Flags of svchost

From this answer, the -k flag is to specify the group name of svchost process, but I find that on my system, the -p option is used also in many services. For example the DPS (Diagnostic Policy Service) is started by

C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p

So what does -p mean?

1 Answer

There is a detail write-up about this flag, citing it verbatim:

P flag enforces different policies: DynamicCodePolicy, BinarySignaturePolicy and ExtensionPolicy.