"LSASS.EXE terminated unexpectedly with status code -1073741571" error message after you upgrade a Windows 2000 domain controller to Windows Server 2003 (838501)



The information in this article applies to:

  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Web Edition

Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

When you upgrade a Microsoft Windows 2000 domain controller to Microsoft Windows Server 2003, and then you restart the domain controller, you may receive the following error message:
The system process LSASS.EXE terminated unexpectedly with status code -1073741571. The system will now shut down and restart.

CAUSE

This problem may occur if the registry data type for the SearchList entry is set to a Dword value type (REG_DWORD) instead of to a String value type (REG_SZ) in the registry.

RESOLUTION

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk. To resolve this problem, follow these steps:
  1. Start your computer in Safe Mode.
  2. Click Start, click Run, type regedit in the Open box, and then click OK.
  3. Locate and expand the following registry subkey:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

  4. Change the data type from REG_DWORD to REG_SZ. To do this, follow these steps:
    1. In the right pane, right-click SearchList, and then click Delete.
    2. Click Yes to confirm that you want to delete this entry.
    3. On the Edit menu, point to New, and then click String Value.
    4. Type SearchList, and then click OK.
  5. Quit Registry Editor.
  6. Restart your computer.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem will be corrected in Windows Server 2003 Service Pack 1.

REFERENCES

For additional information about Lsass.exe error messages, click the following article numbers to view the articles in the Microsoft Knowledge Base:

321024 "LSASS.EXE Terminated Unexpectedly with Status Code -1073741571" error message when you install BearShare

300038 Lsass.exe quits unexpectedly with status code -1073741819

255897 Lsass.exe may quit on Windows 2000 domain controller with reverse order search


Modification Type:MinorLast Reviewed:7/20/2004
Keywords:kbprb KB838501 kbAudITPRO kbAudEndUser