Forum Discussion

Yarisyoyo's avatar
Yarisyoyo
Bronze Contributor
Aug 26, 2025

Is the security system of Windows 11 and ntoskrnl functioning normally in Task Manager?

There is a Secure System process in Task Manager. When I click on it, it shows ntoskrnl, and it is classified as WINDOWS in all capital letters (others are usually in lowercase). Is this normal? I don't know if I'm overthinking it.

 

2 Replies

  • Zachariahh's avatar
    Zachariahh
    Iron Contributor
    • You can right-click the ntoskrnl.exe process in Task Manager and select Open file location.
    • It should be located in C:\Windows\System32.
    • If it's somewhere else, that could be suspicious.
  • AAbner's avatar
    AAbner
    Iron Contributor

    ntoskrnl.exe is a normal Windows kernel process. Security-related items are typically security services. As long as CPU/memory usage remains within normal limits (<5%), there is no need for concern.

Resources