What is the "lsass.exe (Local Security Authority Process)" executable program on Windows 7? I want to know how lsass.exe is used to host services.

"lsass.exe (Local Security Authority Process)" is a Windows 7 system executable program that is used to launch and host multiple Windows security related services.

If a service is configured to be launched and hosted by lsass.exe, it will provide a DLL file as a registry setting associated with this service. This DLL file contains the actual code for this service.

For example, service "VaultSvc (Credential Manager)" is configured to be launched and hosted by lsass.exe. It has the following registry setting: File=C:\Windows\system32\vaultsvc.dll.

So if "VaultSvc (Credential Manager)" service is started, vaultsvc.dll will be loaded to system and hosted by the lsass.exe process, together with other services hosted by lsass.exe.

Detailed information on "lsass.exe" program:

Name: lsass.exe
Location: C:\Windows\system32\lsass.exe
Description: Local Security Authority Process
File version: 6.1.7601.19160
Size: 21.5 KB (22,016 bytes)
Modified: Thursday, ‎February ‎11, ‎2016, ‏‎12:30:59 PM

 

⇒ Identify the lsass.exe Process on Windows 7

⇐ "Security Accounts Manager - samsrv.dll" Service on Windows 7

⇑ 'lsass.exe' Services on Windows 7

⇑⇑ Windows 7 Services Tutorials