50% found this document useful (2 votes)
762 views2 pages

Windows Kernel Registry Settings

The document is a Windows Registry file that contains various configuration settings for the system's kernel and session manager. It includes parameters for DPC (Deferred Procedure Call) settings, timer configurations, and interrupt handling. The settings are specified in hexadecimal and DWORD formats, indicating their respective values and functionalities within the Windows operating system.

Uploaded by

eshak20157
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
50% found this document useful (2 votes)
762 views2 pages

Windows Kernel Registry Settings

The document is a Windows Registry file that contains various configuration settings for the system's kernel and session manager. It includes parameters for DPC (Deferred Procedure Call) settings, timer configurations, and interrupt handling. The settings are specified in hexadecimal and DWORD formats, indicating their respective values and functionalities within the Windows operating system.

Uploaded by

eshak20157
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

Windows Registry Editor Version 5.

00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel]
"DpcWatchdogProfileOffset"=dword:00000000
"ObUnsecureGlobalNames"=hex(7):6e,00,65,00,74,00,66,00,78,00,63,00,75,00,73,00,\
74,00,6f,00,6d,00,70,00,65,00,72,00,66,00,63,00,6f,00,75,00,6e,00,74,00,65,\
00,72,00,73,00,2e,00,31,00,2e,00,30,00,00,00,53,00,68,00,61,00,72,00,65,00,\
64,00,50,00,65,00,72,00,66,00,49,00,50,00,43,00,42,00,6c,00,6f,00,63,00,6b,\
00,00,00,43,00,6f,00,72,00,5f,00,50,00,72,00,69,00,76,00,61,00,74,00,65,00,\
5f,00,49,00,50,00,43,00,42,00,6c,00,6f,00,63,00,6b,00,00,00,43,00,6f,00,72,\
00,5f,00,50,00,75,00,62,00,6c,00,69,00,63,00,5f,00,49,00,50,00,43,00,42,00,\
6c,00,6f,00,63,00,6b,00,5f,00,00,00,00,00
"SeTokenSingletonAttributesConfig"=dword:00000003
"obcaseinsensitive"=dword:00000001
"EnablePerCpuClockTickScheduling"=dword:00000001
"EnableTickAccumulationFromAccountingPeriods"=dword:00000000
"EAFModules"=" "
"DpcTimeout"=dword:00000000
"DpcSoftTimeout"=dword:00000000
"DpcCumulativeSoftTimeout"=dword:00000000
"DpcWatchdogPeriod"=dword:00000000
"DpcRequestRate"=dword:00000001
"DpcTimeLimit"=dword:00000000
"DpcTimeCount"=dword:000003e8
"InterruptRequest"=dword:00000001
"IdleHalt"=dword:00000000
"ClockOwner"=dword:00000000
"PendingTickFlags"=dword:00000000
"MaximumDpcQueueDepth"=dword:00000001
"DpcWatchdogProfileSingleDpcThreshold"=dword:00000000
"DpcWatchdogProfileCumulativeDpcThreshold"=dword:00000000
"DpcLastCount"=dword:000003e8
"DpcRoutineActive"=dword:00000001
"QuantumEnd"=dword:00000001
"InterruptLastCount"=dword:00000001
"InterruptRate"=dword:00000001
"ReadyThreadCount"=dword:000007d0
"KeSpinLockOrdering"=dword:00000001
"PriorityState"=dword:00000001
"DistributeTimers"=dword:00000001
"DisableDynamicTick"=dword:00000000
"TimerInterruptDelay"=dword:00000001
"MinimumIncrement"=dword:00000004
"MaximumIncrement"=dword:00001388
"PowerOffFrozenProcessors"=dword:00000000
"DisableLightWeightSuspend"=dword:00000001
"IdealDpcRate"=dword:00000001
"MinimumDpcRate"=dword:00000001
"MaxDynamicTickDuration"=dword:0000000a
"MaximumSharedReadyQueueSize"=dword:00000080
"BufferSize"=dword:00000020
"IoQueueWorkItem"=dword:00000020
"IoQueueWorkItemToNode"=dword:00000020
"IoQueueWorkItemEx"=dword:00000020
"IoQueueThreadIrp"=dword:00000020
"ExTryQueueWorkItem"=dword:00000020
"ExQueueWorkItem"=dword:00000020
"IoEnqueueIrp"=dword:00000020
"XMMIZeroingEnable"=dword:00000000
"UseNormalStack"=dword:00000001
"UseNewEaBuffering"=dword:00000001
"StackSubSystemStackSize"=dword:00010000
"InterruptSteeringDisabled"=dword:00000001
"InterruptSteeringFlags"=dword:00000000
"SplitLargeCaches"=dword:00000001
"ThreadDpcEnable"=dword:00000000
"GlobalTimerResolutionRequests"=dword:00000001
"DisableExceptionChainValidation"=dword:00000001
"DisableControlFlowFlowGuardExportSuppression"=dword:00000001
"DisableControlFlowFlowGuardXgf"=dword:00000001
"SerializeTimerExpiration"=dword:00000001
"ForceForegroundBoostDecay"=dword:00000000
"VerifierDpcScalingFactor"=dword:00000001
"MaximumKernelWorkerThreads"=dword:000007d0
"ClockTimerPerCpu"=dword:00000001
"ClockTimerHighLatency"=dword:00000000
"ClockTimerAlwaysOnPresent"=dword:00000001
"MitigationOptions"=hex:22,22,22,22,22,22,22,22,22,22,22,22,22,22,22,22,00,22,\
22,22,22,22,22,22
"MitigationAuditOptions"=hex:22,22,22,22,22,22,22,22,22,22,22,22,22,22,22,22,\
00,22,22,20,22,22,22,22
"CoalescingTimerInterval"=dword:00000000
"Capabilities"=dword:00000010
"DisableTsx"=dword:00000001
"KernelSEHOPEnabled"=dword:00000000
"DisableOverlappedExecution"=dword:00000000
"RealTimeIsCritical"=dword:00000001
"DpcQueueDepth"=dword:00000001
"EnableWerUserReporting"=dword:00000000
"SeLpacEnableWatsonReporting"=dword:00000000
"CacheAwareScheduling"=dword:00000001
"DisableAutoBoost"=dword:00000001
"KernelSEHOpenByHandle"=dword:00000000
"LowPriorityBackgroundWorkItemQueue"=dword:00000000
"TimeIncrement"=dword:00000006
"AdditionalClockTicksInProcessor"=dword:0000000e

Common questions

Powered by AI

Enabling 'UseNewEaBuffering' allows Windows to utilize improved buffering mechanisms when handling Extended Attributes, potentially enhancing performance and reliability in file operations. This setting can reduce operational latency and prevent potential attribute corruption, aligning with newer file systems that support more complex attribute management .

The 'DisableDynamicTick' setting in the Windows Registry affects how the kernel's clock ticks in sleep state. When set to '1', it disables the dynamic ticks feature, causing the timer tick to operate continuously. This may slightly reduce power efficiency but can ensure better system responsiveness and accuracy in time-sensitive applications .

Setting 'DisableExceptionChainValidation' affects the validation of exception chains, which could open up vulnerabilities to Structured Exception Handling (SEH) overwrite attacks. This could lead to exploited exception handling structures, indirectly allowing arbitrary code execution in scenarios where malicious software manipulates exception handlers .

The 'DpcRequestRate' setting defines the frequency at which DPCs are checked for execution. Adjusting this rate can impact how quickly DPCs are processed, changing the responsiveness of the system to hardware interrupts. Lower rates might cause higher latencies in DPC handling, whereas higher rates ensure more timely execution of DPC operations, potentially increasing overall system load .

'MaximumKernelWorkerThreads' determines the upper limit of worker threads that the kernel can dedicate to serving I/O operations and background tasks. In a server environment, setting this appropriately ensures sufficient resources are allocated for concurrent operations, enhancing throughput and ensuring tasks do not stall due to thread insufficiency, which is critical for maintaining high server performance and efficiency .

Enabling 'CacheAwareScheduling' optimizes process scheduling by taking into account the cache hierarchy, potentially improving cache hit rates and reducing cache misses. This results in enhanced performance for multi-threaded applications that heavily depend on data locality and efficient cache usage .

Specifying values in 'ObUnsecureGlobalNames' indicates objects that are exempt from security checks, potentially exposing the system to unauthorized access or privilege escalation. It can be a vector for attacks if misconfigured, especially if sensitive objects or services are included, thus compromising system integrity .

Enabling 'RealTimeIsCritical' prioritizes real-time threads, ensuring they receive the necessary processor time without interruptions by less critical processes. This can significantly improve the performance of applications requiring strict timing constraints. However, it might starve non-real-time processes, leading to decreased overall system responsiveness if not managed properly .

The 'DpcWatchdogPeriod' setting defines the time, in seconds, that the watchdog timer waits before considering a DPC (Deferred Procedure Call) as hung or stalled. A non-zero value helps in identifying unresponsive hardware or drivers, enhancing system stability by allowing for recovery mechanisms to act in case of prolonged DPC durations .

When 'InterruptSteeringDisabled' is set to '1', it disables the feature that allows for dynamic steering of interrupts across multiple CPU cores. This can lead to uneven load distribution on the processor cores, possibly reducing system efficiency in handling interrupts, especially in high-load environments where interrupt distribution is crucial .

You might also like