Hey @dlepper7485 There can be any number of reasons for lsass.exe to
grow in size on any Windows OS Version. If you are saying that this
memory grow has started after a security update, then that issue would
have to be troubleshoot for that security update as it would be unique
to that security upda...
I've been looking for a related post for this, but has anyone
encountered this same issue on client machines. Doesn't seem to be
massively widespread for us, but have had it on the latest versions of
Win10 and Win11. LSASS memory usage grows in a linear fashion along with
uptime, until it crashes, r...
@RobGreene we need to update Kerb template to support windows hello for
business and thought we could kill all our problems with one cert. As
for ldap we have thousands of Linux machines and apps which we point to
various aliases for historical/political and other reasons and we just
need a guarante...
@David Bargna This is where you have to be a little creative. What you
put there would more than likely work. Other than our recommendation
here in the blog, is there another reason why you are wanting to use the
Kerberos Authentication template? Do you need to support KDC Strict
Validation Checks f...
@RobGreene thanks for the comprehensive reply. How do you normally
handle certs for LDAPS then when you need to use an alias such as
ldap.foo.org? Kerb auth cert has client/server auth, domain controller
cert also client server. Do we copy the Kerb auth template and remove
server auth key usage, the...
Latest Comments