Microsoft is investigating possible LSASS memory leaks (caused by Windows Server updates released on November's Patch Tuesday), which could cause some domain controllers to freeze and restart.
See also: iCloud for Windows: Shows photos of strangers!
The LSASS (Local Security Authority Subsystem Service) service is responsible for enforcing security policies on Windows systems and handles access token generation, password changes, and user logons.
If this service crashes, logged-in users will immediately lose access to their Windows accounts on the machine. They will see a system restart error followed by a system reboot.
The company points out that updates pushed out to address authentication issues on Windows domain controllers may be affected by this pre-existing issue.
See also: Microsoft Store: Now has the Windows Subsystem for Linux
The full list of affected Windows versions includes Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2.
Microsoft is aware of the problem and says it will provide more information soon.
See also: Remote Desktop: Update on freezing in Windows 11
In the meantime, try this solution.
Although there is no solution yet available to address this LSASS memory leak issue, the company is offering a temporary solution that IT admins to bypass domain controller instability.
This solution requires administrators to set the KrbtgtFullPacSignature registry key to 0 using the following command:
LSASS is a core component of Windows systems because it helps maintain the integrity of user authentication and authorization processes, as well as providing additional security features such as audit logs and malicious behavior detection.
Information source: bleepingcomputer.com
