Windows 10: LSASS Login Failure

Hello,I could see multiple failed logins from a disabled admin account for the process lsass.exe windows server that is throwing a ton of Login Failure errors. I have dug into the errors and I see that something on the server itself is trying to authenticate with the server itself for a user account that is part of the domain. I know that something is calling lsass.exe but I dont have an idea how to find out what the actual program is so I can correct it.

:)

 

Can't login to new computer w/Windows 10

Hi,

Thank you for your reply.

• 
  Are you able to login to Microsoft Account on Web?
  
• 
  Have you installed any language pack?
  

I suggest you to follow the steps below and check if it helps.

Step 1: I suggest you to select the appropriate language in login screen at the bottom right corner and check if it helps.

Steps 2: Use On-screen keyboard in the login screen to login and check if it helps.

Hope this helps. If the issue remains unresolved, please get back to us and we would be happy to help.

 

Sasser worm, lsass

It actually detected a lot, but i believe it was a trojan who was attacking the "lsass" (it was actually from windows, the lsass)

This trojan was located in "C:/Windows/Temp/svchost.exe", i believe it was this.

Avg also detected a Adplugin, but i dont believe it was that.

 

What actually the process LSASS does and why it actually consumes a large amount of bandwidth quota?

What actually the process LSASS does and why it actually consumes a large amount of bandwidth quota? This machine runs on Windows 2016. What are the troubleshooting steps to minimize the bandwidth consumption.