Debug initial command
The Debug initial command flag debugs the Client Server Run-time Subsystem (CSRSS) and the WinLogon process.
Note
Starting in Windows 10, CSRSS is a protected process and can only be debugged in kernel mode.
Abbreviation |
dic |
Hexadecimal value |
0x4 |
Symbolic Name |
FLG_DEBUG_INITIAL_COMMAND |
Destination |
System-wide registry entry, kernel flag |
Comments
NTSD debugs the processes (using the command ntsd -d), but control is redirected to the kernel debugger.
For details on NTSD, see Debugging Using CDB and NTSD.