Microsoft® Windows® 2000 Security Handbook

The Windows 2000 Security Subsystem

As you undoubtedly know, the Windows 2000 security subsystem provides control over all access to objects, including files and folders, processes in memory, or printers and servers. The subsystem checks to ensure that no user gets access to an object without proper authorization. Although the security subsystem has been enhanced significantly in Windows 2000, many aspects remain the same.

You will recall that the security subsystem consists of the following components in Windows 2000:

• The initial logon processes (winlogon.exe and msgina.dll), which provide the initial interactive logon and display the Logon dialog box.

• Local Security Authority (LSA), which ensures that the user has permission to access the system. ...