Windows7 LSASS crashing system
Microsoft’s Windows 7 packs a lot of power, performance and stability – for the vast majority of us. Unfortunately, one glitch left me tearing my hair out from this virtually perfect operating system. It appears that in a particular environment, Windows 7 Ultimate x64 will crash and burn all the time for no apparent reason. Luckily, David Weisz has found the problem, and given a reason and a solution to the problem.
Let me explain the scenario where this occurs. I have a Asus M50V laptop, a stellar laptop for business and gaming use. It has 4gb’s of RAM, and it’s my daily workstation for practically everything. Since I’m an IT professional, i run and operate my own Windows Domain within my enterprise, along with Exchange and all the other goodies – mainly as a showpiece of what a good network deployment can do for a customer. Hence, my laptop is joined to a Windows 2003 AD, just like all my other previous laptops and workstations and operating systems.
After installing Windows 7, it appeared that there may have been a glitch with the firmware on the motherboard and Power management, as 7/10 times, when i’d resume my laptop from a sleep state, and after logging in – i’d get the LSASS crash and the usual “Critical error, system will reboot in one minute” message, making me scramble to clsoe all my documents.
However, it appears that it is a small environmental issue with the types of Domain controllers i have, and authentication of such. Hence David Weisz’s solution works. The fix is a simple registry change so that the LSA service authenticates to Windows Servers, pretending to be of Windows Server compatibility. That change is
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters
Type: REG_DWORD
Name: DefaultEncryptionType
Data: 23 (decimal) or 0×17 (hexadecimal)
And bingo, no more crashed, and now i can resume my dance of saying Windows 7 is pretty much perfect in every way.
January 26th, 2010 at 1:29 am
Genius… had this exact same problem – thanks
May 8th, 2010 at 10:58 pm
Please could you specify the steps how to do this HKEY_LOCAL thing to fix this hideous problem?
I’m not sure I know how to do it.
I have “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters” open and I see this:
Name: (Default)
Type: REG_SZ
Data: (value not set)
What should I do here??
August 4th, 2010 at 7:40 pm
Hi, I’m having the same issue and have the same question as the above poster. Could someone please answer this?
Thank you… I’d appreciate it!
August 5th, 2010 at 12:41 pm
When you see the (Default) thingy, and nothing underneath it, you want to right click in the tempy area, and select new->string value. Type in “DefaultEncryptionType”. THen double click onthis new entry ,adn type in 0×17 (or 23 decimal).
August 6th, 2010 at 6:43 am
With the 34 Windows 7 updates pushed out yesterday (8/5), my machine started doing the exact same thing yesterday in a big way. I had had this problem in June but it went away for about 6 weeks. I have a Dell M4500, 64-bit, 8G RAM (hooked to Win 2003 domain) and I *really* hope this works – just tried it. Stay tuned.