1
When on the Windows 7 login screen, is there a user logged in?
Since Utilman.exe can be run during that time, it makes sense that a user is currently logged in. Am I completely wrong, and if not, which user is it?
epicbob57
Posted 2017-01-11T03:30:11.513
Reputation: 11
2
The NT AUTHORITY\SYSTEM user manages NT system logins with winlogon, and other related processes such as lsass and lsm. lsass handles operations in regards to the SAM file which stores local user credentials on a Windows NT system.
dark_st3alth
Posted 2017-01-11T03:30:11.513
Reputation: 436
