Debug initial command

The Debug initial command flag debugs the Client Server Run-time Subsystem (CSRSS) and the WinLogon process.

Note

Starting in Windows 10, CSRSS is a protected process and can only be debugged in kernel mode.

Abbreviation	dic
Hexadecimal value	0x4
Symbolic Name	FLG_DEBUG_INITIAL_COMMAND
Destination	System-wide registry entry, kernel flag

Comments

NTSD debugs the processes (using the command ntsd -d), but control is redirected to the kernel debugger.

For details on NTSD, see Debugging Using CDB and NTSD.

See Also

Enable debugging of Win32 subsystem