August 2000
Intermediate to advanced
800 pages
21h 5m
English
Content preview from Microsoft® Windows® 2000 Security Handbook
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Global Flags
Windows 2000 has several global flags that govern some systemwide behavior traits. The Session Manager initializes the global flags at boot from the value set in the Registry path:
HKLM\System\CurrentControlSet\Control\SessionManager\GlobalFlag
By default, this Registry value is 0, indicating that there are no global flags set.
The majority of the flags are used for internal Microsoft debugging and are therefore undocumented. Some of the flags are very powerful and have interesting security implications. For example, the getadmin program took advantage of a missing kernel check to set the global debug flag.
Other flags enable tracing of memory use, library loading, and other debugging functions. The GFLAGS.EXE program in the Resource ...