Help! "system thread"! in Win 2K

NTDEV
1

Hi there,
What threads does the “system process” in Win2K include?
Are all the “system threads” created by the “system process”?
Anyway, what is the mechanism of “system thread” in Win2K?

I am just a novice in system programing.
Who would like to help me?
Thank you so much.

Bigandy

2

Hello Bigandy,
If you installed DDK, then read about System Thread API starting with “PsCreateSystemThread”.
Regards, Vasili

Bigandy wrote:Hi there,
What threads does the “system process” in Win2K include?
Are all the “system threads” created by the “system process”?
Anyway, what is the mechanism of “system thread” in Win2K?

I am just a novice in system programing.
Who would like to help me?
Thank you so much.

Bigandy

—
You are currently subscribed to ntdev as: xxxxx@yahoo.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

---------------------------------
Do you Yahoo!?
Yahoo! Platinum - Watch CBS’ NCAA March Madness, live on your desktop!

3

> What threads does the “system process” in Win2K include?

Any threads created by PsCreateSystemThread.
Worker threads which service the ExQueueWorkItem callbacks, this
includes the Cc’s lazy writer.
Some threads which do some internal housekeeping.

Anyway, what is the mechanism of “system thread” in Win2K?

Same thread as usually, but belonging to System process. System
process cannot have any user-mode code (it can have data), so, system
thread cannot return to user mode. Since things like thread
termination and suspend are done at this moment (by APC delivery), the
system thread cannot be terminated and suspended, it can only
terminate or suspend itself.

System threads run under LocalSystem security context and are
unaffected by termination of any process.

Max