Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Administration (2000)
 sql server lsass cpu

Author  Topic 

plumb
Starting Member

9 Posts

Posted - 2008-05-30 : 06:28:12
Hi, I have miscrosoft sql server 2000 on windows server 2003 for small business.
It's linked to a web server which register more than 5000 unique visitors every hours.
The connection to sql server is more than 20 contemporary.
I would like to know if is it normal that lsass.exe keep from 1% to 50% of the cpu. I think to remember that it'snt so before.
Could you help me?

sodeep
Master Smack Fu Yak Hacker

7174 Posts

Posted - 2008-05-30 : 09:51:27

check this out:
http://support.microsoft.com/kb/843557
Go to Top of Page

plumb
Starting Member

9 Posts

Posted - 2008-05-31 : 17:39:31
In this article he said that lsass take 50 - 100 % of the processor resources.
In my case it'snt so hexose.
Is there someone who can confirm that in this configuration (Win Server 2003, sql server 2000 with 20 - 30 connections contemporary) lsass take from 1% to 50% of cpu (celeron 2,66 GHz).
I listen from some other DBA that this process is next to 1%-2% of cpu consuption. But maybe they have less connections to autenticate.
Could it be depend on security settings of Sql Server?
Now I have:
Authentication --> Sql Server and Windows
Audit level --> none
Start and run sql server in the following account --> System account
Go to Top of Page

plumb
Starting Member

9 Posts

Posted - 2008-06-02 : 13:55:17
Could someone post the cpu range usage of lsass with other data as conteporary connections, system features... So that I can understand if my parametres is right.
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2008-06-02 : 20:28:50
Depends on how many apps on the server need go through security policy.
Go to Top of Page

plumb
Starting Member

9 Posts

Posted - 2008-06-03 : 04:44:41
In my case the only application is sql server.
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2008-06-03 : 15:30:51
It takes almost nothing on most of my sql servers.
Go to Top of Page

plumb
Starting Member

9 Posts

Posted - 2008-06-03 : 16:41:50
How many conteporary connections do you have?
executing sp_who you can see it.
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2008-06-03 : 16:46:59
Varies, some servers have thousands of connections.
Go to Top of Page

plumb
Starting Member

9 Posts

Posted - 2008-06-03 : 17:33:39
Really????
Could you help me to identify where is the problem? How can I understand where lsass process goes wrong?
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2008-06-03 : 18:25:56
This is os issue, it'll cause high cpu usage when server has problem to talk to domain controller as I know.
Go to Top of Page

plumb
Starting Member

9 Posts

Posted - 2008-06-04 : 08:26:26
Is there a log file where I can find these problems?
Or is there a tool that could help me to solve this problem?
Go to Top of Page

plumb
Starting Member

9 Posts

Posted - 2008-06-04 : 10:04:53
Logging with administrator account in my windows server 2003 i cannot see in computer management under System tools, "Local user and Groups".
Is it strange?
It could be possible that this thing is related with problem with windows authentication of lsass ?
Go to Top of Page

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2008-06-04 : 22:54:21
Check windows system event log to find out if have any domain related errors, maybe time to reboot your server. By the way, did you apply any win2k3 sp?
Go to Top of Page

tripodal
Constraint Violating Yak Guru

259 Posts

Posted - 2008-06-06 : 17:08:37
Lsass is used to assign permissions to files when people log int.
If for example you are using a Active Directory Login as the credentials for your website, each page, and each image will create a seperate login.

Also,
If you are using an active directory username in order to access sql, each query will use lsass in order to find its permissions.

It is possible with 5000 users per hour for that to be normal CPU usage, Depending on your your site is coded.

I would suggest looking at your IIS logs and see how many hits per second your server is processing.
There is an excellent log parsing utility from microsoft,

http://www.microsoft.com/downloads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=en

This can be of extreme help on a busy site while you try to nail down errors.
Go to Top of Page

plumb
Starting Member

9 Posts

Posted - 2008-06-11 : 06:26:06
thank you everybody. I'm going to check this
Go to Top of Page
   

- Advertisement -