Recent content by InformB

Looking at the procmon logs for the 2019 server more carefully I noticed that it's not that LSASS is taking a long time to parse the 50K users from SAM, it appears to be stuck in a loop!! LSASS keep reading all the SAM entries over and over again in a loop for 12 hours! Here's an excerpt from...

So I'm looking the registry of 2021R2 vs 2019 and I see that in 2012R2 there is no entries for any of the users under Computer\HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Accoun t\Users, however in 2019 there's an entry for each user under Computer\HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Accoun t\Users and...

I found the culprit, it's LSASS (using ProcMon), it's iterating through every user account in the registry HKLM\SAM\Domains\Account\Users and for every user it's making 4 calls to the registry So the question is how do I stop LSASS from doing this? For some reason 2012R2 isn't doing it but...

I'm almost convinced it's a SAM issue. When I look at the server system event logs (without any users), the Directory-Services-SAM there are 3 SAM event logs that complete within about 1 second. On the server with the 50k users, those same 3 events are 12 hours apart, the first one right after...

Any ideas on what I can do? Can I move the users to LDAP on the same machine and then use that for integrated Windows authentication via IIS? That's pretty much the only requirement (authenticate via IIS and be able to create the user via a batch/command prompt command).

Thanks, I tried this and it didn't work :( but it's given me a few leads to chase up by looking at differences between the registry settings between the 2012R2 and 2019 servers. I'll also try the other link you sent me, this is very helpful - please send me any other ideas you may think of. I...

Thanks, yes I've done that. I've tried testing with increasing numbers, under a 100 it's fine (scripting or by hand). When I run it up to about 3000 then it really slows down, takes 15 minutes to start. So as the numbers keep increasing it's slowing down more, but I don't see that with my older...

I have one more insight, I created a new 2019 server, added the 50k new account but then just left the machine without rebooting. I logged out of the RDP session, wait for a few hours and tried to RDP back in and now it's hung on "Please wait for Local Session Manager" and it just times out, the...

@Mike thanks for the suggestion. Just for kicks, I tried a new AWS 2019 server with 4 and 8GB RAM and also more processors, same result. The scripts runs, add 40K users and everything is working fine up, it's responsive and working after the scripts are done (takes about 30 min to complete)...

I would highly like to avoid a chatgpt response as it's absolutely useless. My first comment was it does NOT boot, which means I can't check logs, I can't get to the login screen, I've checked the bootlog and the last thing it shows was a successful loading of a driver. I can't even boot into...

I've been using Windows server 2012R2 Standard for almost a decade now. I have apps running on the server which have created about 50,000 local users. These are local users created using WMIC scripts and eq. API's. The purpose is to allow for easy integration with IIS authentication. The app...