220.127.116.11 The Session Manager
The Session Manager reads the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager registry key to find and initialize entries under BootExecute. By default, this includes AUTOCHK,
which is a boot-time version of CHKDSK. Session Manager also sets up the paging file (Pagefile.sys).
Session Manager then does the following two things simultaneously:
Loads the console logon service (Winlogon.exe) to start the authentication verification process.
Winlogon starts the Local Security Authority Subsystem (Lsass.exe), and the print spooler (Spoolss.exe),
along with their supporting function libraries.
Loads the Services Controller (Screg.exe), which loads the rest of the devices and services.
In Windows Server 2003, the user is permitted to log on even though many of the services are still being