If its found in your Windows\System32 directory, then its legit, its the Local Security Authentication Server Service, its an integral part of the security operation of W2K3, if LSASS.EXE is found to be running from any other directory then its a virus!
"I'm certifiable, not certified. It just means my answers are from experience...not a book