Windows® Internals, Sixth Edition, Part 1

II.O Completion packet reserve object, Reserve ObjectsI/O, Performance Monitor, Trap Dispatching, Trap Dispatching, Registry Redirection, Lock Ownership Boostscontrol functions, Registry Redirectiondevice interrupts, Trap Dispatching, Trap Dispatchingper-file information, Performance Monitorpriority boosts on completion, Lock Ownership BoostsI/O completion ports, Worker Factories (Thread Pools), Dynamic Processor Addition and Replacementjobs associated with, Dynamic Processor Addition and Replacementscalability, wait internals, and efficiency of work processing, Worker Factories (Thread Pools)I/O manager, Executive, Object Methodsfile system namespace implementation, Object MethodsI/O model of processing, WSK ImplementationI/O requests, The OSI Reference Model, Protocol DriversI/O transfers, Trap Dispatchingi82489 Advanced Programmable Interrupt Controller (APIC), Hardware Interrupt Processing(see also APIC (Advanced Programmable Interrupt Controller))i8259A Programmable Interrupt Controller (PIC), Hardware Interrupt ProcessingIA32Exec.bin, Wow64IA64 architecture, x64 Interrupt Controllers, Software Interrupt Request Levels (IRQLs), System Service Dispatchinginterrupt controllers, x64 Interrupt Controllersinterrupt request levels, Software Interrupt Request Levels (IRQLs)system service dispatching, System Service DispatchingIBAC (identity-based access control), The AuthZ APIICs (integration components), Emulated Devicesideal node, Ideal and Last Processorideal processor, Extended Affinity Maskidentification, credential providers, Local Session Manager (Lsm.exe)identity-based access control (IBAC), The AuthZ APIidle process, Termination, Idle Threadsname, Idle Threadsidle processors, Process Monitor Internals, Thread Selection on Multiprocessor Systemsregistry activity, viewing, Process Monitor Internalsidle scheduling, Thread Selectionidle threads, Termination, Idle Threads, Idle Threads, Idle Threads, Thread Selectionoperations, Idle Threadspreemption, Idle Threadspriority level, Idle Threadsready queue scanning, Thread Selectionidle-only queue, Idle Threads, Thread Selection on Multiprocessor Systems, Per-Session CPU Quota Blocks, Per-Session CPU Quota Blocks, Charging of Cycles to Throttled Threads, Charging of Cycles to Throttled Threads, Charging of Cycles to Throttled Threads, Resuming Execution, Resuming Execution, Resuming Execution, Resuming Execution, Resuming Execution, DFSS Idle-Only Queue Schedulingflushing, Charging of Cycles to Throttled Threads, Resuming Executionlocking mechanism, Per-Session CPU Quota Blocks, Charging of Cycles to Throttled Threadsmaintainence, Per-Session CPU Quota Blocksremote processor, Resuming Executionscheduling, Resuming Executionthread management, Resuming Executionthread reinsertion, DFSS Idle-Only Queue Schedulingthread release, Thread Selection on Multiprocessor Systemsthreads, adding to, Charging of Cycles to Throttled Threadsthreads, resuming execution, Resuming Executionidle-time duration, optimizing, Intelligent Timer Tick Distributionidle/sleep processor states, Intelligent Timer Tick DistributionIDT (interrupt dispatch table), Hardware Interrupt Processing, Hardware Interrupt Processingviewing, Hardware Interrupt ProcessingIexplore.exe, Integrity LevelsIKE (Internet Key Exchange), Internet Protocol Securityimage database, Service Startupimage loader, Ntdll.dll, Native Support, Native Support, Image Loader, Image Loader, Image Loader, Early Process Initialization, DLL Name Resolution and Redirection, DLL Name Redirection, DLL Name Redirection, Loaded Module Database, Import Parsing, Import Parsing, Import Parsing, Post-Import Process Initialization, SwitchBack, Stage 7: Performing Process Initialization in the Context of the New Process, Data Structures, Running with Administrator Rights, AppLockerAPI Sets use, SwitchBackapplication initialization tasks, Native Supportcontext information, Data StructuresDLL name redirection, DLL Name Resolution and RedirectionDLL name resolution, Early Process InitializationDLL restriction, AppLockerDLL search, Import ParsingDLL search order, viewing, DLL Name Redirectionearly process initialization, Image Loaderimport parsing, Import Parsinginitialization, Stage 7: Performing Process Initialization in the Context of the New Processinternals, Loaded Module Databaselegacy installer identification, Running with Administrator Rightsloaded module database, DLL Name Redirectionpost-import initialization tasks, Import ParsingSwitchBack, Post-Import Process Initializationtasks of, Image Loaderwatching, Image Loaderimage subsystem, Environment Subsystems and Subsystem DLLsImagePath parameter, Service Applications, Service Startupimages, Windows Global Flags, Affinity, Software Restriction Policiesexecution, Software Restriction Policiesglobal flags, Windows Global Flagsuniprocessor flag, AffinityImpersonateNamedPipeClient function, Impersonation, Named-Pipe OperationImpersonateSecurityContext function, Impersonationimpersonation, Processes, Threads, and Jobs, Protecting Objects, Impersonation, Impersonation, Impersonation, Impersonation, RPC Operation, Named-Pipe Operationclient, RPC Operation, Named-Pipe Operationintegrity policy, Impersonationmisuse prevention, Impersonationserver forms, Impersonationimpersonation tokens, Tokens, Impersonationimport parsing, Import Parsingimport tables, parsing by image loader, Image Loader, Early Process Initializationin-memory structures, Management Mechanismsincrease scheduling priority privilege, Priority Levelsincreaseuserva qualifier, Virtual Memoryindirection, Object Methodsinheritance, The Common Information Model and the Managed Object Format Language, Priority Levels, Security Descriptors and Access Control, Security Descriptors and Access Control, ACL Assignmentclass, The Common Information Model and the Managed Object Format Languageof ACE flags, Security Descriptors and Access Controlof ACEs, Security Descriptors and Access Controlpriority levels, Priority LevelsWindows API support, ACL Assignmentinit once, Run Once Initializationinitial process address space, creating, Stage 3A: Setting Up the EPROCESS Objectinitialization, Run Once Initialization, Native Support, Virtual Machine Manager Service and Worker Processes, Initialization, Distributed Fair Share Scheduling, Logon, LogonDistributed Fair Share Scheduler, Distributed Fair Share Schedulinghypervisor, Virtual Machine Manager Service and Worker Processesof processes, Native Supportof Unified Background Process Manager, Initializationsystem, Run Once Initialization, LogonWinlogon, Logoninitialization tasks, Run Once Initialization, Import Parsing, Import Parsingatomic execution, Run Once Initializationimport parsing, Import Parsingpost-import tasks, Import Parsinginitialized threads, Thread Statesinput string parameters, Registryinstallers, I/O Control Requests, Running with Administrator Rightsadministrative rights for, Running with Administrator RightsInstitute of Electrical and Electronics Engineers (IEEE) 802 committee, The OSI Reference Modelinteger divide-by-zero exceptions, Exception Dispatchinginteger overflow, Exception Dispatchingintegration components (ICs), Emulated Devicesintegrity checks, mandatory, ACL Assignmentintegrity levels, Protecting Objects, Security Identifiers, Integrity Levels, Integrity Levels, Integrity Levels, Integrity Levels, Tokens, Determining Access, Determining Accessaccess based on, Determining Accessfor User Interface Privilege Isolation, Determining Accessimplementation, Protecting Objectslow, launching programs at, Tokensobject, Integrity Levelsprocess, Integrity Levelspropagation, Integrity LevelsProtected Mode Internet Explorer use, Integrity Levelsintegrity protection, Objects and Handlesintegrity state, Code IntegrityIntel processors, Architecture OverviewIntel VT Extended/Nested Page Table (NPT) technology, Memory Virtualizationintelligent timer tick distribution, Processor Selectioninteractive logon, Logon, Logon, Winlogon Initializationauthentication packages, Logon, Winlogon Initializationinteractive logon manager (Winlogon), Security System Components(see also Winlogon)interactive processes, Service Isolationinteractive services, Interactive Services and Session 0 Isolation, Service StartupInteractive Services Detection (UI0Detect) service, Interactive Services and Session 0 Isolationintercepts, Memory Virtualizationinterfaces, testing, Registry Change Monitoringinterlocked operations, Synchronization, Instack Queued Spinlocksspinlocks for, Instack Queued Spinlocksintermediate nodes, The OSI Reference Modelinternal data structures, Debugging Tools for Windows, Protected Processes(see also processes; threads)contents, displaying, Debugging Tools for Windowsinternal support functions, Subsystem for Unix-based ApplicationsInternational Organization for Standardization (ISO), The OSI Reference ModelInternet APIs, Web Access APIsInternet applications, Web Access APIsInternet Explorer, Integrity Levels, Determining Access, File System and Registry VirtualizationProtected Mode, Integrity Levels, Determining Accessvirtualization support, File System and Registry VirtualizationInternet Key Exchange (IKE), Internet Protocol Securityinterprocess communication, programming APIs for, HTTPinterprocessor interrupt level, Software Interrupt Request Levels (IRQLs)interprocessor interrupts (IPIs), Software Interrupt Request Levels (IRQLs)Interrupt Affinity Policy Tool, Software Interrupt Request Levels (IRQLs)interrupt controllers, Hardware Interrupt Processing, x64 Interrupt Controllers, x64 Interrupt ControllersIA64, x64 Interrupt Controllersx64, x64 Interrupt Controllersx86, Hardware Interrupt ProcessingInterrupt Descriptor Table (IDT), Kernel Patch Protectioninterrupt dispatch table (IDT), Hardware Interrupt Processinginterrupt dispatching, Trap Dispatchinginterrupt objects, Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs)address, Software Interrupt Request Levels (IRQLs)connecting and disconnecting, Software Interrupt Request Levels (IRQLs)ISR, registering, Software Interrupt Request Levels (IRQLs)viewing details, Software Interrupt Request Levels (IRQLs)interrupt request levels (IRQLs), IA64 Interrupt Controllers (see IRQLs (interrupt request levels))interrupt requests (IRQs), Hardware Interrupt Processing (see IRQs (interrupt requests))interrupt service routine (ISR), Trap Dispatching, Software Interrupt Request Levels (IRQLs)interrupt trap handlers, Trap Dispatchinginterrupts, System Mechanisms, Hardware Interrupt Processing, Hardware Interrupt Processing, Hardware Interrupt Processing, IA64 Interrupt Controllers, Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Dispatch or Deferred Procedure Call (DPC) Interrupts, Dispatch or Deferred Procedure Call (DPC) Interrupts, Synchronization, Quantum Endaffinity, Software Interrupt Request Levels (IRQLs)APC, Dispatch or Deferred Procedure Call (DPC) Interruptsdefined, System Mechanismsdispatch or DPC, Software Interrupt Request Levels (IRQLs)handling, Quantum Endhardware processing, Hardware Interrupt Processinginterrupt control flow, Software Interrupt Request Levels (IRQLs)IRQL, mapping to, Software Interrupt Request Levels (IRQLs)line-based, Software Interrupt Request Levels (IRQLs)masking, Software Interrupt Request Levels (IRQLs), Synchronizationmessage signaled-based, Software Interrupt Request Levels (IRQLs)monitoring, Dispatch or Deferred Procedure Call (DPC) Interruptsprioritization, Hardware Interrupt Processing, Software Interrupt Request Levels (IRQLs)routing algorithms, Hardware Interrupt Processingservice routines, IA64 Interrupt Controllerssharing, Software Interrupt Request Levels (IRQLs)software, Software Interrupt Request Levels (IRQLs)intra-user isolation, Protecting Objectsintrinsic functions, SynchronizationIoCompletion object type, Executive ObjectsIP addresses, Protocol Drivers, Network Address Translation, Network Load Balancingcluster, Network Load Balancingprivate to public mapping, Network Address Translationpublic, Protocol DriversIP filtering, Network Address TranslationIPC parsing bugs, Blobs, Handles, and ResourcesIPIs (interprocessor interrupts), Software Interrupt Request Levels (IRQLs)IPsec, Network Address Translation, Internet Protocol Security, Internet Protocol Security, Internet Protocol Security, Internet Protocol Security, Internet Protocol Security, Internet Protocol Securityarchitecture, Internet Protocol Securityauthentication methods, Internet Protocol SecurityGroup Policy settings, Internet Protocol Securityhost-based packet filtering, Internet Protocol Securitymonitoring secured communication, Internet Protocol SecurityWFP callout driver, Internet Protocol SecurityIPsec Policy Agent, Internet Protocol SecurityIPv4, Protocol DriversIPv6, Protocol DriversIRPs (I/O request packets), The OSI Reference ModelIRQ lines, interrupts based on, Software Interrupt Request Levels (IRQLs)IRQLs (interrupt request levels), IA64 Interrupt Controllers, Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs), Synchronization, Priority Levels, Dispatcher DatabaseAPC level, Software Interrupt Request Levels (IRQLs)DISPATCH_LEVEL, Dispatcher Databaseinterrupts, mapping to, Software Interrupt Request Levels (IRQLs)lazy, Software Interrupt Request Levels (IRQLs)on spinlocks, Synchronizationpassive level, Software Interrupt Request Levels (IRQLs)predefined, Software Interrupt Request Levels (IRQLs)raising and lowering, Software Interrupt Request Levels (IRQLs)save locations, Software Interrupt Request Levels (IRQLs)viewing, Software Interrupt Request Levels (IRQLs)vs. thread priorities, Priority LevelsIRQs (interrupt requests), Hardware Interrupt Processing, Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs)IRQ 1, Software Interrupt Request Levels (IRQLs)prioritization, Software Interrupt Request Levels (IRQLs)isolation, Transactional Registry (TxR), Running with Least Privilege, Service Isolation, Protecting Objectsintra-user, Protecting Objectsservice, Running with Least PrivilegeSession Zero Isolation, Service Isolationtransaction, Transactional Registry (TxR)ISR (interrupt service routine), Trap Dispatching, Software Interrupt Request Levels (IRQLs), Software Interrupt Request Levels (IRQLs)interrupt level, connecting and disconnecting, Software Interrupt Request Levels (IRQLs)registering, Software Interrupt Request Levels (IRQLs)