Microsoft’s Windows 7 packs a lot of power, performance and stability – for the vast majority of us. Unfortunately, one glitch left me tearing my hair out from this virtually perfect operating system. It appears that in a particular environment, Windows 7 Ultimate x64 will crash and burn all the time for no apparent reason. Luckily, David Weisz has found the problem, and given a reason and a solution to the problem.
Let me explain the scenario where this occurs. I have a Asus M50V laptop, a stellar laptop for business and gaming use. It has 4gb’s of RAM, and it’s my daily workstation for practically everything. Since I’m an IT professional, i run and operate my own Windows Domain within my enterprise, along with Exchange and all the other goodies – mainly as a showpiece of what a good network deployment can do for a customer. Hence, my laptop is joined to a Windows 2003 AD, just like all my other previous laptops and workstations and operating systems.
After installing Windows 7, it appeared that there may have been a glitch with the firmware on the motherboard and Power management, as 7/10 times, when i’d resume my laptop from a sleep state, and after logging in – i’d get the LSASS crash and the usual “Critical error, system will reboot in one minute” message, making me scramble to clsoe all my documents.
However, it appears that it is a small environmental issue with the types of Domain controllers i have, and authentication of such. Hence David Weisz’s solution works. The fix is a simple registry change so that the LSA service authenticates to Windows Servers, pretending to be of Windows Server compatibility. That change is
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters
Type: REG_DWORD
Name: DefaultEncryptionType
Data: 23 (decimal) or 0x17 (hexadecimal)
And bingo, no more crashed, and now i can resume my dance of saying Windows 7 is pretty much perfect in every way.
Genius… had this exact same problem – thanks
Please could you specify the steps how to do this HKEY_LOCAL thing to fix this hideous problem?
I’m not sure I know how to do it.
I have “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters” open and I see this:
Name: (Default)
Type: REG_SZ
Data: (value not set)
What should I do here??
Hi, I’m having the same issue and have the same question as the above poster. Could someone please answer this?
Thank you… I’d appreciate it!
When you see the (Default) thingy, and nothing underneath it, you want to right click in the tempy area, and select new->string value. Type in “DefaultEncryptionType”. THen double click onthis new entry ,adn type in 0x17 (or 23 decimal).
With the 34 Windows 7 updates pushed out yesterday (8/5), my machine started doing the exact same thing yesterday in a big way. I had had this problem in June but it went away for about 6 weeks. I have a Dell M4500, 64-bit, 8G RAM (hooked to Win 2003 domain) and I *really* hope this works – just tried it. Stay tuned.
I REALLY hope this works. I have been working around this issue for months! Thanks!
where could i locate this
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters
i am having the same problem from the day i upgraded to windows 7 ultimate!!
please help me to solve this
thank you