Problems with lsass patch?

Discussion in 'Computer Security' started by nugget, Jan 29, 2008.

  1. nugget
    Honorary Member

    nugget Junior toady

    7,796
    71
    224
    Just wondering if anyone else was having problems in their network in the last 2-3 weeks?

    At our office we actually have 2 companys sharing the same network and the internet connection. 3 weeks ago we split them up to provide individual connections for both. This also happened at the same time MS released their 2 patches for tcp/ip and lsass. The problem is that since this day the network access has been "screwed up" somehow. When users navigate to the file server and try to open a document or right click to see the properties it takes 30 seconds to 3 minutes to do this.

    BTW our file server rus SuSE Linux. I've rebooted the linux server, the DC and all the pc's. I've also checked the hardware and all the physical connections and the only conclusion I can come up with at the moment is that this patch has caused the problem but introducing authentication problems (and we all know MS doesn't play well with linux).

    So, the question remains, are other people experiencing anything similar or is it just me?
     
    Certifications: A+ | Network+ | Security+ | MCP (270,271,272,290,620) | MCDST | MCTS:Vista
    WIP: MCSA, 70-622,680,685
  2. nugget
    Honorary Member

    nugget Junior toady

    7,796
    71
    224
    On doing more research (and it seems that there's bugger all info on google) it just might be the ms08-001 KB941644 patch that might be the problem. I've found only one reference so far that mentions some sort of problems such as network slowdown.
     
    Certifications: A+ | Network+ | Security+ | MCP (270,271,272,290,620) | MCDST | MCTS:Vista
    WIP: MCSA, 70-622,680,685
  3. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    Have you tried uninstalling the patch and tested accessing the shares?

    Does sound like an authentication issue or something is cached on the PCs from the previous network config.
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  4. nugget
    Honorary Member

    nugget Junior toady

    7,796
    71
    224
    No, not yet Sparky. The problem really crept up on us slowly. It started with just 1 pc and slowly spread (like a virus LOL).

    The funny thing is that some pc's are affected and some aren't. And it happens at different speeds on different pc's too.
     
    Certifications: A+ | Network+ | Security+ | MCP (270,271,272,290,620) | MCDST | MCTS:Vista
    WIP: MCSA, 70-622,680,685
  5. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    Nightmare! :ohmy

    If the problem occurs on one PC it might be worth trying the share on another PC at exactly the same time just to see if there is any difference in speed. 8)
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  6. nugget
    Honorary Member

    nugget Junior toady

    7,796
    71
    224
    Thanks Sparky. We did try measuring the speed from these pc's and the network in general but there seems to be no difference. The problem seems to be getting the connection in the first place, like it's checking the permissions for everything. Once you have the connection and the permissions have been 'authenticated' then any data transfer goes at the usual speed.

    It's all very strange.:cry:
     
    Certifications: A+ | Network+ | Security+ | MCP (270,271,272,290,620) | MCDST | MCTS:Vista
    WIP: MCSA, 70-622,680,685

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.