Caused the domain controller to jam / restart, Microsoft admitted that the November update caused Windows Server LSASS memory leak

CTOnews.com, Nov. 26, Microsoft acknowledges that Windows Server experienced a LSASS memory leak after installing the update released on Tuesday in the November patch, causing some domain controllers to freeze or restart.

CTOnews.com learned that the full name of LSASS is Local Security Authority Subsystem Service, and the Chinese name is to do local security authentication subsystem service. It is an internal program of Microsoft's Windows operating system and is responsible for implementing Windows system security policies. When the user logs in to the computer or server, it verifies the user's identity, manages the user's password change, and generates access characters. It will also leave a proper record in the window security log.

Once the LSASS service crashes, the logged-in user is immediately disconnected from the Windows account, followed by an error that the system needs to be rebooted, and the system automatically restarts.

Microsoft explained in Windows Health: "LSASS may take up more memory during use, causing the domain controller to become unresponsive and restart. Depending on the workload of the domain server and the time since the server was last restarted, LSASS may continue to increase its memory footprint, and the server may eventually become unresponsive or automatically restart."

A complete list of affected Windows versions includes Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2.

Microsoft is working on a solution and says it will fix the problem in a future version.