• ARTICLES
SEARCH

How-To Geek

Local Security Authentication Server

Today a reader had a very good question about lsass.exe is the Microsoft security management process for domain access and local security policies.  Simply put it manages who logs on to your PC and/or Server.  There are a few viruses that mimic this process.  The Sasser virus was one of the more popular attacks a few years ago.  The Sasser worm would exploit lsass.exe so that XP would start a countdown of 60 seconds advising you to save your work.  Every time you rebooted your machine this would keep happening.  This process is located in C:WindowsSystem32 in either a PC or Server.  If you were to find it in any other location in your system … it is a virus.   

Below is a shot of the process running on Windows Home Server.     

1       

If you try to end task on this process WHS will not let you.

1

If this file is corrupted or deleted from your computer, your going to have problems logging onto your machine.  The fix is usually pretty simple as I explained in my response here

Mysicgeek’s Tech Lingo:  Server – A Server is a computer designed to run specific Server Applications.  They are usually high powered machines that several client computers connect to.

Lowell Heddings, better known online as the How-To Geek, spends all his free time bringing you fresh geekery on a daily basis. You can follow him on if you'd like.

  • Published 07/26/07

Enter Your Email Here to Get Access for Free:

Go check your email!