Edit

Share via

Enable debugging of Win32 subsystem

  • Article

Note

Starting in Windows 10, CSRSS is a protected process and can only be debugged in kernel mode.

The Enable debugging of Win32 subsystem flag debugs the Client Server Run-time Subsystem (csrss.exe) in the NTSD debugger.

Abbreviation

d32

Hexadecimal value

0x20000

Symbolic Name

FLG_ENABLE_CSRDEBUG

Destination

System-wide registry entry

Comments

NTSD debugs the process by using the command ntsd -d -p -1.

This flag is effective only when the Debug initial command flag (dic) or the Debug WinLogon flag (dwl) is also set.

For details on NTSD, see Debugging Using CDB and NTSD.