From the course: Windows OS Security: Password and Credential Protection
Unlock this course with a free trial
Join today to access over 25,500 courses taught by industry experts.
Windows security subsystems
From the course: Windows OS Security: Password and Credential Protection
Windows security subsystems
- [Instructor] Local security authority subsystem service or LSASS, L-S-A-S-S, is one of the most crucial components in the Windows security architecture. This process is at the center of how Windows manages credentials, enforces security policies, and ensures the integrity of authentication and authorization mechanisms. It is time to understand it fully. Windows security subsystems. L-S-A-S-S is a system process that runs in the background on every Windows machine. It has two main functions, authenticate users and generate security tokens. Security tokens, as you remember, define what each user or process is allowed to do on the system. When a user logs in, LSASS validates their credentials, checks them against security policies and issues a security access token that determines their permissions. This token follows the user through their sessions ensuring consistent enforcement of access controls. One of LSASS' most important tasks is managing the interaction between authentication…