question

Matt-2690 avatar image
0 Votes"
Matt-2690 asked GeraldLopez-6324 published

Azure MFA NPS extension 100% CPU usage

I have an NPS server with the Azure MFA extension enabled. While the extension is working properly, after a few hours the dllhost.exe process starts consuming 100% of the CPU. I haven't been able to find any logs that indicate what's going on so I don't have a whole lot more info to present here.

All I can do to resolve the issue is to kill the process and then restart the NPS service. Of course, the problem repeats.

azure-ad-multi-factor-authentication
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GeraldLopez-6324 avatar image
0 Votes"
GeraldLopez-6324 answered GeraldLopez-6324 published

@Matt-2690

Did you ever come across a solution for this, I am having the same issue, only fix right now is restarting the NPS every 3 hours which I read as a temp solution. One persion mentioned if your using fortinets which I am, certain firmware versions do this where the root issue is that the Fortinet's can't handle text message MFA and send the NPS into a forever loop spiking dllhost (com surrogate) to 100%.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

amanpreetsingh-msft avatar image
0 Votes"
amanpreetsingh-msft answered

@Matt-2690, Please capture a NetMon trace and filter the traffic for dllhost.exe process. I have seen this if there are frequent retries to perform RADIUS auth by RADIUS clients, such as VPN client.

If that is not the case, kill the process, restart the NPS service and capture 2-3 samples of ProcDump while the CPU is spiking up and if you need assistance with dump analysis, please open a support case with Microsoft.




Please "Accept as answer" wherever the information provided helps you to help others in the community.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.