Forum Discussion
Windows Server 2025 DC — LSASS handle leak identified via WinDbg — authz!AuthzpDeQueueThreadWorker
Hello All!! Im having a problem, LSASS crashes on a Windows Server 2025 Domain Controller, I identified what appears to be the root cause using WinDbg memory dump analysis. Sharing this hoping someon...
Hi, if LSASS is leaking handles on a domain controller, I would treat it as a high-priority support case, especially on Server 2025.
A few practical steps:
1. Confirm the server has the latest cumulative update.
2. Check whether the leak correlates with a specific authentication workload, agent, or security product.
3. Compare with another DC under similar load.
4. Capture performance counters for LSASS handles, private bytes, and thread count over time.
5. Open a Microsoft support case with the dump analysis and timeline.
WinDbg evidence is very useful here, but I would avoid making this a one-server troubleshooting exercise. DC stability is too important.