WINDOWS SERVICE

LSM: Local Session Manager

Q: Is LSM the same as lsass.exe?

No. On build 26300 the LSM service is registered as svchost.exe -k DcomLaunch -p, runs as LocalSystem and loads C:\Windows\System32\lsm.dll, signed by Microsoft Windows. lsass.exe is a different program, the Local Security Authority Process.

Core Windows service that manages local user sessions.

TECHNICAL SUMMARY

Service name	LSM
Display name	Local Session Manager
Runs from	C:\Windows\System32\svchost.exe
Command line	svchost.exe -k DcomLaunch -p
Runs as	LocalSystem
Verdict	Leave it alone
Microsoft, Windows Server 2016 guidance	No guidance

Paths, signer and service account observed on Windows 11 build 26300 on 12 November 2026. Run the commands below to check your own PC.

Should you touch it?

Leave it alone

Microsoft states that stopping or disabling this service causes system instability, and its guidance for Windows 10 and 11 IoT Enterprise rates it Don't disable. On the PC used for this page it was Automatic and running, and Windows did not accept a stop request for it.

What PC Tweaker does with it

PC Tweaker does not change this service. No control in the catalogue stops it, disables it or edits its start type.

Check it yourself

See its state and start type

Get-Service LSM | Format-List Name, DisplayName, Status, StartType
sc qc LSM

PowerShell

Common questions

What does the LSM service do?

Core Windows service that manages local user sessions. It runs C:\Windows\System32\svchost.exe (svchost.exe -k DcomLaunch -p) as LocalSystem.

Can I disable LSM?

Leave it alone. Microsoft states that stopping or disabling this service causes system instability, and its guidance for Windows 10 and 11 IoT Enterprise rates it Don't disable. On the PC used for this page it was Automatic and running, and Windows did not accept a stop request for it.

What does the Local Session Manager depend on?

On Windows 11 build 26300 it depends on RpcEptMapper, DcomLaunch and RpcSs. sc qc LSM prints the same list on your PC.

Is LSM the same as lsass.exe?

No. On build 26300 the LSM service is registered as svchost.exe -k DcomLaunch -p, runs as LocalSystem and loads C:\Windows\System32\lsm.dll, signed by Microsoft Windows. lsass.exe is a different program, the Local Security Authority Process.