Global Flags
Windows 2000 has several global flags that govern some systemwide behavior traits. The Session Manager initializes the global flags at boot from the value set in the Registry path:
HKLM\System\CurrentControlSet\Control\SessionManager\GlobalFlag
By default, this Registry value is 0, indicating that there are no global flags set.
The majority of the flags are used for internal Microsoft debugging and are therefore undocumented. Some of the flags are very powerful and have interesting security implications. For example, the getadmin program took advantage of a missing kernel check to set the global debug flag.
Other flags enable tracing of memory use, library loading, and other debugging functions. The GFLAGS.EXE program in the Resource ...
Get Microsoft® Windows® 2000 Security Handbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
