LSA Shell (Kerberos)

Discussion in 'other firewalls' started by PhiloVance, Apr 7, 2003.

Thread Status:
Not open for further replies.
  1. PhiloVance

    PhiloVance Registered Member

    Joined:
    Jan 12, 2003
    Posts:
    93
    Location:
    Bakersfield, CA
    Running Kerio PF 2.1 (the freebie) and encounted this with permission to go out, the program is c:\windows\system32\lsass.exe and I have no idea what this is. I had my grandson using the 'puter today and he d/l a chess game. I am using XP home and he was on a Limited userid not an admin. Anyone have any idea? o_O
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    from the win2k server reskit distributed systems guide:

    "The Local Security Authority (LSA) is a protected subsystem that maintains the information about all aspects of local security on a system (collectively known as the local security policy) and provides various services for translation between names and identifiers.

    In general, the LSA performs the following functions:

    Manages local security policy.
    Provides interactive user authentication services.
    Generates tokens, which contain user and group information as well as information about the security privileges for that user. After the initial logon process is complete, all users are identified by their security identifier (SID) and the associated access tokens.
    Manages the Audit policy and settings. When an audit alert is generated by the Security Reference Monitor, the LSA is charged with writing that alert to the appropriate system log. "

    About Kerberos: http://www.sans.org/rr/win2000/kerberos.php

    Regards,

    Pieter
     
  3. PhiloVance

    PhiloVance Registered Member

    Joined:
    Jan 12, 2003
    Posts:
    93
    Location:
    Bakersfield, CA
    Thanks...and thanks for the link. :)
     
  4. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    You're welcome. :)
     
Thread Status:
Not open for further replies.