Security Accounts Manager (SAM) Database manages users and their respective passes on windows each stores password is hashed which LSA uses to verify auth SAM file is stored in registry at HKEY_LOCAL_MACHINE\SAM