Microsoft Windows Internals (4th Edition): Microsoft Windows Server 2003, Windows XP, and Windows 2000

Index

[SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X]

data

    caching [See cache manager]

    compression [See data compression, NTFS]    configuration [See registry]     EFS decryption

     EFS encryption     hive format     IPSec

     NTFS data streams

     NTFS recovery and user

     redundancy 2nd 3rd

    structures [See data structures]

    types [See data types] data compression, NTFS     compressing nonsparse data     compressing sparse data     sparse files 2nd Data Decryption Field (DDF) Data Encryption Standard (DES)

data execution prevention (DEP) 2nd Data Protection API

Data Recovery Field (DRF)data redundancy     multipartition volume

     NTFS 2nd

data structures

     cache

     crash dump files 2nd     DDK header files

     dispatcher object     file object

     NTFS     objects vs.

     process

     section object     thread 2nd     viewing type information for kernel

data types

     Active Directory

     hive cell

     LDM

     Lsass policy

     Mount Manager

     multiprocessor thread scheduling dispatcher

     object manager

     page frame number (PFN)

     registry

     SAM

     service

     thread-scheduling dispatcher

data-link layer, OSI model datagrams DbgPrint function

Dbgview.exe tool DCOM (Distributed Component Object Model) API Dcpromo.exe tool

DDK [See Device Driver Kit (DDK)]

deadlocks

     detecting

     hung or unresponsive systems

debug objects Debug programs privilege DebugActiveProcess function debugging [See also errors; exceptions; troubleshooting]     booting into debugging mode     breakpoints 2nd     copy-on-write breakpoint support

    crashes [See crash dump analysis]     heap manager features

     kernel [See also kernel debugger]     pageheap tool     process creation 2nd

     unhandled exceptions

     user-mode exceptions and debugger ports

     Windows debug versions

DecryptFile function decryption process, EFS

default cluster factor, NTFS default exception handlers

default process heap default security

Defense Advanced Research Projects Agency (DARPA)

deferred procedure calls (DPCs)     device drivers     interrupts

     IRP interrupt servicing

     objects

     system processes

deferred ready state, thread 2nd

DefineDosDevice function

Definition Language

defragmentation

     logical prefetcher

     NTFS

     page file

delayed close table

delayed worker threads

deleting

     delayed delete operations     executive object delete method     executive objects

     key control blocks demand zero pages 2nd 3rd 4th demand-paging algorithm 2nd

dependencies

     binding

     service

Dependency Walker tool (Depends.exe)

     viewing image subsystem type     viewing Ntoskrnl.exe and HAL image dependencies dereference segment threaddesign goals     NTFS     Windows     Windows I/O system

desired access rights, executive object Desktop executive object type

desktops     process creation     Winlogon

DESX encryption algorithm

Development Kit (SDK) SeAccessCheck function

Device directory 2nd

Device Driver Kit (DDK)     blue screen stop codes

     executive functions     PCR and PRCB structures

     tools device drivers 2nd [See also services]

     APCs

     auto-start     boot options 2nd     checked build versions

     control of device power state

     crashes

    disk drivers [See disk drivers]

     driver objects and device objects

     driver power operation

     Driver Verifier 2nd [See also Driver Verifier]

     executive functions

     graphics

     hung or unresponsive systems

     I/O requests to layered

     I/O system

     initialization

    installation files [See INF files]

     interrupt objects     kernel mode     layered

     levels of Plug and Play support     loading, in safe mode     locking memory

     mapping System process system threads to

     object access

     opening devices using file objects

     Plug and Play loading, initialization, and installation of

     Plug and Play support     querying for Windows versions     Recovery Console     registry 2nd 3rd     security     spinlocks     starting 2nd

     structure     synchronous I/O requests to single-layered

     types 2nd     uninstalling     user-mode Plug and Play manager and installation of

     versions of

     viewing dispatch routines

     viewing installed

     viewing loaded driver list     Windows Driver Model (WDM) 2nd

     WMI device enumeration, Plug and Play

device I/O control operations device ID and device instance ID (DIID)

device interrupt request level (DIRQL)

device IRQLs     Device Manager determining which HAL is running     disabling drivers

     registry

     viewing device tree

     viewing devnode information

     viewing driver power mappings

     viewing multiprocessor-specific support files on Windows 2000

     viewing resource assignments

device objects

     device drivers

     file system driver

     Provider

     viewing shadow volumes

     viewing System Restore filter

     viewing TCP/IP

device power states     driver control     mapping system power states to

     power manager device stacks device tree

device-specific modules (DSMs)

DeviceIoControl function

     change journal

     data compression 2nd

     link tracking     NetBIOS     reparse points     system components DeviceMap structuredevices     levels of Plug and Play support

    objects [See device objects]     opening, using file objects

    power states [See device power states]devnodes     device objects

     device tree

     driver loading

dial-up remote access

digital signatures, device driver direct I/O

direct memory access (DMA) 2nd 3rddirectories

     ?? 2nd 3rd 4th 5th     Device 2nd

     device object

     DosDevices     encryption 2nd     Global?? 2nd 3rd

     initialization

     NTFS change logging

     NTFS extensions

     NTFS root

     object directory objects

     page

     shadow copies for shared

     standard object

     system

     System Restore

     WMI 2nd

Directory Service, Windows 2000

dirty pages 2nd 3rd

dirty sector arrays, hive DisconnectEx function discretionary access control 2nd 3rd

discretionary access-control lists (DACLs)     assignment     security descriptors

Disk Defragmenter tool

disk device objects

disk drivers [See also device drivers]

Disk Management MMC snap-in

     creating mirrored volumes     Disk Probe tool     Diskmon tool     DMIO driver     formatting volumes 2nd     partitions and volumes     recursive mount points

     spanned volumes     Virtual Disk Service

Disk.sys class driver Diskpart tool 2nd DiskPerf (Disk Performance) driver

Diskraid tool

disks [See also storage management]

     basic 2nd

     crash dump files and space on     defined

    directories [See directories]     Driver Verifier disk integrity verification

    drivers [See disk drivers]     dynamic 2nd

     LDM disk entries

     network drive letters    recovery [See recovery, NTFS]    volumes [See volume management; volumes]

     x86 and x64 preboot

dismount operations, file system driver

dispatch code

dispatch interrupts

dispatch routines, device driver 2nd 3rd

dispatcher database

     multiprocessor thread scheduling

     thread scheduling

dispatcher objects

     data structures

     executive objects vs.

     kernel

     KTHREAD blocks

     signaled state     waiting for dispatcher spinlocks

dispatcher, thread display driver boot options 2nd display I/O, Windows subsystem and

Distributed Component Object Model (DCOM) API

distributed computing environment (DCE) standard

Distributed File System (DFS)

Distributed Management Task Force (DMTF)

DLLs (dynamic link libraries)     authentication     AuthZ     DLL hell 2nd     subsystem 2nd [See also environment subsystems]     Windows and DMA checking option, Driver Verifier

DMAdmin tool Dmboot.sys

Dmconfig.dll DMIO device driver volume manager 2nd Dmload.sys

dollar sign ($)

Domain Name System (DNS)

     NetBIOS

     network name resolutiondomains

     Active Directory     local system account

     logons     SIDs for 2nd

DosDevices directory

DPC objects [See also deferred procedure calls (DPCs)] DPC/dispatch level IRQL 2nd 3rd DPC/dispatch-level IRQLs 2nd 3rd

Dr. Watson tool

drive letters, network

driver groups

driver objects

     device drivers

     viewing registered fast I/O routines

driver signing 2nd

Driver Verifier

     configuration and initialization

     deadlock detection 2nd

     device driver bugs 2nd

     disabling large pages using

     force IRQL checking option

     I/O-related options     low resources simulation option     pool tracking option 2nd

     special pool option 2nd     system memory pools     verification levels

Driver Verifier Manager 2nd 3rd

     Driver.cab file

driver-signing policy

DriverEntry routine

drivers [See device drivers; NDIS (Network Driver Interface Specification) drivers; protocol drivers]     Drivers.exe tool Dumprep.exe tool DuplicateHandle function DVD-ROM file system formats dynamic disks 2nd [See also disks]     basic disks vs.

     DMIO driver volume manager     LDM and GPT or MBR-style partitioning

     LDM database     Logical Disk Manager (LDM) partitioning     viewing LDM database

dynamic link libraries (DLLs) [See DLLs (dynamic link libraries)]

dynamic WMI classes

dynamic worker threads