Microsoft Windows Internals (4th Edition): Microsoft Windows Server 2003, Windows XP, and Windows 2000

Index

[SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X]

W32PROCESS blocks 2nd

W32THREAD blocks

wait blocks wait functions, thread 2nd wait hints, service

wait queues, viewing wait state, thread 2nd wait states, alertable

WaitForMultipleObjects function

WaitForMultipleObjects functions

WaitForMultipleObjectsEx function

Wake-on-LAN, NDIS

waking states watching user profile loading and unloading with Watson.Microsoft.Com 2nd WbemTest tool Web access APIs Web-Based Enterprise Management (WBEM) standard WebDAV driver

well-known addresses well-known names

Win16 applications Win32 API [See also Windows API] Win32_NTEventlogFile class

Win32_NTLogEvent class

Win32_OperatingSystem class, WMI

Win32k.sys (Windows subsystem kernel)

     process data structures     service descriptor table

     sessions     system space

     Windows subsystem 2nd 3rd 4th 5th WinDbg tool 2nd 3rd [See also kernel debugger]

WinDiff tool 2nd

window managerwindow stations     interactive services 2nd

     object manager

     security rating

windowing

     priority boosts after GUI threads wake up

     Windows subsystem 2nd

Windows 2nd 3rd 4th

     API [See also Windows API]

    boot process [See boot process]

    cache manager [See cache manager]

     concepts and terms

    crash dump analysis [See crash dump analysis]

    Device Driver Kit [See Device Driver Kit (DDK)]

     dirty page threshold

     event tracing    file systems [See file systems]     handle tables

     initial system worker threads     kernel mode vs. user mode [See also kernel mode]     keyed events

     logical prefetcher

     microkernel-based systems vs., 36 .NET Framework and WinFX

     object manager session namespace

     objects and handles [See also handles]

     operating system model     post-splash screen crashes     processes, threads, and jobs [See also job objects; processes; threads]     push locks     real-time processing 2nd 3rd     remote sessions     requirements and design goals

     restoring SYSTEM hive     security [See also security]

     service accounts     services, functions, and routines [See also functions]     shared assemblies

     shutdown

     subsystem 2nd 3rd [See also Csrss (Windows subsystem process); Win32k.sys (Windows subsystem kernel)]

     System Restore

     Terminal Services and multiple sessions     tools [See also tools]

     Unicode     versions [See also versions, Windows]

     virtual memory [See also memory; memory management; virtual memory]     Volume Shadow Copy service

     Windows NT and

Windows 2000 [See also versions, Windows]     Common Criteria rating     event tracing

     handle tables

     initial system worker threads

     object manager session namespace

     Process Control Manager

     remote sessions

     resource kits 2nd

     unhandled exceptions

     Unicode

     viewing multiprocessor-specific support files on

     Windows File Protection

     Windows NT and

Windows 2000 Server Operations Guide

Windows API

     memory manager functions     memory protection options     security

     Windows andWindows Backup [See Backup tool] Windows Debugging Tools 2nd [See also Tlist tool]

Windows Driver Model (WDM) 2nd 3rd 4th

Windows Error Reporting 2nd

Windows Explorer

Windows File Protection (WFP) 2nd 3rd

Windows Hardware Quality Lab (WHQL) 2nd Windows Installable File System (IFS) 2nd 3rd Windows Installer Package problem Windows Internet Name Service (WINS)Windows Management     architecture     checking for checked build version using

     class association with association classes     Common Information Model (CIM) and Managed Object Format (MOF) language

     executive     I/O system     implementation

     initialization

     Instrumentation (WMI)

     managing systems using WMI scripts

     mechanisms     namespace

     NT Kernel Logger     providers

     security     viewing MOF definitions of classes

     Wmic.exe tool

Windows Media Player Windows Millennium Edition Windows Networking (WNet) API

Windows NT [See also versions, Windows]

     C2 security rating

     naming conventions and device objects

     networking APIs

     requirements and design goals

     volume management

     Win32 API

     Windows 95 vs.

Windows NT vs.Windows 2nd

Windows Script Host (WSH) 2nd

Windows Security dialog box

Windows Server 2003 [See also versions, Windows]

     deferred ready thread state

     event tracing     Folders     guarded mutexes

     handle tables     hive lazy writer delay setting     initial system worker threads

     Message Queuing

     object manager session namespace

     remote sessions

     Virtual Disk Service

     Windows NT and     Windows Server 2003 Deployment Kit     Windows System Resource Manager (WSRM) Windows Server Network Monitor Tools Windows Services MMC snap-in Windows Sockets Configuration tool Windows Sockets Direct (WSD)

Windows Support Tools [See also Poolmon tool] Windows Sustained Engineering Team

Windows System Resource Manager (WSRM) Windows Update Windows versions 2nd

WindowStation executive object type 2nd

WinFX

WinHTTP API

WinInet (Windows Internet) APIWinlogon

     access tokens     boot process 2nd 3rd

     extracting crash dumps     initialization

     interactive logon

     local procedure calls     registry     security

     security rating

     services

     sessions

     SIDs for logon sessions

     system processes

     System Restore

     system shutdown

     Windows File Protection (WFP)

Winlogon initialization

Winmgmt.exe

Winobj tool

     exploring object manager using

     viewing base named objects

     viewing Device directory, 552      viewing device name to device name mappings     viewing Harddisk directories

     viewing list of registered file systems     viewing LPC port objects using     viewing memory resource notification events

     viewing object manager namespace instancing

     viewing section objects

     viewing shadow volume device objects

     viewing type objects using

     viewing window station objects Winsock Winsock (Windows Sockets)     client operation     extending, using service provider interface (SPI)     extensions     features

     implementation     server operation

     Windows Sockets Direct (WSD) interface Winsrv.dll WinSta0 window station 2nd 3rd 4th

WNet API

WNetAddConnection function

Word

worker threads, system 2nd 3rd 4th working set manager 2nd

working sets     accounting for physical memory use

     balance set manager and swapper     cache working set size

     defined

     demand paging     EPROCESS block     job objects

     kinds of

     logical prefetcher

     management

     memory management

     PFN database

     placement policy

     process creation

     resource-allocation policies

     system

     system working set list

     viewing process working set sizes

     viewing working set list

Workstation service

     DFS     redirectors WQL, WMI scripts and

write throttling, cache managerwrite-ahead logging [See logging, NTFS] write-back caching 2nd

write-through caching

     cache manager

     FAT file system

     NTFS

WriteEncryptedFileRaw function WriteFile function 2nd WriteFileEx function 2nd WriteFileGather function WriteProcessMemory function 2nd writers, Volume Shadow Copy Ws2_32.dll