Windows Security Architecture

Their are Three Main Components in Security Architecture Of windows i.e.

1-> LSA (Local Security Authority):-> It is also known as the security subsystem.It handles local security policies and user authentication.The LSA also handles generalizing and logging audit messages.

2-> SAM (Security Account manager):-> The SAM handles user and group account's and provides user authentication for LSA.

3-> SRM (Security Reference Monitor):-> The SRM is in charge for enforcing and assuring access validation and auditing for the LSA.It references user account information as the user attempt's to access resources.

Passwords are not stored in SAM file rather their hashes are.Direct manipulation to this file is not possible.