Forum Discussion
How to diagnose lsass.exe leaking memory on Server 2022
Im seeing this too. Since Windows updates last week lsass.exe on one of my domain controllers is growing by 800mb per hour.
Jim4509 The odd thing is I have two sites, each with two DCs, and it is only one of the sites where I see this, so I need to work out what authentication activity is specific to the site where the issue manifests.
The issue follows the bulk of the authentication activity - if I reboot one the the servers, the other's rate of memory use change increases and the rebooted server's reduces, see below.
Also see https://www.reddit.com/r/WindowsServer/comments/1bhvpcn/comment/kvkn6zp/?utm_source=share&utm_medium=web2x&context=3 and https://techcommunity.microsoft.com/t5/exchange-team-blog/released-march-2024-exchange-server-security-updates/ba-p/4075348/page/3#comments
- fx2006Mar 01, 2025Copper Contributor
Hello, I am reviving the issue, we have a web server, server 2022, installed on 07/2024. After an update in 10/2024 (I guess so), lsass.exe started to constantly increase the memory, now it is up to 6-8gb weekly and I have to restart the server. The faulty March 2024 patch is not available on this server, so we cannot install the correct patch. I would be very happy if anyone could help on this issue. thanks.
- fx2006Mar 24, 2025Copper Contributor
Hello, I solved the problem and wanted to state the problem so that someone else can learn. The problem turned out to be a MailEnable IMAP service SSL problem. When I solved the problem with port 993 and SSL, lsass.exe returned to normal.