Process Information

Process File: lsass.exe
Process Name: Local Security Authority Service

Author: Microsoft Corp.
Part Of: Microsoft Windows Operating System

Description:
lsass.exe is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server. It generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token.

lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. This program is important for the stable and secure running of your computer and should not be terminated.

You found lsass.exe file on Windows NT4/2000/XP/2003 only.

Note: lsass.exe could also be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. It could also be a registered security risk and should be removed immediately.

Note: lsass.exe is registered as a downloader. This process usually comes bundled with a virus or spyware and it’s main role is to do nothing other than download other viruses/spyware to your computer. It could also be a registered security risk and should be removed immediately.

Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.
The lsass.exe file is located in the C:\Windows\System32 folder (Windows XP/2003) or in the C:\WinNT\System32 folder (Windows 2000). In other cases, lsass.exe is a virus, spyware, trojan or worm!


Recommendation for lsass.exe:
Should not be disabled, required for essential applications to work properly.

Summary account

System Process: Yes
Application: No
Background Process: Yes
Uses Network: Yes
Uses Internet: No