What does LSASS Specifically do?
Perhaps the most common task that LSASS oversees is the access to a computer or server. LSASS recognizes any restrictions on access to any information on the hard drive or the server, and will make sure that only recognized access codes or other login credentials will allow persons to interact with those data files. This means that LSASS comes into play each time someone logs into the server, or uses a desktop computer and gains access to password protected files. LSASS can also allow administrators or any user that is granted the proper privileges to make changes and updates to passwords and user profiles. For example, it is through LSASS that authorized personnel may delete, change, or create new passwords and user files. Any changes are noted in the Windows Security Log.
