwa.googlegroups.com...

[Rene Hansen]

Hi.

I actually have the same problem. I have a 2003 server with some shared
folders. When i try to run a program from a shared folder on my clients, the
cpu load on those two proccesses rises to about 20-30 %. Í can also see that
my security eventlog goes crazy. When i try to run the program it genereates
about 15.000 events in that log!! the events are all 576, 540, 538 events.
So for some reason it keeps trying to do a networklogon, and then logoff,
and do it all again. So i guess thats why the cpu load rises, but why is it
generating so many events ?

Mayby you too Christian could try and take a look at your security events ?

It has nothing to do with antivirus, i have tried to disabled that.

Same setup with windows 2003 sp1 and exchange 2003 sp1.

Hope someone can give a clue to whats up.

/Rene

"Saah" <saah@interiaDOTpl> skrev i en meddelelse
news:O4FZu5Cw...@TK2MSFTNGP14.phx.gbl...

[Rene Hansen]

Aha, i found the culprit in my case anyway.

Saah was not off anyway, when he suggested the virusprogram. Its just not
the antivirus on the server thats causing trouble but the antivirus on the
client. We recently patched our mcafee antivirus with patch 11, and that
seems the be causing the trouble on some clients. Mcafee are looking into
the problem, and wil hopefully come up with a update that was fix the
problem.

If you are using mcafee too and have patched it up with the 11 patch try to
remove the patch or just disable the antivirus program on the client and see
it thats the cause.

"Rene Hansen" <r...@sl.cbs.dk> skrev i en meddelelse
news:dhgg9t$187$1...@news.net.uni-c.dk...

[Christian]

patch 11 is the problem, that is right.
you cannot remove this patch, only a deinstall and then a new install
would help.
but you can also get the file naiavf5x.sys from
windows/system32/drivers from a system with only patch 10 on it, copy
it to a patch 11 system and reboot. this solves the problem.

Rene Hansen schrieb: