How to debug WinLogon.exe?

You can use the GFlags.exe application to enable debugging options for Window Login application.

GFlags.exe ships with the Windows Debugging tools. (Get Windows Debugging Tools here.)

Run the GFlags.exe and check the options: Debug WinLOGON, Enable debugging of Win32 SubSystem and Debug initial command.

This results in running the Winlogon in the Windows Symbolic Debugger (Ntsd.exe) with the -d parameter, which directs its output to the kernel debugger console. (Refer https://technet2.microsoft.com/WindowsServer/en/library/6a183942-57b1-45e0-8b4c-c546aa1b8c471033.mspx?mfr=true for more details)

Note that you should setup a kernel mode debugging session for this to be effective.

Comments

  • Anonymous
    April 19, 2008
    PingBack from http://www.basketballs-sports.info/better-basketball/?p=229

  • Anonymous
    July 18, 2011
    This is the first blog (?) (I'm a novice) that has suggested something that I understand and think I can use. Finally someone with some common sense. Bless you Gopalakrishna.