Making things even faster?
So I've been sitting an airport for 5 hours and I decided to do a little more digging on possibly making things even faster (take a look at the bootvis trace results in a previous post).
The SMSS.EXE process is the session manager. Not sure if there is anything we can do with this one... perhaps the XPE analogue can be used here?
CSRSS.EXE is the Client/Server Runtime Server Subsystem... this one look like it controls part of the graphical interface for windows, it also creates and deletes threads so I think we need it...
LSASS.EXE <from a microsft website>
Somewhere on the MSDN XPE website it states that minlogon does not use LSA, the question is do any other applications need or use it? If not let's get rid of it! I won't be able to attempt this until I return home (another week). Perhaps someone else would like to give it a try.
The local security authentication (LSA) subsystem server component generates the process that authenticates users for the Winlogon service. The LSA also responds to authentication information received from the Graphical Identification and Authentication (GINA) Msgina.dll component. If authentication is successful, Lsass.exe generates the user's access token, which starts the initial shell. Other processes that the user initiates inherit this token.