Lsass.exe crashes and error code 255 is generated in Windows Server 2008 x64 Standard

so keep getting random reboots on our server running windows 2008 x64 standard.  caused lsass.exe error code 255.  opener.  have exact problem https://support.microsoft.com/en-us/kb/2732595 except 3rd , final  event id: 1000 logged , fact not running r2.  managed find corresponding event id: 1000 in "application" log, not system log , says every time except minor changes in process id , application start time.

log name:      application
source:        application error
date:          1/12/2015 10:05:00 am
event id:      1000
task category: (100)
level:         error
keywords:      classic
user:          n/a
computer:      bwserver
description:
faulting application lsass.exe, version 6.0.6002.18541, time stamp 0x4ec3ca01, faulting module msvcrt.dll, version 7.0.6002.18551, time stamp 0x4ee8d118, exception code 0xc0000005, fault offset 0x00000000000011ad, process id 0x2c4, application start time 0x01d02c84a351af0f.
event xml:
<event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <system>
    <provider name="application error" />
    <eventid qualifiers="0">1000</eventid>
    <level>2</level>
    <task>100</task>
    <keywords>0x80000000000000</keywords>
    <timecreated systemtime="2015-01-12t16:05:00.000z" />
    <eventrecordid>664946</eventrecordid>
    <channel>application</channel>
    <computer>bwserver</computer>
    <security />
  </system>
  <eventdata>
    <data>lsass.exe</data>
    <data>6.0.6002.18541</data>
    <data>4ec3ca01</data>
    <data>msvcrt.dll</data>
    <data>7.0.6002.18551</data>
    <data>4ee8d118</data>
    <data>c0000005</data>
    <data>00000000000011ad</data>
    <data>2c4</data>
    <data>01d02c84a351af0f</data>
  </eventdata>
</event>

i have searched high , low answer because has been happening since @ least january 12, 2015, have not found relevant answers server 2008.  have tried https://social.technet.microsoft.com/forums/windowsserver/en-us/f5f44b82-b0cc-4813-8199-62964f386500/lsassexe-failed-with-status-code-255-at-random-times?forum=w7itprogeneral , hasn't worked.  not running active directory, terminal services , print server.  i'm not sure one  https://social.technet.microsoft.com/forums/windowsserver/en-us/c4598f1f-5dd9-406a-bf73-98d14a2a38b3/windows-server-2008-sp2-randomly-reboots-due-to-lsassexe-failed-with-status-code-255?forum=smallbusinessserver because access our server outside our local network, local network not set "public".

i'm not sure if right place ask question, @ least it's start.  thoughts or appreciated.

hi jeremy,

thanks posting here.

i did research, issue got might encountered on existing dcs or new dcs following dcpromo promotion. cnf object existed old windows 2003 dc, which caused heap corruption , consequently resulted in lsass crash.  may know if domain controller or member server have problem?

if dc,  you might try follow below step , have check:

>>on windows server 2008  domain controllers, install mskb 2913087

>>on other domain controllers, manually remove following
cnf object active directory.

please backup system before install kb in case  any problems can restore system back.

best regards,

elaine

---

please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.

Windows Server  >  Windows Server General Forum