Lsass.exe is writing to teh hard drive all the time

Posted on 2006-05-13
Last Modified: 2009-12-16
I run Windows XP Pro SP II.
I discovered that Lsass.exe writes all teh time to teh hard drive. I checked this fact on three different computers.
Is this normal? Will this, in the long run, shorten the hard drive life?

Question by:dbessis
    LVL 13

    Expert Comment

    I think that is normal.

    "lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server.

    You could also check your audit logging settings. My Computer/Manage/Event Viewer/Security and see what is being logged and/or enable more logging if needed.
    LVL 13

    Expert Comment

    LVL 13

    Expert Comment


    or search Google with words:  sasser.exe spyware remove

    Author Comment

    It is NOT the spyware version but the true LSass.exe that I have.
    What I do not understand is the constant writing. This executable should work ONLY when connecting to a Web site over the Internet. What can it be doing all the time?
    LVL 13

    Accepted Solution

    Try the filemon and/or process explorer free programs from sysinternals.  They are really helpful in finding out who is doing i/o and using cpu.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
    We have adopted the strategy to use Computers in Student Labs as the bulletin boards. The same target can be achieved by using a Login Notice feature in Group policy but it’s not as attractive as graphical wallpapers with message which grabs the att…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now