The process lsass.exe is the Local Security Authority Subsystem Service by Microsoft, Inc. It is responsible for the enforcement of security policies within Microsoft's Operating Systems. This process checks whether a user’s supplied identification is valid or not whenever he or she tries to access the computer system.
With the execution of the file lsass.exe, the system acquires security by preventing the access of unwanted users to any personal information. The process lsass.exe also handles the password modifications done by the user.
The lsass.exe process mainly operates in the system through its ability to create access tokens. These tokens encapsulate the file’s security descriptor, which contains the necessary information to process user authentication such as data on which user holds access to the system and whether the access is mandatory or discretionary.






