Microsoft Windows Internals (4th Edition): Microsoft Windows Server 2003, Windows XP, and Windows 2000

Index

[SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X]

tagging, heap

tagging, pool

tail checking 2nd Take ownership privilege targeted DPCs

Task List tool [See Tlist tool]Task Manager     examining and specifying process and thread priorities

     Idle process in

     memory optimizers

     setting processor affinity

     troubleshooting pool leaks

     viewing and changing process affinity     viewing cache physical size     viewing kernel mode and user mode activity     viewing page file usage     viewing process information     viewing system memory information task offloading, NDIS TCP/IP

Task Scheduler 2nd TCP/IP and

TCP/IP protocol     extensions     iSCSI drivers

     NDIS task offloading

     NetBIOS

     protocol driver

     tracing activity using kernel logger     viewing device objects

     WSD TDI (Transport Driver Interface) 2nd [See also protocol drivers]

TDImon toolTEB (thread environment block)

     creating

     ETHREAD blocks     fields TechNet

temporary files, disabling lazy writer for

temporary objects

Terminal Services

     cache size

     hive size limits

     initialization

     multiple sessions

     object manager session namespace

     Session Manager

     window stations

TerminateThread function

termination, thread 2nd

Testlimit tool

thread dispatching 2nd 3rdthread environment block [See TEB (thread environment block)] Thread executive object type

thread ID     thread manager thread objects

thread scheduling [See also threads]

     context switching

     dispatcher database

     examining and specifying priorities

     functions     idle thread     job objects     KPROCESS blocks     KTHREAD blocks     multiprocessor     overview of

     preemptive     priority boosts

     priority levels     quantum     quantum end

     real-time priorities

     scenarios

     termination

     thread states     tools

     viewing ready threads     voluntary switching

     Windows System Resource Manager (WSRM) thread-local storage (TLS)

threads

     cache manager and system worker     cache manager's lazy writer and read-ahead     creating initial, for processes

     creating, using CreateThread function

     data structures 2nd

     fibers vs.

     functions

     hung or unresponsive systems

     I/O completion ports

     impersonation and security

     IRQLs

     kernel mode vs. user mode

     kernel variables

     lazy writing and system worker

     memory manager

     memory manager modified and mapped page writer

     multiprocessor scheduling     performance counters     priority levels

     processes, jobs, and [See also job objects]    scheduling [See thread scheduling]     security structures

     service

     starting execution of initial, for processes

    synchronization of [See synchronization]

     system

     system shutdown     system worker 2nd 3rd 4th     tools for viewing activity of     unhandled exception handlers     viewing activity using QuickSlice     viewing outstanding IRPs for     viewing start addresses for

     virtual file I/O     Windows subsystem

Timer executive object type timer objecttimer, system [See system clock]

Tlist tool

     idle process in

     mapping service process to services

     viewing process tree using     viewing services running inside processes

     viewing start addresses for threads     viewing thread activity

     viewing thread information tools

     crash troubleshooting

     Device Driver Kit (DDK)     examining memory usage     for exploring object manager database

     Idle process names in

     idle thread names

     kernel debugging [See also kernel debugger]

     monitoring memory pool usage

     Performance tool [See also Performance tool]

     Platform Software Development Kit (SDK) 2nd 3rd

     processes

     registry

     sources for

     sysinternals [See also sysinternals tools]

     thread scheduling

     thread-related

     Windows resource kits [See also resource kits, Windows]

     Windows Support Tools [See also Windows Support Tools]     Windows System Resource Manager (WSRM) topology, network

Tracedmp tool Tracerpt tooltracing

     enabling image loader

     Event Tracing for Windows

     Filemon

     heap manager stack

     Regmon tooltracking logs [See logs] Traffic Control (TC) API transaction table, NTFS transactions, atomic transition invalid PTEs transition pages 2nd

transition state, thread translation look-aside buffer (TLB) 2nd 3rd

translation, address [See address translation] TransmitFile function TransmitPackets function

Transport Layer Security (TLS)

transport layer, OSI model

transport provider interface, RPC

transports [See protocol drivers] trap dispatching

    exception dispatching [See exception dispatching]    interrupt dispatching [See interrupt dispatching]

     system service dispatching     traps and trap handlers 2nd

triage dump crash dump files

Triage.ini trimming, working set Trojan horse programs 2nd

troubleshooting [See also debugging; errors; exceptions]

    crashes [See crash dump analysis]

     file system problems with Filemon tool

     manually loading and unloading hives

     pool leaks

     registry problems with Regmon tool

     system threads

Trusted Computer System

     Evaluation Criteria (TCSEC)

Trusted Publishers, Software

     Restriction Policies and

type objects 2nd 3rd

types

     heaps     LDM database     NTFS log record

     NTFS type codes     object 2nd     services

     viewing, for kernel structures