LSASS erros afer Imaging
On my last batch of computers I have beeng etting:
LSASS.exe - operation failed
The requested operation was unsuccessful.
in a pop up window. XP does not load the login screen and the mouse and keyboard do not work. I have to hold down the power button to get the system to turn off.
This has been on Dell Optiplex 755 and 760s. Out of 6 computers only one of them would take the image. I cannot see what is different between the computer in question. I have tried multiple windows XP images and even makin an entirly new image with different sysprep files to try and resolve this issue. I can push my images to other computers successfuly.
Any suggestions on how to troubleshoot this?
hmmm, i will give a try to your proposition as soon as possible. Thanks for the trick christopher
[quote=“Daëavelwyn, post: 11401, member: 3269”]Hi,
I’ve exactly the same issue, have you found any fix or workaround for this ?[/quote]
Run a scan on the XP image and make sure it’s not infected with the SASSIR worm. As in unpack the ISO on a clean disconnected system and scan everything. it does happen, USB keys, old media, torrents. Lots of hidden holes in a process were it can creep into an image.
That process BTW is the Security service that manages your keys and other fun stuff. It’s a big time target for virus/worm annoyances. Latest I’ve heard is unauthorized Microsoft/Linux ISO’s in torrents preinfected with bitcoin agents and other botnet goodness.
arf, i’ve done the same as you (new kernel 3.8.6) but still have the lsass.exe error
Sorry, I thought I had posted the solution to this.
What i had to do was update the kernel that FOG uses and then delete the affected workstations from the system.
I used kernel [FONT=sans-serif][COLOR=#000000]184.108.40.206 KS since it was on a Dell Optiplex 755.[/COLOR][/FONT]
[FONT=sans-serif][COLOR=#000000]I can’t find the instructions on how to replace the kernel right now but you need to put it in [/COLOR][/FONT][FONT=monospace][COLOR=#000000]/tftpboot/fog/kernel/ and name it bzImage.[/COLOR][/FONT]
[FONT=monospace][COLOR=#000000]Depending on your issue just deleting the system from FOG and re-registering it might be a solution.[/COLOR][/FONT]
I’ve exactly the same issue, have you found any fix or workaround for this ?