Edit

Share via

Debug initial command

  • Article

The Debug initial command flag debugs the Client Server Run-time Subsystem (CSRSS) and the WinLogon process.

Note

Starting in Windows 10, CSRSS is a protected process and can only be debugged in kernel mode.

Abbreviation

dic

Hexadecimal value

0x4

Symbolic Name

FLG_DEBUG_INITIAL_COMMAND

Destination

System-wide registry entry, kernel flag

Comments

NTSD debugs the processes (using the command ntsd -d), but control is redirected to the kernel debugger.

For details on NTSD, see Debugging Using CDB and NTSD.

See Also

Enable debugging of Win32 subsystem