Fix Schannel (KB2992611) causes the saturation of the LSASS by MS SQL server service

Hello

I manage a small NET 3.5 web application that is running on Windows Server 2008 R2 under IIS, querying a server MS SQL Express 2012 using the MS SQL Native client.  Authentication is also on MS SQL and not windows.

After applying the fix Schannel the performance of the application (see KB2992611) has deteriorated to the point where it was more usable.  The reason proved that after application of the patch, MS SQL server deploys an excessive number of requests for authorization for LSASS (e.g. 8000 per second, while that the application requires only an application for authorization by the action of the user, because the necessary applications are all made under an authenticated connection).

We also have ESET File Security 4.5.12005.0, but disable the real-time protection did not make a difference - I don't expect that it is a factor.

Someone has suggestions for what is possible in this situation so that we can correct the problem of Schannel and still have a working web app?  It's a question of having someone else?

Thank you very much

Tim

Looks like they have just re-released it:

Reason for revision: V2.0 (November 18, 2014): Bulletin revised
to announce the new proposals of the 2992611 systems update
running Windows Server 2008 R2 and Windows Server 2012.

Customers running Windows Server 2008 R2 or Windows Server 2012 having installed upgrading 2992611 before November 18 new proposals must reapply the update

Tags: Windows

Similar Questions

  • What is the date of end SQL server 2008 SP2 support?

    What is the date of end SQL server 2008 SP2 support?

    Have you tried Google? or:

    ASK THE QUESTION IN THE SQL SERVER FORUM:
    http://social.msdn.Microsoft.com/forums/en/category/SQLServer

  • Cannot verify the source of MS SQL server

    Hi all
    I faced a problem in trying to verify the source of MS SQL server with the Oracle Audit Vault
    This is my first experience with MS SQL Server. On this AV already successfully registered some sources oracle and sybase.
    MS SQL Server 2005 x 32.

    avmssqldb check - CBC srvarch01.rccf.ru:1433
    Enter the source username: svc_is
    Enter the password for the source:
    Unable to connect to the source database. Please ensure that the source is running.
    Error occurred, please check the log for details

    Journal:
    15 sep, 2010 15:11:18 10 FINE-wire: the AV Version is 10.2.3.2.0
    15 sep, 2010 15:11:27 Thread - FINE 10: Exception: com.microsoft.sqlserver.jdbc.SQLServerException: failed to connect to the user ' sv
    c_is'.
    15 sep, 2010 15:11:27 Thread - FINE 10: Exception: unable to connect to the source database. Please ensure that the source is in place
    and running.
    com.microsoft.sqlserver.jdbc.SQLServerException: failed to connect to the user "svc_is".
    com.microsoft.sqlserver.jdbc.SQLServerException.makeFromDatabaseError (unknown Source)
    com.microsoft.sqlserver.jdbc.IOBuffer.processPackets (unknown Source)
    com.microsoft.sqlserver.jdbc.SQLServerConnection.logon (unknown Source)
    com.microsoft.sqlserver.jdbc.SQLServerConnection.connect (unknown Source)
    com.microsoft.sqlserver.jdbc.SQLServerDriver.connect (unknown Source)
    java.sql.DriverManager.getConnection(DriverManager.java:512)
    java.sql.DriverManager.getConnection(DriverManager.java:171)
    oracle.av.plugin.common.DAO.getConnection(DAO.java:161)
    oracle.av.plugin.common.DAO. < init > (DAO.java:134)
    oracle.av.plugin.sql.command.Verify.runQuery(Verify.java:147)
    oracle.av.plugin.sql.command.Verify.checkVersion(Verify.java:224)
    oracle.av.plugin.sql.command.Verify.execute(Verify.java:570)
    oracle.av.plugin.command.Command.process(Command.java:190)
    oracle.av.plugin.sql.command.AVMSSQLDBUtility.execute(AVMSSQLDBUtility.java:92)
    oracle.av.plugin.sql.command.AVMSSQLDBUtility.main(AVMSSQLDBUtility.java:147)

    Will be greatfull for any help.

    Edited by: user12973514 the 15.09.2010 04:16

    Hi Vlad,

    Yes, this can be a problem.
    So check out below:
    a. If you have downloaded the driver (sqljdbc.jar) to the $ORACLE_HOME/jlib
    b. create the user source with sp_addlogin, which should allow the use of sql server authentication.

    Then check again on the issue.

    Thank you
    Sisi

  • How to convert the hierarchical query of SQL Server (CTE) to Oracle?

    How to convert the hierarchical query of SQL Server (CTE) to Oracle?

    WITH cte (col1, col2) AS
    (
    SELECT col1, col2
    FROM dbo. [tb1]
    WHERE col1 = 12
    UNION ALL
    SELECT c.col1, c.col2
    FROM dbo. [tb1] AS c INNER JOIN cte AS p ON c.col2 = p.col1
    )
    DELETE one
    FROM dbo. [tb1] AS an INNER JOIN b cte
    ON a.col1 = b.col1

    Hello
    Something like this maybe:

    DELETE FROM dbo.tb1 a
     WHERE EXISTS (
      SELECT 1
        FROM dbo.tb1 b
      WHERE a.co11 = b.col1
          AND a.col2 = b.col2
       START WITH b.col1 = 12
      CONNECT BY b.col2 = PRIOR b.col1)
    

    Although you need to do here is to check that CONNECT it BY SELECT, returns records you wait first, then the DELETION should work too.

  • the inventory of VMware service does not start, the wrong function, bad sql server port

    I've migrated vcenter SQL database to a new server after this KB

    https://KB.VMware.com/selfservice/microsites/search.do?language=en_US & cmd = displayKC & externalId = 7960893

    but now most of the vcenter services does not start cause of according to the inventory service.  I see service log of inventory which is the problem, it tries to connect to SQL Server by default, 1433 port, but my SQL server instance is listening on a different fixed port, I don't want to change.  Where can I configure the inventory service we another port of SQL Server?  According to a KB related to the above, it is possible to do

    https://KB.VMware.com/selfservice/search.do?cmd=displayKC & docType = kc & docTypeID = DT_KB_1_1 & externalId = 2033516

    but unfortunately I have vcenter 6 and the instructions above do not seem to apply, I can't even find ssocli, the mentioned folder structure does not exist on my installation


    Thank you.

    I solved this.  Despite what has been reported in the newspaper the issue was not the port.  The new database is a named instance, the connection string for vcdb.properties, he entered as the server name = hostname\instancename in fact, it is necessary to use two slashes return hostname\\instancename :-/

  • Cannot create the data source to SQL Server

    Hi people,

    I am running IIS, Windows XP SP3, SQL Express 2005, Trial Version of ColdFusion 9 (no patches).

    The administrator using ColdFusion, when I try to create a data source for SQLExpress 2005 (SQL Server Express), by using the SQL Server driver, I get the following error:

    Connection verification failed for data source: AMT
    java.sql.SQLException: [Macromedia] [SQLServer JDBC Driver] the requested instance is not valid or is not running.
    The root cause was that: java.sql.SQLException: [Macromedia] [SQLServer JDBC Driver] the requested instance is not valid or is not running.

    The "instance", which I interpret as meaning the database instance, is "machinename\SQLExpress" (it is a so-called "named instance").  That's what I enter in the "Server" field of the display (data & Services-> sources-> Microsoft SQL Server).

    However, I am able to create an ODBC data source name in Windows using the driver Microsoft SQL Server Native Client Version 09.00.3042 and the same instance, "machinename\SQLExpress".

    Does anyone have any ideas as to what is wrong?

    Try to use the domain name TCP/IP (or IP address) and port instead of the info of the connectivity of Windows style.  You may need to enable TCP/IP as a network on the DB server protocol well (I think it is disabled by default on SQL Express Ed).

    --

    Adam

  • Different output for the same query in SQL Server and Oracle

    I have two tables table1 and table2

    -table1 has two columns c1 int and varchar c2. There are no constraints added in it. It contains data as shown below

    C1 c2
    -------------------
    d 6
    5 d
    102 g
    6%
    f 103
    5.
    501 j
    1 g
    601 n
    2 m

    -table2 has only a single column c1 int. There is no added in constraints. It contains data as shown below

    C1
    ----
    6
    1
    4
    3
    2

    now when I run below, given the query in sql server and oracle it gives me different results

    Select *.
    FROM table1
    table2 on table2.c1 = table1.c1 inner join (SELECT ROW_NUMBER() (any ORDER by ASC c1) AS c1 from table2)

    output of SQL server
    ------------------------
    C1 c2 c1
    --------------------------------
    1 g 1
    2 m 2
    3 h 3
    4 g 4
    5 d 5


    release of Oracle
    ----------------------
    C1 C2 C1
    ---------------------------------
    5 d 5
    4 g 4
    3 h 3
    1 g 1
    2 m 2


    If you notice the first column in the two outputs. It is sorted in sql server and no oracle.

    Why he behaves differently in oracle? Is there a way I can fix this problem in oracle?

    Thank you
    Jigs

    It is NOT a behavior "differently" in Oracle; you did not specify just an order that you expect of your results, so you'll get output in what order the fantasies of the database showing (ie. no guaranteed order). It is an artifact of the way the database chooses to collect the data and databases (or same sets of data within the same database) can and will most likely behave differently.

    Same SQL Server will not be guaranteed to always get your data in an orderly manner if you exclude the order by clause, even if you think that there always display the data in an orderly manner.

    Your solution is to add an order by clause, in the TWO databases, to force the order of the data output.

  • I can't find the link to download the program installation of SQL Server 2008 R2 or disk image

    Hello

    I'm trying to find the image disk or self-extracting installer of SQL Server 2008 R2 Evaluation Version. Would be nice if someone gave me the link.

    Hello

    Your question is beyond the scope of these forums.

    Please ask this question in the following forums.

    Category of the SQL Server:

    http://social.technet.Microsoft.com/forums/en-us/category/SQLServer

    Concerning

  • How to combine the 2 tables in sql server 2008?

    Tell me how to combine 2 tables in sql server. and give me an example, I am a beginner again.

    You can get a faster or better response if you ask one of the instances of SQL Server dedicated from Microsoft here:

    http://social.technet.microsoft.com/Forums/en-us/category/sqlserver .

    (I'm sorry, but I can't move this thread for you because the two forums are working on separate platforms)

  • My computer will not install the update for SQL server service pack 3 (970892), why?

    Whenever I try to install the update I get the message not was restored.

    Try this forum:

    The SQL Server installation & set program at level
    http://social.msdn.Microsoft.com/forums/en-us/sqlsetupandupgrade/threads/ TaurArian [MVP] 2005-2010 - Update Services

  • Can't share files and printers on the network. Error message: Server service is not started.

    I CAN'T DO FILE/PRINTER SHARING.

    I GET a MESSAGE SHOW "SERVER SERVICE NOT STARTED" I ALSO TRIED WINDOWS HELP AND IT SAYS HELP AND SUPPORT NOT START. HOW CAN I GET THESE TO START AUTOMATIC

    What version of Windows, including the service pack is installed? (Do right click my computer and select Properties, if you do not know)

    The method 1 and method 2 in this article--> http://support.microsoft.com/kb/885859

    If you're in the Services applet according to method 1, also make sure that the Startup Type is set to automatic (to resolve, double-click the entry in the Services; Startup type is under the general tab).

    You can also start Help and Support by using the Services applet (its Startup Type can be manual or automatic).

    If you receive error messages when you try to follow the steps above, report completely, without paraphrasing.

    The fact that two fairly common services do not work can mean that something more sinister is happening.  What antivirus application do you use?  What's his current subscription?  Its subscription has already been authorized expiration?

    You can download, install, update and run MalwareBytes AntiMalware (it of free and can be removed later if you wish).

  • Error 9 42 during the installation of Microsoft SQL Server 2005 Express Edition Service Pack 4 (KB2463332)

    Original title: 42 9 error

    I tried several times to install Microsoft SQL Server 2005 Express Edition Service Pack 4 (KB2463332)

    Download size: 55.8 MB

    However I only fail to be successful, receive the error code 42 9

    If you can enlighten me as to why this update fails please,

    Thank you

    Anthony Montana

    Hi Antony Montana,

    Welcome to the Microsoft community. According to the description of the problem, you are not able to install the update (KB2463332). Provide the following information:

    ·         Did you do changes on the computer before the show?

    ·         You are able to install other updates successfully?

    ·         What is the full error message?

    ·         You use a third-party security software?

    I suggest you follow these methods.

    Method 1: Temporarily disable the security software.

    Note: Antivirus software can help protect your computer against viruses and other security threats. In most cases, you should not disable your antivirus software. If you do not disable temporarily to install other software, you must reactivate as soon as you are finished. If you are connected to the Internet or a network during the time that your antivirus software is disabled, your computer is vulnerable to attacks.

    Method 2: You can also manually install updates (KB number) by downloading from the Microsoft Download Center.

    http://www.Microsoft.com/downloads/en/default.aspx

    Method 3: Follow the steps in the article.

    How to reset the Windows Update components?

    You can read this article for more information:

    You cannot install some programs or updates

    Note: You must take the backup of the data before performing any installation of windows.

    I hope this helps. Let us know if you need more assistance.

  • vFoglight - moving the database to another SQL Server

    Hello

    We are moving our vFoglight to a SQL Server database to another SQL (production version) server.  I changed the server/instance name in the foglight.config file to point to the new server and instance and restarted the service (and eventually rebooted as well).  However, vFoglight no longer works.  Is there another step necessary to make it work?

    Any help would be appreciated.

    See you soon,.

    Mark

    Hello Mark,

    We have to examine FMS log and SQL server log to see what error is to jump, but as a quick check you can check that the server authentication is set to SQL Server and Windows authentication mode in the security settings of your instance of SQL Server.

    Concerning

  • Advanced POS 5.8 only sees the system databases in SQL Server 2014 and fails when attempting backup

    We have upgraded to VDP 5.8 has progressed today and installed the new SQL agent in 3 different SQL servers.  Two SQL Server 2008 work well with VDP machines - he can see all databases.

    But when I try to create a backup of the SQL Server 2014 computer, by selecting individual databases, the VDP device (such as it is controlled through vSphere Web Client) sees only the three system databases

    Master, MSDB and Temp.  And when I tried to back up the master database, the process has failed with an error various non-expose of reasons.

    Is there something special about setting up SQL Server 2014 to be backed up by advanced VDP?

    See M80ARM - Warrior of Virtualization: VDP Advanced SQL Agent permissions

    Basically, you need to either run the 'Backup Agent' service in a context that had rights to the SQL Server or you have enable the NT AUTHORITY\SYSTEM account with rights on the SQL Server.  Not obvious in the documentation, but that solved for me.

  • How to install the driver jdbc for sql server 2005 in sql developer 4.0?


    Hallo all

    I need to access the tables in a MS SQL Server 2005 database.

    The JDBC driver is possible.

    How to install this driver?

    Thanks a lot for your messages.

    Hello

    It's the documentation-

    Database: third-party JDBC Drivers

    The component drivers JDBC third party specifies drivers to use for connections to the third-party databases (non-Oracle), such as IBM DB2, MySQL, Microsoft SQL Server or Sybase Adaptive Server. (You don't need to add a driver for connections to Microsoft Access databases.) To add a driver, click Add an entry and select the path for the driver:

    For Microsoft SQL Server or Sybase Adaptive Server: jtds - 1.2.jar, which is included in the download of jtds - 1.2 - dist.zip

    To find a specific third-party driver, visit the appropriate site (for example, http://www.mysql.com for MySQL Connector/J JDBC driver for MySQL, http://jtds.sourceforge.net/ for the for Microsoft SQL Server and Sybase Adaptive Server jTDS driver, or search for Teradata JDBC driver to http://www.teradata.com/ ). For MySQL, use the driver in MySQL 5.0 not 5.1 or a later version with the version of SQL Developer 1.5.

    You must specify a third-party driver or install a driver using the check for updates feature before you can create a connection to a database to third parties of the associated type. (See the tabs to create connections to the databases of third parties in the Create/Edit/Select database connection dialog box).

    Alternative:

    As an alternative to the use of this preference, you can click Help, and then search for the updates install the for Microsoft SQL Server JTDS JDBC driver and the driver of JDBE of MySQL as extensions.

    Kind regards

    Mike

Maybe you are looking for