207k views
2 votes
Event ID 1015 shows an application crashing Lsass what could you pair that with to find further information possibly?

1 Answer

5 votes

Final answer:

To find further information related to Event ID 1015 indicating an LSASS application crash, one should examine Event Logs, System Logs, Error Reports, Task Scheduler logs, related application/system behaviours, and analyze crash dumps with debugging tools.

Step-by-step explanation:

To investigate the cause of an application crashing that is indicated by Event ID 1015, particularly the Local Security Authority Subsystem Service (LSASS), additional information can be gathered from various sources. To pair it with further information, one might look at examining Event Logs, System Logs, and Error Reports for more details about the crash. Utilizing the Event Viewer, check the Application Logs, System Logs, and Security Logs for any pertinent entries around the time of the crash. Moreover, Task Scheduler logs can reveal tasks that were running at the time of the crash which might have contributed to the issue. To gain more context about the crash, one can cross-reference the crashing event time with other application or system behaviours using tools like Performance Monitor. Finally, analyzing any core dumps or crash dumps using debugging tools such as WinDbg could give insight into the cause of the crash. This multi-faceted approach could provide comprehensive information to identify and resolve the issue.

User Frankie Liuzzi
by
8.6k points

No related questions found