Windows 10: SysInternals Process Explorer: Are these ALPC permissions normal?

I have a question about the information I am seeing in SysInternals Process Explorer.

If I pick a process, open the lower pane and select View Handles, one of the names of the handles is \RPC Control\OLE
If I right click on \RPC Control\OLE, select Properties and then the Security tab, Anonymous Logon permissions are enabled (allow delete, query state, synchronize)

Is it normal for most processes to have \RPC Control\OLE with Anonymous Logon permissions enabled?
I am also seeing several Account Unknown entries listed in the Security tab for RPC Control.

This is a Windows 10 Home machine, not part of a Workgroup or Domain.

:)

 

Process Explorer 11.0

Microsoft has released Version 11.0 of the free Process Explorer utility which is a more detailed version of Task Manager.

Download

 

Unable to create for Sysinternals "Process Explorer"


Hello @Barefoot, *Smile

Sorry for the late reply. I was dealing with a dead motherboard.

This is what I used below for the Add arguments field at step 8 to have the shortcut created at step 13 to run elevated.

*Arrow /c start "Process Explorer" "C:\Users\\Desktop\ProcessExplorer\procexp.exe"

Substitute Process Explorer from above with whatever you named the task at step 3 instead.

Substitute C:\Users\\Desktop with the path to your procexp.exe file instead.

 

*SOLVED*Where can I get Task Manager for Windows? NOT process Explorer.

You might want to use AutoRuns to modify your startup items. It is made by the same people as Process Explorer, and it is a very nice little tool.

Autoruns for Windows - Windows Sysinternals

It is made by the same person that made Process Explorer.