Server May Leak Samr Handles If an Error Path Is Hit in a Client Function Call (286179)


The information in this article applies to:

  • Microsoft Windows 2000 Server SP1
  • Microsoft Windows 2000 Advanced Server SP1
  • Microsoft Windows NT Server 4.0
  • Microsoft Windows NT Server 4.0 SP1
  • Microsoft Windows NT Server 4.0 SP2
  • Microsoft Windows NT Server 4.0 SP3
  • Microsoft Windows NT Server 4.0 SP4
  • Microsoft Windows NT Server 4.0 SP5
  • Microsoft Windows NT Server 4.0 SP6
  • Microsoft Windows NT Server 4.0 SP6a
This article was previously published under Q286179

SYMPTOMS

Operations on domain controllers that require using the samr named pipe may not work if the 2,048 samr limit is reached. If this occurs, you must reboot the domain controller to resume normal operation.

CAUSE

This situation may be caused by a specific samr leak on the server that occurs only with some client programs that call an unpublished SAM function if a problem occurs in the function call. The unpublished function works if no error path is hit.

RESOLUTION

Windows 2000

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

Windows NT 4.0

A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that this article describes. Apply it only to systems that are experiencing this specific problem.

To resolve this problem, contact Microsoft Product Support Services to obtain the hotfix. For a complete list of Microsoft Product Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

The English version of this fix should have the following file attributes or later: 
   Date      Time    Version        Size     File name
   ----------------------------------------------------
   01/19/01  03:17p  4.0.1381.7086  155,920  Lsasrv.dll
   01/19/01  03:17p  4.0.1381.7089  174,352  Samsrv.dll

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 3.
Modification Type:MinorLast Reviewed:10/18/2005
Keywords:kbHotfixServer kbQFE kbbug kbfix kbSecurity kbWin2000sp3fix KB286179
©2004 Microsoft Corporation. All rights reserved.