Jump to content

Session Manager Subsystem

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by 2601:600:8500:4311:b18e:c844:a071:2e74 (talk) at 23:07, 22 December 2016. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Session Manager Subsystem, or smss.exe, is a component of the Microsoft Windows NT family of operating systems, starting in Windows NT 3.1. It is executed during the startup process of those operating systems (it is the first user-mode process started by the kernel). At this time it:

  • Creates environment variables.
  • Starts the kernel and user modes of the Win32 subsystem. This subsystem includes win32k.sys (kernel-mode), winsrv.dll (user-mode), and csrss.exe (user-mode).[1] Any other subsystems listed in the Required value of the HKLM\System\CurrentControlSet\Control\Session Manager\SubSystems Registry key are also started.
  • Creates DOS device mappings (e.g. CON:, NUL:, AUX:, COM1:, COM2:, COM3:, COM4:, PRN:, LPT1:, LPT2:, LPT3:, and drive letters) listed at the HKLM\System\CurrentControlSet\Control\Session Manager\DOS Devices registry key. This can be used to create permanent subst drives.
  • Creates virtual memory paging files.
  • Starts winlogon.exe, the Windows logon manager.[2]

After the boot process is finished, the program resides in memory and can be seen running in the Windows Task Manager. It then waits for either winlogon.exe or csrss.exe to end else Windows will shut down. If the processes do not end in an expected fashion, smss.exe may hang the system.[2]

References

  1. ^ Matt Pietrek (1996). "Poking Around Under the Hood: A Programmer's View of Windows NT 4.0". Microsoft Systems Journal. Retrieved 2009-06-14.
  2. ^ a b Microsoft Corporation (2007). "Default Processes in Windows 2000". Microsoft Corporation. Retrieved 2009-06-14.

Further reading

See also