Security Accounts Manager (SamSs) Service Defaults in Windows 7

The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled.

Default Settings

Startup type:Automatic
Display name:Security Accounts Manager
Service name:SamSs
Service type:share
Error control:normal
Group:MS_WindowsLocalValidation
Object:LocalSystem
Path:%SystemRoot%\system32\lsass.exe
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SamSs

Default Behavior

Security Accounts Manager is a Win32 service. In Windows 7 it is starting automatically on the operating system startup. Then the Security Accounts Manager service is running as LocalSystem in a shared process of lsass.exe. Other system components, such as drivers and services, may run in the same process. If Security Accounts Manager fails to start, Windows 7 attempts to write the failure details into Event Log. Then Windows 7 startup should proceed and the user should be notified that the SamSs service is not running because of the error.

Dependencies

Security Accounts Manager is unable to start, if the Remote Procedure Call (RPC) service is stopped or disabled.

If Security Accounts Manager is stopped, the following services cannot start:

Restore Default Startup Configuration for Security Accounts Manager

1. Select your Windows 7 edition and service pack, and then click Download.

2. Save the Win7_SamSs_Service_Startup.cmd file to a local storage device.

3. Run the saved file as an administrator.

4. Restart the computer.

The SamSs service is using the lsass.exe file that is located in the %WinDir%\system32 folder. If the file is changed, damaged or deleted, you can restore its original version from Windows 7 installation media.