Share via

High handle count for the “lsass.exe” process in windows 2019

Srinivasan Ramdass 91 Reputation points
2022-04-05T17:57:26.193+00:00

The lsass.exe process shows high handle for semaphore. The server role is SCCM.
I wanted to check why the handle is high and how to reduce the count.

190228-handl.jpg

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,248 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Stéphane Graziano 0 Reputation points
    2024-11-10T16:21:35.8166667+00:00

    It seems the semaphore count is directly related to the cache for SCHANNEL. There's a task running every 5 minutes which remove unusued cache/zombies connections.

    If you want to limit the number of max connections for servers (20000 per default) you can change the key MaximumCacheSize in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\

    and restart the computer to apply. But, you will have to wait the timeout of 5 minutes to drop cache above your MaxCacheSize.

    Also check the values ServerCacheTime and ClientCacheTime, a value of 0 turns off TLS session caching on the server & client.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.