I used to have a virtual switch that was bound to my wireless adapter. It was at one point removed, but now I want to re-create it.

But, now Hyper-V throws this error any time I try to bind a virtual switch to my wireless adapter:

Error applying Virtual Switch Properties changes

Failed while adding virtual Ethernet switch connections.

Ethernet port '{Guid}' bind failed: The system cannot find the file specified. (0x80070002).

I've tried uninstalling/re-installing my network adapter. My efforts have had no effect.

Hi all,

I have been struggling to get Shared VHDx to work properly for the last week or so.  I have a two 2012 R2 file server VMs clustered sitting on a Windows Server 2012 R2 Hyper-V cluster, I would like to use Shared VHDx for the Quorum Disk Witness and for the File server cluster storage.

Initially when I first create, share and add the VHDx to the two file servers it works without an issue, the file server cluster role will live migrate and storage stays accessible.  However after a period of time e.g. overnight if either of the servers are shutdown/restarted they will not restart.  The error I receive is:

'FS1B' failed to add device 'Virtual Hard Disk'.

Failed to open attachment
'Path to disk\Quorum.vhdx'. Error: 'The request is not supported'.

'FS1B': Cannot get information for attachment 'Path to disk\Quorum.vhdx'.

Failed to open attachment 'Path to disk\Quorum.vhdx'. Error: 'The request is not supported.'.

I have searched around online and came across a couple of people with a similar issue, one fixed it with adjusting his Network Binding (this did not help me).  If I turn off the sharing on the VHDx the server it is attached to will boot fine.

I have also made sure the networking and storage access to the Hyper-V hosts are identical and that all four servers are up to date patching wise.

I don't think I'm missing anything but it really doesn't want to work and driving me a little nuts.

Thanks!

Hi.

I just really want to double check that what I am about to do wont break everything.

I have a 2 node Hyper-V 2008R2 cluster, with 15 VM's).

I have purchased a 3rd server where I will install Server 2012R2 and Hyper-v.
the idea build 1 server and connect up to the Shared storage. Shut down all VM's

Import them into the New Hyper-V server

Break the old cluster, rebuild server to 2012R2 and create highly available cluster. power on the VM's.

rebuild final server to 2012R2 and then have a 3 node cluster.

Does this seem correct in terms of order or should I switch around any steps

thanks 

Hello-

I'm trying to do a shared nothing live migration between two Windows Server 2012 machines.  Unfortunately, I'm met with an error message of "Migration did not succeed. Not enough disk space at xxxx." when I attempt it.  The virtual machine is about 245 GB total and the destination has 1.54 TB free.

From what I can tell, the free space check is checking to see if there is enough free space on the target server's C partition instead of the D partition.  The D partition is the target for both the virtual machine and its VHDs.

The problem sounded kind of like what is described by KB2844296 (https://support.microsoft.com/kb/2844296), so I tried to download and install the hot fix.  The hot fix installer states "The update is not applicable to your computer."  I appear to be out of options.

I'm hoping someone else has run into this issue and has a workaround.  I don't see that there is much more that I can do short of shutting the virtual machine down, exporting it, and moving it manually.  I'd much rather use live migration.

In Windows 2012, a provider "Microsoft CSV Shadow Copy provider" is introduced and the backup requestor must use this provider for a CSV volume in order to take application VSS snapshot to a Hyper-V VM.

My question is, in an environment where a hardware provider is available, how can we take application hardware snapshot? My confusion is, in order to take hardware snapshot, we need to use hardware provider for the CSV volume, however, in order to take application consistent snapshot, we need to use Microsoft CSV Shadow Copy provider. How can I use both for one same CSV volume?

Thanks

Hello.

I created a Windows 7 VM in Windows Server 2012 R2 Standard Hyper-V, all the installation process done successfully, but after installation, it failed to boot and shows a black screen, and didn't boot after it.

Following is the event log occurs.

'Win-7_QA-Testing' was faulted because the guest executed an intercepting instruction not supported by Hyper-V instruction emulation. If the problem persists, contact Product Support. (Virtual machine ID 5B827557-7009-4D83-AA7C-26A45651EC3A)

Any help will be appreciated.

Thanks

Hi ,

I Setup Cluster hyper-v server 2012 R2  ,

I find this event log  if i move storage of the replica VM to new location.

storage is copied to new location  and keep the files on the old location

Log Name:      Microsoft-Windows-Hyper-V-VMMS-Admin
Source:        Microsoft-Windows-Hyper-V-VMMS
Date:          2/8/2015 3:25:00 PM
Event ID:      20878
Task Category: None
Level:         Warning
Keywords:      
User:          NT VIRTUAL MACHINE\158EEFA9-54EA-4BAF-B291-3471E7401F30
Computer:      XXXX.XXXXX.XXX
Description:
Failed to delete file 'C:\ClusterStorage\Volume1\Replica Virtual Machines\Hyper-V Replica\Virtual hard disks\158EEFA9-54EA-4BAF-B291-3471E7401F30\DD3389AF-EE10-48BD-B30F-8AA2ED53E3D8.vhdx': 'General access denied error'('0x80070005').
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Hyper-V-VMMS" Guid="{6066F867-7CA1-4418-85FD-36E3F9C0600C}" />
    <EventID>20878</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-08T13:25:00.457252300Z" />
    <EventRecordID>108313</EventRecordID>
    <Correlation />
    <Execution ProcessID="2432" ThreadID="15904" />
    <Channel>Microsoft-Windows-Hyper-V-VMMS-Admin</Channel>
    <Computer>xxxxx.xxxxx.xxx</Computer>
    <Security UserID="S-1-5-83-1-361689001-1269781738-1899270578-807354599" />
  </System>
  <UserData>
    <VmlEventLog xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://www.microsoft.com/Windows/Virtualization/Events">
      <Parameter0>C:\ClusterStorage\Volume1\Replica Virtual Machines\Hyper-V Replica\Virtual hard disks\158EEFA9-54EA-4BAF-B291-3471E7401F30\DD3389AF-EE10-48BD-B30F-8AA2ED53E3D8.vhdx</Parameter0>
      <Parameter1>%%2147942405</Parameter1>
      <Parameter2>0x80070005</Parameter2>
    </VmlEventLog>
  </UserData>
</Event>

Ramy

Hi all,

Our customer need us to install Windows Server 2012 R2 Datacenter on 6 servers using Windows server 2012 R2evaluation media then install Hyper-V cluster on these servers. After that, we will install 7 virtual machines with Windows Server 2012 R2 Standard as an operating system on that Hyper-V cluster. My question is:Will VMs get automatically activated once the Hyper-V hosts are converted from evaluation to Datacenter with the licensed keys that the customer will install after they purchasethem?

Hi all,

a 2k12 R2 host with Hyper-V role, build on ASUS P9D WS, i5-4440 with iRST soft raid won't boot a Gen 2 2k12 R2 VM guest ("Boot Failed. EFI SCSI Device").
Even Gen 1 don't boot.

The guest was created by Disk2vhd v2.01 as vhdx on the same Hardware. After this the partitioning and formating was build up and created new by the default setup and installation of Server 2012 R2 as the new host with just the Hyper-V role.

So I have 2 questions:

How to get the guest vm boot?

Is there a licensing problem? As I understood a host with just the Hyper-V role is free or included on a Server 2012 R2 license.

Thanks for your help!

Hello. I have a HP DL380 G5 server & a have a problem. OS installation proceeds normally, the installation takes the role well, but the virtual machines is running weird. When using a network inside a virtual machine (for example, copy of iso file from the network to virtual machine) CPU inside of the VM at 100%. 50-60% is process System interrupts. All terribly slow, up until the copy end.Ido not know what to do.Maybesomebody facedwithsomething similar? Thnx!

HP DL380 G5:
Intel Xeon 5130 2.0 GHz * 2
Ram 32 Gb
Raid Smart Array P400i 512mb + battery
Network Broadcom BCM5708C 1 Gb * 2
Host OS - raid 1
VMs - raid 10

BIOS P56
HP Service Pack for ProLiant 2014.06
Windows Server 2012 R2 + all updates + all newest drivers

Hello everybody

We sold an HyperV Cluster to one of our customers it was a promotion from HP. The customer got a 2 node cluster with a HP  MSA on this we installed Windows Server 2008R2 and installed the Hyper V role.

On this there are several virtual machines running now our boss was able to persuade the customers that he needs a support contract or better a maintain contract.

We what do we need to main when this thing runs? :-) The system is not connected to the internet and it's not allowed to connect to it because it resides in a bank.

So the questions:

1) What to check (logs, paritions, CPU, RAM, Role?)

2) What to update? Windows Only other componets=

3) How to find out which updates are missing when i can't use the internet?

4) How to get the updates and how to bring them to the system and install?

5) Way to backup situation before install? Disaster Recovery? 

I know this sounds stupid but i really don't know how to handle this.

Best regards

Michael

So I've read what feels like an endless amount of text on the wonderful things that Storage Spaces and Hyper-V in 2012 R2 can offer, but I'm still asking myself the same question, namely - for a simple Hyper-V cluster with 2 nodes accessing shared storage on a JBOD, provisioned through Storage Spaces, do I point the HV nodes to the file server with either SMB shares, or by means of an iSCSI drive?

The simplicity of an SMB 3.0 share seems appealing, not because it appears less complex in terms of the setup, but I'm scratching my head over the CSV side of things. For the HV nodes connecting through to my file server via an iSCSI disk, the concept of later bringing those disks into the cluster as CSVs is logical. Is this possible when using an SMB share as the home of my VHDX files? Am I correct in thinking this can only be done when throwing SCVMM into the mix also?

Many thanks.

We are getting ready to migrate from server core 2008 r2 hyper-v with failover cluster volumes on an iscsi san to server core 2012 r2 hyper-v with failover cluster volumes on a new iscsi san.

I've been searching for a "best practices" article for this but have been coming up short.  The information I have found either pertains to migrating from 2008 r2 to 2012 r2 with failover cluster volumes on the same hardware, or migrating to different hardware without failover cluster volumes.

If there is anyone out there that has completed a similar migration, it would be great to hear any feedback you may have on your experiences.

Currently, my approach is as follows:
1. Configure new hyper-v with failover cluster volumes on new SAN with new 2012 r2 hostnodes and 2012 r2 management server
2. Turn off the virtual machines on old 2008 r2 hyper-v hostnodes
3. Stop the VMMS service on the 2008 r2 hostnodes
4. copy the virtual machine files and folders over to the new failover cluster volumes
5. Import vm's into server 2012 r2 hyper-v.

Any feedback on the opertain I have in mind would be helpful.

Thank you,

Rob

Hey 

After i start the Gen 2 VM it gives me the above message i didn't get any message topress any to start the setup or like that. So i like to know how to solve this

Thanks  

Hello we have a new Hyper-V 2012R2 3-node cluster.  We are currently running our 02 nodes of Lync servers (DI, ED, etc...) and would like to know if MSFT has officially sanctioned live migration of Lync Servers.  In 2008R2 it was explicitly defined not to migrate certain workloads such as Exchange, SQL and Lync servers.  What is status on 12R2 and if approved is there an official document stating such as I haven't found.

Thanks,

Hi All,

I'm having a frustrating problem with Hyper-V which is basically making it unusable on my laptop. I can't get the wifi adapter to work reliably for the guest, when it's also shared by the host.

What I've done is create a external adapter connected to my wifi card (Intel Centrino Wireless-N 1030), and checked "Allow management operating system to share this network adapter".

The guest can connect to this, but the connection constantly drops in and out. By constant I mean it could be dropping and reconnecting a couple of times a second. This only happens when I share the adapter with the host. If I turn that off, then the guest gets a reliable connection.

This only happens with the wifi. If I'm connected to the wired adapter (Realtek PCIe GBE Family Controller), then I can share the adapter between the guest and host just fine.

I'm assuming this means there's some kind of conflict between the host and the guest for the wifi adapter. I'm guessing that whenever the host transmits or receives anything that this then must be taking priority and the guest VM gets kicked off momentarily, only to try to reconnect again straight away.

I'm wondering if this is a fundamental hardware incompatibility with my wifi card, or if there might be some setting I can change, or protocol I can enable to get it to work properly?

- Relevant Information -

Host

OS: Windows 8.1 Pro 64bit
Laptop: Dell XPS 17 - L702X, 8GB Ram, i7-2720 QM

Guest

OS: Windows 8.1 Pro 64bit
VM Generation: 2

Any help would be greatly appreciated.

Thanks,

Eugene

Hi,

I am strugling with a performance issues.

We have a .net based application with 4 app server handling request of 1000 ritch clients. They handle batch jobs in the night. 

when we look at overall performance, the VM's are very fast

BUT transactions are 25% slower then the OLD hardware.

does anyone can give me a clue on how to troubleshoot this?

thx

Lieven

Hi,

I am looking for some advice on what the best way to configure my disk system is for performance when using Hyper-V. Currently I have two midline 7.2k SATA disks used for the hyper-V OS in RAID 1, and then 14 x 10k 600GB SAS enterprise disks in RAID 10. The RAID 10 is where all my VM’s exist on, but not directly on the physical disk, I use a product called StarWind which consumes almost all of the physical disk space, this is a virtual SAN and I use this for my CSV in the cluster, the VM’s all exist on this starwind disk, there is a tiny amount of overhead but I don’t think that’s really where my problem lies. We have 12 Virtual machines, so there is 1 spindle per VM, however it’s in RAID 10 so does this actually mean I have 7 spindles for 12 VMs?

The entire system almost grinds to a halt whenever I am copying new VM’s onto this host. I can’t use any other RAID type except for RAID 1 or 10. I know RAID 0 would give me better performance but we are not willing to take the risk. Now, it is my understanding that RAID 1 and 10 are essentially the same with the same performance and capacity, because of this I chose RAID 10 so I can take advantage of the combined capacity, but I am wondering if this is the best configuration.

I can think of a few other variations:

• A single RAID 10 with one large partition but multiple CSV’s instead of one large one
• A single RAID 10 with multiple partitions and a CSV on each partition
• Multiple RAID 1, each having a single partition and a single CSV

Reading this site, there are a few pointers I have taken away regarding disk performance, a couple below I have questions about.

http://www.altaro.com/hyper-v/23-best-practices-improve-hyper-v-vm-performance/

Point 6 says “Use separate volumes for each VM. Since the administrative tasks of a virtual machine are controlled by its own process (VMWP.exe), keeping several virtual machines on a single volume will cause more Disk I/O operations from each worker process. Hence, it is recommended to use separate volumes for storing virtual machine files (VHD, VHDx, checkpoints, and XML).”

Does this mean the arrangement I propose in my second point above – multiple partitions and a CSV on each partition? The term “Volume” seems to be a bit ambiguous depending on where you read

I believe point 14 to be incorrect though. “De-fragment Hyper-V Server regularly or before creating a virtual hard disk. It is advisable to defrag Hyper-V Server disks where the VHD and virtual machine configuration files are stored regularly or before creating a large virtual hard disk file.”

It is my understanding that defrag only tends to work well if there are many files on the disk, on the physical disk in my case there is one massive starwind file so I don’t think defrag on the physical will do anything, defrag in the starwind disk might help but it is mostly large VHDX files – will defrag really make much difference?

Additionally, I don’t have any generation 2 VM’s and there’s nothing I can do about this right now, all data disks use SCSI channels on the VMs, all VHDX are fixed size.

Also, a slight side question but kind of related – I have both an exchange server and SQL server running as VM’s (the log files already exist on separate VHDs, but on the same physical RAID 10 disk), does my physical disks used for log files need to match those used for the DB, or can they be slower lower class disks… for example, if I place a 7.2K disk in with a RAID made up of 10K disks, it is my understanding that the entire RAID will lower its performance of the slowest member – is this true with log files and databases, if the log files are on slow disks will the database also go slower to match the pace of log files being written?

many thanks

Steve

Hello All

We have a server 2008 R2 HyperV server and during the last few months it started to reboot randomly.

Initially we thought its related to the issue fixed by the following hotfix so we applied it but even with the hotfix it still keeps rebooting.

http://support.microsoft.com/kb/2732595

Unlike what's mentioned in the hotfix , the faulting module is not "ntdll.dll" but "msvcrt.dll".Also came up with the following indication the reboots could be related to KB2871997 but that update is not installed on this system.                                                

Following are the events from system log.

Log Name:      System
Source:        LsaSrv
Date:          2/9/2015 11:58:12 PM
Event ID:      5000
Task Category: None
Level:         Error
Keywords:     
User:          SYSTEM
Computer:      HV2008-Host
Description:
The security package Kerberos generated an exception. The exception information is the data.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="LsaSrv" Guid="{199FE037-2B82-40A9-82AC-E1D46C792B99}" />
    <EventID>5000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-10T04:58:12.415529200Z" />
    <EventRecordID>8091130</EventRecordID>
    <Correlation />
    <Execution ProcessID="736" ThreadID="5888" />
    <Channel>System</Channel>
    <Computer>HV2008-Host</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="Package">Kerberos</Data>
    <Binary>050000C00000000000000000000000001111F6FEFE070000020000000000000000000000000000008EEB1802000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

Log Name:      System
Source:        USER32
Date:          2/9/2015 11:58:24 PM
Event ID:      1074
Task Category: None
Level:         Information
Keywords:      Classic
User:          SYSTEM
Computer:      HV2008-Host
Description:
The process wininit.exe has initiated the restart of computer HV2008-HOST on behalf of user  for the following reason: No title for this reason could be found
 Reason Code: 0x50006
 Shutdown Type: restart
 Comment: The system process 'C:\Windows\system32\lsass.exe' terminated unexpectedly with status code 255.  The system will now shut down and restart.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="USER32" />
    <EventID Qualifiers="32768">1074</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-10T04:58:24.000000000Z" />
    <EventRecordID>8091132</EventRecordID>
    <Channel>System</Channel>
    <Computer>HV2008-Host</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>wininit.exe</Data>
    <Data>HV2008-HOST</Data>
    <Data>No title for this reason could be found</Data>
    <Data>0x50006</Data>
    <Data>restart</Data>
    <Data>The system process 'C:\Windows\system32\lsass.exe' terminated unexpectedly with status code 255.  The system will now shut down and restart.</Data>
    <Data>
    </Data>
    <Binary>06000500000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

Following are the events from Application logs.

Log Name:      Application
Source:        Application Error
Date:          2/9/2015 11:58:14 PM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      HV2008-Host
Description:
Faulting application name: lsass.exe, version: 6.1.7601.22653, time stamp: 0x534893ed
Faulting module name: msvcrt.dll, version: 7.0.7601.17744, time stamp: 0x4eeb033f
Exception code: 0xc0000005
Fault offset: 0x0000000000001111
Faulting process id: 0x2e0
Faulting application start time: 0x01d03c91dbe5854f
Faulting application path: C:\Windows\system32\lsass.exe
Faulting module path: C:\Windows\system32\msvcrt.dll
Report Id: 6af0ff3d-b0e1-11e4-83ca-0026b9340d61
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-10T04:58:14.000000000Z" />
    <EventRecordID>267648</EventRecordID>
    <Channel>Application</Channel>
    <Computer>HV2008-Host</Computer>
    <Security />
  </System>
  <EventData>
    <Data>lsass.exe</Data>
    <Data>6.1.7601.22653</Data>
    <Data>534893ed</Data>
    <Data>msvcrt.dll</Data>
    <Data>7.0.7601.17744</Data>
    <Data>4eeb033f</Data>
    <Data>c0000005</Data>
    <Data>0000000000001111</Data>
    <Data>2e0</Data>
    <Data>01d03c91dbe5854f</Data>
    <Data>C:\Windows\system32\lsass.exe</Data>
    <Data>C:\Windows\system32\msvcrt.dll</Data>
    <Data>6af0ff3d-b0e1-11e4-83ca-0026b9340d61</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          2/9/2015 11:58:23 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      HV2008-Host
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: lsass.exe
P2: 6.1.7601.22653
P3: 534893ed
P4: msvcrt.dll
P5: 7.0.7601.17744
P6: 4eeb033f
P7: c0000005
P8: 0000000000001111
P9:
P10:

Attached files:
C:\Windows\Temp\WER5001.tmp.appcompat.txt
C:\Windows\Temp\WER535C.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER53DA.tmp.hdmp
C:\Windows\Temp\WER6690.tmp.mdmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_lsass.exe_3c1aa5eeba75bf26fcebc4f54e714efe7b5162a2_cab_20a56871

Analysis symbol:
Rechecking for solution: 0
Report Id: 6af0ff3d-b0e1-11e4-83ca-0026b9340d61
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-10T04:58:23.000000000Z" />
    <EventRecordID>267650</EventRecordID>
    <Channel>Application</Channel>
    <Computer>HV2008-Host</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>APPCRASH</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>lsass.exe</Data>
    <Data>6.1.7601.22653</Data>
    <Data>534893ed</Data>
    <Data>msvcrt.dll</Data>
    <Data>7.0.7601.17744</Data>
    <Data>4eeb033f</Data>
    <Data>c0000005</Data>
    <Data>0000000000001111</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
C:\Windows\Temp\WER5001.tmp.appcompat.txt
C:\Windows\Temp\WER535C.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER53DA.tmp.hdmp
C:\Windows\Temp\WER6690.tmp.mdmp</Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_lsass.exe_3c1aa5eeba75bf26fcebc4f54e714efe7b5162a2_cab_20a56871</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>6af0ff3d-b0e1-11e4-83ca-0026b9340d61</Data>
    <Data>0</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Windows Error Reporting
Date:          2/9/2015 11:58:22 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      HV2008-Host
Description:
Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: lsass.exe
P2: 6.1.7601.22653
P3: 534893ed
P4: msvcrt.dll
P5: 7.0.7601.17744
P6: 4eeb033f
P7: c0000005
P8: 0000000000001111
P9:
P10:

Attached files:
C:\Windows\Temp\WER5001.tmp.appcompat.txt
C:\Windows\Temp\WER535C.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER53DA.tmp.hdmp
C:\Windows\Temp\WER6690.tmp.mdmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_lsass.exe_3c1aa5eeba75bf26fcebc4f54e714efe7b5162a2_cab_20a56871

Analysis symbol:
Rechecking for solution: 0
Report Id: 6af0ff3d-b0e1-11e4-83ca-0026b9340d61
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-02-10T04:58:22.000000000Z" />
    <EventRecordID>267649</EventRecordID>
    <Channel>Application</Channel>
    <Computer>HV2008-Host</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>APPCRASH</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>lsass.exe</Data>
    <Data>6.1.7601.22653</Data>
    <Data>534893ed</Data>
    <Data>msvcrt.dll</Data>
    <Data>7.0.7601.17744</Data>
    <Data>4eeb033f</Data>
    <Data>c0000005</Data>
    <Data>0000000000001111</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
C:\Windows\Temp\WER5001.tmp.appcompat.txt
C:\Windows\Temp\WER535C.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER53DA.tmp.hdmp
C:\Windows\Temp\WER6690.tmp.mdmp</Data>
    <Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_lsass.exe_3c1aa5eeba75bf26fcebc4f54e714efe7b5162a2_cab_20a56871</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>6af0ff3d-b0e1-11e4-83ca-0026b9340d61</Data>
    <Data>4</Data>
  </EventData>
</Event>

Would really appreciate if someone can point us to the correct direction on how to get this issue sorted.

Regards,

Dhanushka