This note was published on TheThin.net by Jim Kenzig
Below are the various states that a process can be in while
connected to WinFrame or MetaFrame as seen in WFADMIN or MFADMIN.
Details:
lpcreply
Waiting for an LPC reply from a server process. Internal WIN32 APIs are implemented with LPC.
lpcrecv
Usually the server side waiting to receive LPC requests from
client processes.
run
Currently executing.
freepage
Waiting for a memory page. In page fault handler. Could also
be the modified page writer thread.
exec
Waiting for a Windows NT object; low level event, semaphore,
etc.
userreq
A sleep or delay call.
These status indicators are kernel-mode states that a
Windows NT process can occupy. Windows NT was designed with an internal client-server model where processes communicate with the executive (kernel) in much the same way that a client database application communicates with its database
server. LPC means "local procedure call," something a process might do to request services from the hardware. I'm not sure, but I think that the difference between exec and run is that only one active process per processor can be in the run state, meaning that it's what the processor is
currently working on.Threads in the exec state are loaded into memory but not necessarily active.