Session Manager Subsystem
Session Manager Subsystem, or smss.exe, is a component of the Microsoft Windows NT family of operating systems, from Windows NT 3.1 to Windows 7 and Windows Server 2008 R2. It is executed during the startup process of those operating systems. At this time it:
- Creates environment variables.
- Starts the kernel and user modes of the Win32 subsystem. This subsystem includes win32k.sys (kernel-mode), winsrv.dll (user-mode), and csrss.exe (user-mode). Any other subsystems listed in the Required value of the HKLM\System\CurrentControlSet\Control\Session Manager\SubSystems Registry key are also started.
- Creates DOS device mappings (e.g. CON:, NUL:, AUX:, COM1:, COM2:, COM3:, COM4:, PRN:, LPT1:, LPT2:, LPT3:, and drive letters) listed at the HKLM\System\CurrentControlSet\Control\Session Manager\DOS Devices registry key. This can be used to create permanent subst drives.
- Creates virtual memory paging files.
- Starts winlogon.exe, the Windows logon manager.
After the boot process is finished, the program resides in memory and can be seen running in the Windows Task Manager. It then waits for either winlogon.exe or csrss.exe to end else Windows will shut down. If the processes do not end in an expected fashion, smss.exe may hang the system.
smss.exe has the following behavior with regard to vendor-determinate system and user privacy compromise:
- After every login of a user, smss.exe can be seen trying to "phone home", for reasons undisclosed by Microsoft. This behavior becomes visible only if that user runs a firewall such that this firewall will conceal less from him than the Windows builtin Microsoft Firewall does. Nothing detrimental seems to happen if the request from smss.exe to contact outside entities is denied.
||Please be aware that the same behavior could also be the effect of malware. Always be sure to use a clean system.|
- Matt Pietrek (1996). "Poking Around Under the Hood: A Programmer's View of Windows NT 4.0". Microsoft Systems Journal. Retrieved 2009-06-14.
- Microsoft Corporation (2007). "Default Processes in Windows 2000". Microsoft Corporation. Retrieved 2009-06-14.