JSI Tip 6321. Lsass.exe on your PDC emulator uses 100 percent of the CPU, returns to normal, and spikes again in 1 hour?

The subject behavior cannot be detected by using NTDS diagnostic logging, nor is it network related.

This behavior will occur if the Administrators group contains a large number of users, either intentionally or through group nesting.

To resolve this behavior, limit the number of accounts in the Administrators group on your PDC emulator.

NOTE: See 232199 - Description and Update of the Active Directory AdminSDHolder Object.

NOTE: See 251343 - Manually Initializing the SD Propagator Thread to Evaluate Inherited Permissions for Objects in Active Directory.