What is Lsalso.exe & How to Fix Its High CPU Usage?

Some of our readers have recently reported that they encounter some problems with a process in the Task Manager known as lsalso.exe in Windows which results in high CPU usage.

In case you’re also experiencing the Lsalso.exe high CPU usage issue, don’t worry as we have compiled some steps to fix it in this article.

What is Lsalso.exe?

Lsalso.exe is a Microsoft-developed executable file related to Credential Guard and KeyGuard, which runs in Virtual Secure Mode (VSM) as an Isolated User Mode (IUM) process.

LSAISO.exe runs in Virtual Trust Level (VTL) 1, while other processes run in VTL0, ensuring the protection of sensitive data such as hashed passwords and Kerberos keys.

The Local Security Authority Subsystem Service (LSASS) process is responsible for managing security policy, user authentication, and auditing, and was modified in Windows 10 and Windows Server 2016.

Although generally considered safe, LSASS can cause high CPU usage issues when certain drivers and applications attempt to load DLL files into the IUM process, destabilizing the system.

What causes Lsalso.exe high CPU usage?

There can be several reasons why you are experiencing the Lsalso.exe high CPU usage error on your Windows PC. Below are some of the possible reasons:

• Malware infection – Lsalso.exe is a commonly targeted process by malware that may cause high CPU usage. Malware can disguise itself as Lsalso.exe and run malicious code, resulting in increased CPU usage. Constantly run the Windows Defender or use any of the best antivirus software to fix the issue.
• Damaged or corrupted system files – Corrupted system files may also cause the Lsalso.exe process to malfunction and consume high CPU usage. This may occur due to a hardware failure or a software bug. Try using some of the dedicated tools to fix the issue.
• Outdated drivers – Outdated drivers can cause various system processes to malfunction, including Lsalso.exe. This can lead to high CPU usage as the process tries to perform its tasks with limited resources. Try to update your drivers to eliminate the possibility.
• Multiple concurrent processes – Running multiple processes at the same time can also cause Lsalso.exe to consume high CPU usage. This may happen due to an overloaded system or conflicting software applications. Try to head to your Task Manager to end some processes.

The above causes are just a few possible reasons why Lsalso.exe consumes high CPU usage. Let’s proceed to how to fix the issue in the next section.

How can I fix the Lsalso.exe high CPU usage?

Before trying any of the advanced troubleshooting or settings tweaks provided in this article, users should ensure they perform the following preparatory checks.

• Remove some unnecessary processes from the Task Manager.
• Contact Microsoft Support
• Restore Windows to its default state.

 Having confirmed the above checks and if you still require further assistance, work your way through any of the steps provided below to fix the issue.

1. Use the Process of Elimination

1. Press the Windows Start button and type Task Manager in the search area of the taskbar and click Open.
2. Navigate to the Processes tab and locate the targeted application. Then, right-click on it and select End task. (Do the same with other potentially problematic applications.
3. Next, launch Device Manager and locate the targeted drivers.
4. Right-click on them and choose Uninstall driver from the context menu and see if that makes any difference in the high CPU usage caused by lsalso.exe.

Eliminating the processes of these problematic applications and drivers should help fix the issue since certain applications and drivers can load DLL into the IUM process, resulting in a spike in CPU usage associated with lsalso.exe.

2. Check for APCs in the Queue

1. Install the Windows Debugging (WinDbg) tool from the Windows driver kit.
2. Then, use NotMyFault.exe from the Sysinternals website to generate a kernel memory dump during the spike.
   • To enable kernel memory, press the Windows + R keys to launch the Run dialog box.
   • Next, type control system in the text field of the dialog box and press Enter.
   • Click Advanced system settings on the left pane.
3. Navigate to the Advanced tab in the System Properties dialog box. Click on the Settings button under Startup and Recovery.
4. Next, expand the drop-down menu for Write debugging information and choose Kernel memory dump. Then, press OK.
5. Now navigate to the Start menu and click on the Windows Kits entry. Choose WinDbg(x64/x86) to proceed.
6. Click on File and select Symbol File Path.
7. Now, type https://msdl.microsoft.com/download/symbols for the Microsoft Symbol Server in the Symbol path section.
8. Click OK and access the File menu again.
9. Choose Open Crash Dump and browse the location you noted in the 9th step.
10. Next, Click Open.
11. Then, type in the command window and press Enter.
12. Once the command is executed, look for <ProblemDriver>.sys under LsaIso.exe.
13. Contact your driver vendor now and then refer them to this Microsoft document for mitigation recommendations for Isolated User Mode (IUM).

If the first step mentioned above did not work for you, then you can take the help of these free tools to check for problematic drivers.

3. Update your drivers

1. Left-click the Start button and select Settings.
2. Then, click on Windows Update and select Advanced options.
3. Choose Optional updates in the next window.
4. Click on Driver Updates, mark the available updates, and click the Download and Install button.

This is a quick alternative to update all the outdated drivers on your device that may prompt this error.

And that’s it on how to fix the Lsalso.exe high CPU usage issue.

For further information on to fix the .exe file if it’s not opening in Windows, you can explore our dedicated guide. If you have any questions or suggestions, do not hesitate to use the comments section below.