Microsoft Windows Internals (4th Edition): Microsoft Windows Server 2003, Windows XP, and Windows 2000
| < Day Day Up > |
Index[SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] packet filtering API packets, NDIS PAE (Physical Address Extension) 2nd 3rd 4th 5th page coloring page directories page directory entries (PDEs) 2nd page directory index page directory pointer table 2nd page fault handling collided page faults crashes file I/O 2nd in-paging I/O invalid page table entries memory manager page fault reasons page files prototype page table entries page files [See also pages] crash dump files invalid PTEs kernel memory dumps and size of modified page writer page fault handling page file backed sections page file quota pages in page frame number (PFN) database data structures low and high memory notification memory management memory optimizers modified page writer page list dynamics page states valid PTEs viewing viewing page fault behavior page granularity virtual memory functions page list dynamics 2nd page maps page table entries (PTEs) address translation and page tables invalid [See also page fault handling] page frame number (PFN) database 2nd page tables prototype system system space and system valid [See address translation] page tables page frame number (PFN) database page table entries 2nd page writer threads, memory manager's modified and mapped process virtual address spacepaged memory pool contents hive size limits hives system space Pagedefrag tool pageheap toolpages copy-on-write protection dirty and modified page writer initial process address space large and small locking, into physical memory memory manager task modified [See page files] no execute protection 2nd page states prototype PTEs and shared reserving and committing system working set paging [See also pages] data to disk initialization Ntldr parameter checking, heap manager parameter marshaling, RPC parent processes 2nd parse method, executive object 2nd partial quantum decay partition entries, LDMpartition manager disk drivers FtDisk driver partition tables boot process defined Master Boot Records partitions boot process boot sectors and format of defined GUID Partition Table (GPT) Logical Disk Manager (LDM) and dynamic disks Master Boot Record (MBR) MS-DOS names partition manager 2nd primary soft vs. hard types of volumes vs. passive IRQLs passwords authentication 2nd [See also authentication] registry servicepaths key control blocks 2nd MPIO drivers registry hive service executables trusted path functionality PC card remove/eject device utility PC-phone calls PCI devices boot option Pciidex.sys and Pciide.sys PE (Preinstallation Environment) boot option PEB (process environment block) EPROCESS block process creation processes peer-to-peer network connectivity Pendmoves tool per-file cache data structures per-processor look-aside list, cache manager per-user class registration data per-user preferences, registry and per-user volume quotas, NTFSperformance client vs. server Windows versions lazy IRQL Performance Options dialog box 2nd registry 2nd scalability Windows design goal performance counters cache flush cache manager mapping and pinning activity cache manager MDL activity cache physical size and page fault cache read activity copy-on-write faults determining maximum memory pool sizes fast I/O intelligent read-ahead lazy writer memory usage mode-related monitoring memory pool usage page file performance monitoring with Performance tool [See also Performance tool] process private committed memory process-related registry 2nd session system memory pool system service activity system working set thread-related Performance Data Helper API Performance Monitor watching foreground priority boosts and decays watching priority boosts for CPU starvation watching priority boosts on GUI threads Performance Options dialog box 2nd Performance tool [See also performance counters] accounting for physical memory use determining page table entries (PTEs) examining memory usage features tracing TCP/IP activity viewing job objects viewing kernel mode and user mode activity viewing process CPU utilization viewing process working set sizes viewing processes viewing system page table entries (PTEs) viewing system service activity viewing thread activity watching cache flushes watching mirrored volume I/O operations watching thread-scheduling state changes permanent objects permissions editors, warning about GUI Pfmon tool Phase1Initialization function phone calls Physical Address Extension (PAE) 2nd 3rd 4th 5th physical device objects (PDOs) physical layer, OSI model physical memory [See also working sets] accounting for address translation [See address translation] Address Windowing Extensions kernel variables locking pages in mapping virtual memory to maximum page states [See page frame number (PFN) database] physical size, cache PICs (Programmable Interrupt Controllers) pinning interface, cache manager PipeList tool placement policy, working setPlatform Software Development Kit (SDK) documentation Gflags tool [See Gflags tool] Pstat tool [See Pstat tool] tools Windows Sockets Configuration tool Winobj tool [See Winobj tool] Plug and Play (PnP) manager capabilities driver loading, initialization, and installation driver Plug and Play support executive FtDisk driver I/O system initialization 2nd IRQLs levels of device and driver Plug and Play support partition manager safe mode boots user-mode, and driver installation Plug and Play drivers 2nd Plug and Play system, registry and Pmon.exe tool PnP_DeviceList function policies device power driver-signing IPSec Lsass policy database resource-allocation system power 2nd polling, registry 2nd pool corruption, Driver Verifier and pool tagging pool tracking Driver Verifier optionPoolmon tool checking page pool usage monitoring memory pool usage troubleshooting pool leakspools, system memory [See system memory pools] PoRegisterDeviceForIdleDetection function PoRequestPowerIrp function port drivers disk layered drivers printer drivers port objects, LPC port/miniport model, FSDs and portability, Windows 2ndports debugger and exception LPC PoSetDeviceBusy function POSIX APCs as subsystem exceptions executive objects filenames fork function NTFS support processes 2nd tools for watching POSIX subsystem start post-splash screen crash or hang problem PostQueuedCompletionStatus function 2nd power consumption, system power states and power dispatch routines, device driver power fail IRQL power manager driver control of device power state driver power operation executive I/O system initialization 2nd system power states and device power states system power-state transitions viewing system power capabilities and policy preboot, x86 and x 2nd [See also boot process] predefined interrupt request levels (IRQLs) preemptive thread scheduling preferences, registry and prefetching application logical prefetcher 2nd looking inside prefetch files watching prefetch file reads and writes PrefetchTracesReady event prefixes, function name Preinstallation Environment (PE) boot option presentation layer, OSI model Previous Versions Client extension primary access tokens primary bus drivers primary partitions 2nd principal names, RPC printer driverspriority boosts after GUI threads wake up after I/O completion after waiting for events and semaphores CPU starvation for foreground threads after waits listening to quantum boosts thread scheduling priority classes, process job objects process creation start command thread priority levelspriority levels examining and specifying process and thread interrupt levels vs. IRQL vs. thread-scheduling real-time thread scheduling private address space, process 2nd private assemblies private cache map structures Private Header sectors, LDM private/public key pairs, EFS [See Encrypting File System (EFS)] PrivilegeCheck function privileges access control [See also access control] access token privilege arrays account rights vs. Bypass Traverse Checking privilege usage enforcement of local system account super privileges viewing enabling of x86 system privilege levels ProbeForRead and ProbeForWrite functions process control block (PCB) [See KPROCESS blocks] Process Control Manager toolprocess environment block [See PEB (process environment block)] Process executive object type Process Explode (Pview) tool Process Explorer determining maximum memory pool sizes examining and specifying process and thread priorities examining threads and IRPs exploring object manager using mapping System process system threads to device drivers monitoring interrupt and DPC activity named pipes and processes setting processor affinity troubleshooting pool leaks viewing access tokens viewing and changing process affinity viewing cache physical size viewing enabling of privileges viewing file objects and device handles viewing hive handles viewing job objects viewing loaded driver list viewing mapped files viewing memory resource notification events viewing object manager namespace instancing viewing open object handles viewing page file usage viewing process tree using viewing processes using viewing restricted tokens viewing section objects viewing service details inside service processes viewing services running inside processes viewing start addresses for threads viewing system process tree viewing thread activity viewing Wmiprvse.exe creation watching POSIX subsystem start process handle tables, executive object process heap process ID process manager executive initialization privilegesprocess objects process type objects signaled state process properties dialog boxProcess Status [See Pstat tool] Process Viewer (Pviewer) tool 2nd 3rd process working sets content list setting limits size of viewing sizes process/stack swapper processes automatic startup of creating executive process objects creating initial thread creating, using CreateProcess function data structures examining and specifying priorities file objects functions kernel variables memory manager services notifying Csrss about new opening executable images performance counters performing initialization in context of new priority classes and thread scheduling 2nd private address space 2nd processor affinity quantum boosting and foreground 2nd security structures service shared service side-by-side assemblies starting execution of initial thread system threads, jobs, and [See also job objects] user-mode debugging user-mode types Userinint.exe viewing and changing process affinity viewing EPROCESS blocks viewing services running inside viewing sessions viewing, using Performance tool and Tlist.exe tool viewing, using Process Explorer viewing, using Task Manager virtual size of processor access modes [See kernel mode; user mode]processor affinity functions job objects multiprocessor thread scheduling thread scheduling processor control blocks (PRCBs) 2nd 3rd processor control regions (PCRs) 2ndprocessors [See CPUs (central processing units)] product ID (PID) profile IRQL Programming Applications for Microsoft Windows 2nd 3rd programming languages [See also assembly programming language] Programming the Microsoft Windows Driver Model, Second Edition programs [See also applications; executable images] automatic startup of processes vs. safe-mode-aware setup [See setup programs] tools [See tools] protected driver list protected mode Protection Profile (PP) conceptprotection, memory large pages memory manager PTE flags protection, system code write 2nd protocol drivers device drivers overview 2nd TCP/IP extensions Transport Driver Interface (TDI) viewing TCP/IP device objects watching TDI activity protocol stack, network protocol-specific Winsock Helper libraries prototype page table entries (PTEs) prototype registry providers cryptographic service event tracing VDS Volume Shadow Copy WMI 2nd WNet PsCreateSystemThread functionPsExec tool executing Regmon with running Blue Screen screen savers on remote systems running Regedit in local system account with setting processor affinity viewing registry security settings viewing System Restore directory PsGetSid tool PspCreateThread function PspUserThreadStartup functionPstat tool Idle process in System process viewing installed device drivers viewing start addresses for threads viewing system memory information Psxss.exe publisher configurations push locks Pview tool Pviewertool 2nd 3rd |
| < Day Day Up > |