Techno Curry

We run a production ArcGIS server environment with a large number of secure services and we noticed that the lsass.exe process was consuming large amounts of memory increasing in size as much as 4G+ and bringing the server to a stand still.  "lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC or server. Lsass generates the process responsible for authenticating users for the Winlogon service. The definition taken from http://www.neuber.com/taskmanager/process/lsass.exe.html . This is a known issue in ArcGIS Server and ESRI has a workaround for this in KB article 37566 http://resources.arcgis.com/content/kbase?fa=articleShow&d=37566 . If you are running a proxy service for your secure services however, the proxy service fails as soon as you implement this workaround. The problem is that you are turning off impersonation for your SOAP and REST services and by doing this , ArcGIS Server cannot access the role database (SQL Server aspnet) credentials anymore. The solution is very simple , you have to grant the ArcGIS Web Services account in step 1 of the workaround in the article , access to the aspnet db so that the particular account can access the role store. And wallah, your proxy service is good to go again.