What Is Lsass Exe And Why Is It Running
Known as the local security authentication server, this file generates the process responsible for authenticating users in the WinLogon service. The process is performed by using authentication packages such as the default msgina.dll. When authentication is successful, lsass.exe generates a user access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token. A look at lsass.exe in process explorer reveals it handles 3 primary authentication services in Windows:...