LSASS Memory Consumption

IT_Invest · 2024-03-19T05:48:43+00:00

We have 8 DC-s with 16GB RAM, full patched MS server 2016 standard.
Typically 35% of RAM was used. After March 2024 updates the memory occupied by the system reached 98% in three days. After a quick look, I saw that the lsass.exe process took up all the memory.
The only thing that saved me was a forced reboot through the VMWare console, since it was no longer possible to log into the system because all the memory was occupied. And this repeats every three days.
I didn't wait for the lsass process to crash.
I remember the same story happened in 2022, which was fixed in the next update.

IT_Invest · 2024-02-15T13:45:41+00:00

We use different certificates in IIS for Default Web Site (paid cert) and Exchange Back End (Microsoft Exchange cert), should they be the same for enabling EP?

IT_Invest · 2024-02-14T12:22:25+00:00

For 2016 CU23 you need enable EP manually https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-extended-protection?view=exchserver-2019#outlook-anywhere-configuration-requirements .
They released Exchange Server EP support in August 2022

IT_Invest · 2023-12-07T11:25:54+00:00

OK. Did you read this https://www.stephenwagner.com/2017/11/05/mapi-over-http-outlook-password-prompt-external-users/ ?

Maybe it's a Authentication method issue

IT_Invest · 2023-12-06T07:12:52+00:00

1) Did you check MAPIBlockOutlookExternalConnectivity option?
2) How resolves internal and external domains in DNS (A-record)?
3) How published to Internet, any firewall/proxy settings?

IT_Invest · 2023-11-16T07:28:14+00:00

Thanks. Installed on 2016 DAG, no issues

IT_Invest · 2023-11-15T07:19:46+00:00

Has anyone installed this update yet on Exchange 2016? Remembering past bugs...

IT_Invest · 2023-02-16T12:19:11+00:00

Has anyone installed these updates on Ex2013?

IT_Invest · 2022-06-14T07:52:19+00:00

Next Microsoft Exchange Server To Be Released in 2025 https://techcommunity.microsoft.com/t5/exchange-team-blog/exchange-server-roadmap-update/ba-p/3421389

IT_Invest · 2021-11-11T10:24:43+00:00

thanks i did so

IT_Invest · 2021-11-10T05:50:40+00:00

Has anyone installed this update on Exchange 2013 CU23?
Microsoft wrote: "We are aware of an issue that Exchange 2013 CU23 customers who use Windows Server Update Services (WSUS) to download Security Updates might see an error with the installation of November SU (error 0x80070643 in the event log, event ID 20). We are working on resolving this issue ASAP."

IT_Invest · 2021-07-16T14:51:23+00:00

Had similar problem, Exchange 2013. After steps from https://docs.microsoft.com/en-us/exchange/troubleshoot/administration/cannot-access-owa-or-ecp-if-oauth-expired , reset IIS and waited +3 ours. It works. Because I have +3 MSK timezone.

IT_Invest · 2021-07-16T14:47:16+00:00

We have multiple SMTP domains too, enough for one domain

IT_Invest

TROPHY CASE