Lsass - Lsass.exe - LSA shell

October 2017

Lsass - Lsass.exe

Lsass.exe (LSASS stands for Local Security Authority Subsystem Service) is a Windows 2000/XP native system process which manages local security and user authentication procedures via the WinLogon service. It is a local authentication server which creates an access token whenever a user is successfully authenticated, in order to allow that user to log in.

The original Lsass service had a security hole, exploited by the Sasser virus, which must be fixed!


Lsass - Lsass.exe - LSA shell
Lsass - Lsass.exe - LSA shell
Lsass - Lsass.exe - LSA shell
Lsass - Lsass.exe - LSA shell
Latest update on October 16, 2008 at 09:43 AM by Jeff.
This document, titled "Lsass - Lsass.exe - LSA shell," is available under the Creative Commons license. Any copy, reuse, or modification of the content should be sufficiently credited to CCM (ccm.net).