Re: lsass.exe How much I/O should it be doing?



grok wrote:

CreateFile * SUCCESS 8:04:06.2349316 AM
QueryNameInformationFile * BUFFER OVERFLOW 8:04:06.2351441 AM
QueryNameInformationFile * SUCCESS 8:04:06.2352507 AM
CloseFile * SUCCESS 8:04:06.2353459 AM


and the * stands for:

C:\Documents and Settings\Jim Slager\Application Data\Microsoft\Protect\S-1-5-21-4127160252-1390122426-107871480-1006\Preferred

This seems to be related to Microsoft's cryptography system. Have you encrypted part or all of your file system?

Harry.
.