0

We are running a Windows 2000 Server as a domain controller and file server. 2 weeks ago, the machine was running fine. Then, after a power-outage and a restart, the machine became sluggish and intermittently stopped giving out DHCP (this can be temp resolved with a restart usually). Windows Task Manager shows 100% CPU usage. The top resource hog under the processes tab in Task Manager are lsass.exe and snmp.exe, that is, unless rtvscan is running. In that case, rtvscan is running at over 127k.

Event Viewer shows no obviously-relevant issues. Additionally, searching Google for lsass CPU usage issues has not been helpful to me.

What steps can I take to troubleshoot this? I have unplugged it from the network for 15min to determine if this is an internal or external issue. The CPU usage remains at 100%.

EDIT - the power outage was long enough to drain the UPS, which resulted in an improper shutdown (because I am not running UPS software on the machine).

user9517
  • 114,104
  • 20
  • 206
  • 289
cop1152
  • 2,626
  • 3
  • 21
  • 32

1 Answers1

0

Here is what I would do:

  1. First I would run a chkdsk /f.
  2. I am not sure if Window File Protection existed for Server 2000, although my research says id did, so I would run sfc /scannow to fix the Windows files.
  3. If that does not work, I would uninstall your Symantec AV.
  4. If that does not work, I would make an image of the server to be safe, then do an install over the current install. This will preserve your settings, but should repair any corrupted files.
  5. Run Windows Update and patch.
  6. Reinstall Symantec AV

Based on the services you say are pegging the CPU, it is probably either Symantec or Windows that is the problem, and it is likely a corrupt file that got damaged during the improper shutdown. Doing this should repair your files.

KCotreau
  • 3,361
  • 3
  • 19
  • 24
  • Thanks for the reply/your time. I had a hunch that it may be Symantec. I will report back in the morning with the results. – cop1152 May 24 '11 at 20:31