LSASS 'Access Denied"


When trying to make a procdump of lsass.exe I am met with "Access Denied (0x80070005, -2147024891)"

I am a local administrator on the machine in question. I have done everything to make a dump file of the LSASS...

I have tried running both Command Prompt and PowerShell as admin. I have used Psexec to get a SYSTEM privileged Command Prompt and was still met with the access denied error when trying to make a dump. I have tried creating a dump file manually running Task Manager as admin and still got the access denied.

The only antivirus on the machine is Crowdstrike and Windows Defender. I am almost one-hundred percent sure Crowdstrike is preventing the LSASS dump. I doubt anyone will be able to help me with this but have anyone had any luck with something like this before?

asked on Stack Overflow Oct 17, 2019 by WhoIsGoat

0 Answers

Nobody has answered this question yet.

User contributions licensed under CC BY-SA 3.0