JSI Tip 6321. Lsass.exe on your PDC emulator uses 100 percent of the CPU, returns to normal, and spikes again in 1 hour?

The subject behavior cannot be detected by using NTDS diagnostic logging, nor is it network related.

This behavior will occur if the Administrators group contains a large number of users, either intentionally or through group nesting.

To resolve this behavior, limit the number of accounts in the Administrators group on your PDC emulator.

NOTE: See 232199 - Description and Update of the Active Directory AdminSDHolder Object.

NOTE: See 251343 - Manually Initializing the SD Propagator Thread to Evaluate Inherited Permissions for Objects in Active Directory.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.