Wednesday, January 12, 2011

Windows XP Processes - lsass.exe

What is lsass.exe?



lsass.exe - Local Security Authority Service

The process lsass.exe serves as the Local Security Authentication Server by Microsoft, Inc. It is responsible for the enforcement of the security policy within the operating system. This process checks whether a user’s supplied identification is valid or not whenever he or she tries to access the computer system.

With the execution of the file lsass.exe, the system acquires security by preventing the access of unwanted users to any private information. The file lsass.exe also handles the password modifications done by the user.

The process lsass.exe mainly operates in the system through its ability to create access tokens. These tokens encapsulate the file’s security descriptor, which contains the necessary information to process user authentication such as data on which user holds access to the system and whether the access is mandatory or discretionary.

Location:C:\Windows\System32

Importance of smss.exe

  • It verifies and validates of user logons to PC or server
  • lsass.exe is a system process that is needed for your Windows system to work properly. It should not be removed.
  • This process is considered safe. It is unlikely to pose any harm to your system.
  • This process is considered to be CPU intensive. Without proper management, CPU intensive processes can manipulate system resources and slows down computer.

0 comments:

Post a Comment

Search This Blog

Followers

Categories

Twitter Delicious Facebook Digg Stumbleupon Favorites More