Local Security Authority Subsystem Service


Local Security Authority Subsystem Service

Local Security Authority Subsystem Service (LSASS), is a process in Microsoft Windows operating systems that is responsible for enforcing the security policy on the system. It verifies users logging on to a Windows computer or server, handles password changes, and creates access tokens. It also writes to the Windows Security Log.

The Sasser worm exploited a vulnerability in LSASS [http://www.ppedia.com/p30_lsass-lsass.exe.htm] to spread via a remote buffer overflow in computers running Microsoft Windows XP and Windows 2000. The worm is particularly potent in that it can spread without any interaction with humans, nor does it 'travel by email' like many other worms.

Should the lsass.exe program end, for example, by the Sasser worm's effects, then a countdown timer will appear on the screen, advising the user to save their work and close all programs before Windows shuts down. This timer, however, can be thwarted by changing the computer's date and time settings or by executing the shutdown -a command.

Forcible termination of lsass.exe will result in the Welcome screen losing its accounts, prompting a restart of the machine, therefore lsass.exe should not be considered the Sasser worm.

External links

* [http://www.microsoft.com/technet/security/topics/identitymanagement/idmanage/p2pass_1.mspx MS identity management]
* [http://www.processlibrary.com/directory/files/lsass/ ProcessLibrary.com lsass.exe info]


Wikimedia Foundation. 2010.

Look at other dictionaries:

  • Local Security Authority Subsystem Service — Диалог «Завершение работы» Windows XP, появляющийся при завершении процесса LSASS LSASS  часть операционной системы, отвечающей за авторизацию локальных пользователей отдельного компьютера (сокр. от Local Security Authority Subsystem… …   Википедия

  • Local Security Authority Subsystem Service — lsass.exe (Local Security Authority Subsystem) est un exécutable qui est nécessaire pour le bon fonctionnement de Windows. Il assure l identification des utilisateurs (utilisateurs du domaine ou utilisateurs locaux). Pour Windows 2000 et les… …   Wikipédia en Français

  • Local System Authority — Local Security Authority Subsystem Service lsass.exe (Local Security Authority Subsystem) est un exécutable qui est nécessaire pour le bon fonctionnement de Windows. Il assure l identification des utilisateurs (utilisateurs du domaine ou… …   Wikipédia en Français

  • Security and safety features new to Windows Vista — There are a number of security and safety features new to Windows Vista, most of which are not available in any prior Microsoft Windows operating system release.Beginning in early 2002 with Microsoft s announcement of their Trustworthy Computing… …   Wikipedia

  • Security Account Manager — La SAM (Security Account Manager ou gestionnaire des comptes de sécurité) est la base de données des comptes locaux sur Windows Server 2003, Windows XP, Windows 2000. C est l un des composants de la base de registre. Elle contient les mots de… …   Wikipédia en Français

  • Windows Security Log — The Security Log, in Microsoft Windows, is a log that contains records of login/logout activity and/or other security related events specified by the system s audit policy. Auditing allows administrators to configure Windows to record operating… …   Wikipedia

  • Lsass — Local Security Authority Subsystem Service lsass.exe (Local Security Authority Subsystem) est un exécutable qui est nécessaire pour le bon fonctionnement de Windows. Il assure l identification des utilisateurs (utilisateurs du domaine ou… …   Wikipédia en Français

  • Lsass.exe — Local Security Authority Subsystem Service lsass.exe (Local Security Authority Subsystem) est un exécutable qui est nécessaire pour le bon fonctionnement de Windows. Il assure l identification des utilisateurs (utilisateurs du domaine ou… …   Wikipédia en Français

  • LSASS — Local Security Authority Subsystem Service (Computing » Security) …   Abbreviations dictionary

  • List of Microsoft Windows components — The following is a list of Microsoft Windows components. Contents 1 Configuration and maintenance 2 User interface 3 Applications and utilities 4 Windows Server components …   Wikipedia


Share the article and excerpts

Direct link
Do a right-click on the link above
and select “Copy Link”

We are using cookies for the best presentation of our site. Continuing to use this site, you agree with this.