Anhui Zhao Kai readers wrote: "I recently downloaded a quick shutdown software, this software is very powerful, almost shut down the computer with a blink of an eye. Many people say that this software may destroy the data, but they did not say The corresponding basis. I am very contradictory now, I have a good thing, but I dare not use it. Master Dong, I hope you can give an authoritative statement to eliminate my doubts." Not only the software mentioned by Zhao Kai readers can Achieving a quick shutdown, and using some techniques can achieve the same purpose, but what will happen to this operation? This time, the teacher invited to the "topic pavilion" to participate in the discussion is quite research on the Windows system, won 2004 Mr. Zhang Kangzong, Microsoft's most valuable expert. As can be seen from the usual experience, after the shutdown operation, the computer will not immediately power off, Windows will have a series of actions such as closing the open program, etc., then what is the process from the execution of the shutdown command to the final power failure? • A normal shutdown of Windows involves multiple components and multiple processes. Let's take a look at the basic process. 1 After the user initiates the shutdown command, the program that initiates the shutdown command will notify the Windows subsystem CSRSS.EXE. After receiving the notification, CSRSS.EXE will do a data exchange with Winlogon.EXE, and then Winlogon.EXE will notify CSRSS.EXE to start shutting down the system. Process. After receiving the notification of Winlogon.EXE, 2CSRSS.EXE will query the user processes that have the top-level window in turn, and let these user processes exit. If a user process does not exit within a default timeout of 5000 milliseconds (which can be set by modifying the registry key HKEY_CURRENT_USERControl PanelDesktop HungAPPTimeout), Windows will display an End Task dialog box asking the user whether to end the task. . By default this dialog will always be displayed without automatically closing. For console programs, the basics are similar, except that Windows uses HKEY_CURRENT_USERControl PanelDesktop WaitToKillAPPTimeout to set the timeout. 3 Then it is the turn to terminate the system process. System processes include SMSS.EXE, Winlogon.EXE, Lsass.EXE, and so on. When Windows terminates the system process, it does not prompt the user if it cannot terminate within the specified time, as it terminates the user process. Instead, it skips the process and performs the termination of the next system process. The timeout period used is the same as the time used in step 2. A normal shutdown of Windows involves multiple components and multiple processes. Let's take a look at the basic process. 1 After the user initiates the shutdown command, the program that initiates the shutdown command will notify the Windows subsystem CSRSS.EXE. After receiving the notification, CSRSS.EXE will do a data exchange with Winlogon.EXE, and then Winlogon.EXE will notify CSRSS.EXE to start shutting down the system. Process. After receiving the notification of Winlogon.EXE, 2CSRSS.EXE will query the user processes that have the top-level window in turn, and let these user processes exit. If a user process does not exit within a default timeout of 5000 milliseconds (which can be set by modifying the registry key HKEY_CURRENT_USERControl PanelDesktop HungAPPTimeout), Windows will display an End Task dialog box asking the user whether to end the task. . By default this dialog will always be displayed without automatically closing. For console programs, the basics are similar, except that Windows uses HKEY_CURRENT_USERControl PanelDesktop WaitToKillAPPTimeout to set the timeout. 3 Then it is the turn to terminate the system process. System processes include SMSS.EXE, Winlogon.EXE, Lsass.EXE, and so on. When Windows terminates the system process, it does not prompt the user if it cannot terminate within the specified time, as it terminates the user process. Instead, it skips the process and performs the termination of the next system process. The timeout period used is the same as the time used in step 2.