SMSS.EXE generates high utilization, that's what it does.
Seriously though, a google search shows that it's the session manager subsystem for managing user sessions on Terminal Services. Do you have remote desktop enabled? If so, do you really need it enabled?