Forum Discussion
Paul_Brock
Nov 15, 2018Brass Contributor
ATA Client on a Server 2019 Domain Controller
We have noticed that when installing the ATA client on a Windows Server 2019 domain controller the Lsass.exe service crashes every 10-25 minutes and causes the server to reboot. We also noticed that ...
stokesy
Nov 27, 2018Copper Contributor
Same in our '19 environment, AATP sensor causes lsaas crashing and reboot on 2019 DC's. No 3rd party software installed.
- EliOfekNov 27, 2018
Microsoft
Please open a support case , and mentioned to the assigned engineer to add me to the thread as well.
We have some progress with the initial case, I want to make sure you are failing on the same thing.
Question: Do you have Windows hello for business installed there?
- DougHowellJan 16, 2019Copper Contributor
We have Windows Hello for Business deployed on our domain. The upgrade to 2019 broke that as well: WhfB works when off the network but not at the sites that have the upgraded DCs. Is that related somehow? We have an incident opened with MS support on this but have not got anywhere with it yet.
- Paul_BrockJan 16, 2019Brass Contributor
Doug,
Windows Hello and ATA are both broken on 2019 DC's. I have gotten word that a fix is coming in Feb and I was able to open a premier ticket and get a private hotfix to hold us over until the public fix comes out.
- stokesyNov 27, 2018Copper Contributor
Thanks Eli, have opened a support case via the Azure portal [seems to be some issue on the AATA portal with opening a case]
- stokesyNov 27, 2018Copper Contributor
Forum has limitations on PM, so putting details directly here:
GMT +1 for me [Malta, EU]
Details of case from Azure Support Portal:
Case Name: 2019 DC's reboot after Sensor causes lsass.exe crash
Case ID: 118112725001888
Created: Tue, 27 Nov 2018 13:13:53
- stokesyNov 27, 2018Copper Contributor
No, do not have Windows Hello for Business configured yet.
- EliOfekNov 27, 2018
Microsoft
We need a support case with this one to have a secured workspace where we can exchange instructions and dump files to check exactly what happened.