[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Lsass.exe is writing to teh hard drive all the time

Posted on 2006-05-13
5
Medium Priority
?
942 Views
Last Modified: 2009-12-16
I run Windows XP Pro SP II.
I discovered that Lsass.exe writes all teh time to teh hard drive. I checked this fact on three different computers.
Is this normal? Will this, in the long run, shorten the hard drive life?

dbessis
0
Comment
Question by:dbessis
  • 4
5 Comments
 
LVL 13

Expert Comment

by:Expert4XP
ID: 16675007
I think that is normal.

"lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server.
http://www.neuber.com/taskmanager/process/lsass.exe.html

You could also check your audit logging settings. My Computer/Manage/Event Viewer/Security and see what is being logged and/or enable more logging if needed.
0
 
LVL 13

Expert Comment

by:Expert4XP
ID: 16675016
0
 
LVL 13

Expert Comment

by:Expert4XP
ID: 16675024

http://www.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

or search Google with words:  sasser.exe spyware remove
0
 

Author Comment

by:dbessis
ID: 16676223
It is NOT the spyware version but the true LSass.exe that I have.
What I do not understand is the constant writing. This executable should work ONLY when connecting to a Web site over the Internet. What can it be doing all the time?
0
 
LVL 13

Accepted Solution

by:
Expert4XP earned 500 total points
ID: 16676230
Try the filemon and/or process explorer free programs from sysinternals.  They are really helpful in finding out who is doing i/o and using cpu.

http://www.sysinternals.com/ProcessesAndThreadsUtilities.html

http://www.sysinternals.com/FileAndDiskUtilities.html
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question