This setting Specifies executable files to be run by Winlogon in the system context, and can be modified by simply editing the value. 

Key:[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name: System
Data Type: REG_SZ
Data:(default = lsass.exe)

 

Back to Windows Tweaks