Lsass - Lsass.exe - LSA shell

Ask a question
July 2018

Lsass - Lsass.exe

Lsass.exe (LSASS stands for Local Security Authority Subsystem Service) is a Windows 2000/XP native system process which manages local security and user authentication procedures via the WinLogon service. It is a local authentication server which creates an access token whenever a user is successfully authenticated, in order to allow that user to log in.

The original Lsass service had a security hole, exploited by the Sasser virus, which must be fixed!

Latest update on October 16, 2008 at 09:43 AM by Jeff.

This document, titled "," is available under the Creative Commons license. Any copy, reuse, or modification of the content should be sufficiently credited to CCM (https://ccm.net/).

Lsass - Lsass.exe - LSA shell
Lsass - Lsass.exe - LSA shell
Lsass - Lsass.exe - LSA shell
Lsass - Lsass.exe - LSA shell

LogonUI.exe
Mdm.exe