Critical System Services
Critical system services cannot be stopped and restarted by the Restart Manager without a system restart. Updates to any file or resource in use by one of these services requires a system restart.
To determine whether a process is a critical system service.
- Register the process using the RmRegisterResources function.
- Call the RmGetList function to get the RM_PROCESS_INFO structure.
- The ApplicationType member of the returned RM_PROCESS_INFO structure contains a RM_APP_TYPE enumeration value. This value is set to RmCritical for a critical system process.
Critical system services include smss.exe, csrss.exe, wininit.exe, logonui.exe, lsass.exe, services.exe, winlogon.exe, System, svchost.exe with RPCSS, and svchost.exe with Dcom/PnP.