Hartmut Birr wrote:
  while looking for the console closing problem,
I've seen that win2k
 calls PsLookupProcessByProcessId very often with a id of 0xffffffff. 
~0 (or -1) is in Win32 (and therefore by extension likely also for NT) the
"pseudo handle" for the current process.
~1 (or -2) is current thread.
/Mike