Windows® Internals, Sixth Edition, Part 1

LLAN adapter (LANA) numbers, NetBIOSlanguage packs, RegistryLANs, datalink layer, The OSI Reference Modellast known good control set, HKEY_LOCAL_MACHINE, Startup Errorslast processor, Extended Affinity Masklatency, Priority Boosts, Lock Ownership Boostsdecreasing, Priority Boostsoptimizing for, Lock Ownership Boostslayered network services, QoS, Bindingbinding, QoSlayered service providers (LSPs), Winsock Extensionslazy IRQL, Software Interrupt Request Levels (IRQLs)Ldr, Native Support(see also image loader)least privilege, The Local Service AccountLeaveCriticalSection function, Data Structureslegacy applications, Diagnostic Functionality, User Account Control and Virtualization, File System and Registry Virtualization, File System and Registry Virtualization, Networking APIs, NetBIOSAdministrative privileges, User Account Control and Virtualizationapplication-compatibility shims, File System and Registry Virtualizationcompatibility assistance, Diagnostic Functionalitynetworking APIs for, Networking APIs, NetBIOSstandard user account, running in, File System and Registry Virtualizationlegacy hardware, registry descriptions, HKEY_LOCAL_MACHINElegacy IPsec Policy Agent, Internet Protocol Securitylevels of trust ratings, Securitylicensed processors, Symmetric MultiprocessingLightweight Directory Access Protocol (LDAP) directory services, Remote Accesslightweight filter drivers (LWF), Variations on the NDIS Miniportlink command /SUBSYSTEM qualifier, Environment Subsystems and Subsystem DLLsLink-Layer Topology Discovery (LLTD), Active Probelinks, registry, Registry Data Typeslistening sockets, WSK ImplementationLive Migration, Intercepts, Intercepts, Intercepts, Live Migration, Live Migrationmemory transfer, Interceptssetup, Interceptsstate transfer, Live MigrationVM files, transfer of ownership, Live MigrationLiveKd, Debugging Tools for Windows, Child Partitionschild partitions, viewing, Child PartitionsLLTD (Link-Layer Topology Discovery), Active Probeload and unload device drivers privilege, Super Privilegesloaded modules database, DLL Name Redirectionloader data table entries, DLL Name Redirection, DLL Name Redirectionfields, DLL Name Redirectionloader snaps, Image Loaderlocal accounts and group registry information, HKEY_LOCAL_MACHINElocal area networks (LANs), The OSI Reference Modellocal kernel debugging, Debugging Tools for Windowslocal logon SIDs, Winlogon Initializationlocal namespace, Object Directories.LOCAL redirection, DLL Name Resolution and Redirectionlocal RPC, RPC Implementationlocal security authentication server process, Local Session Manager (Lsm.exe)Local Security Authority (LSA), Account RightsLocal Security Authority process (LSASS), Service Isolation (see LSASS (Local Security Authority subsystem))local security policy, Security AuditingLocal Security Policy Editor, Account Rights and Privileges, Security Auditing, Advanced Audit Policy Settings, Software Restriction Policies, Caching ModesAdvanced Audit Policy Configuration settings, Advanced Audit Policy Settingsaudit policy configuration, Security AuditingBranchCache configuration, Caching ModesSoftware Restriction Policies node, Software Restriction PoliciesUser Rights Assignment configuration, Account Rights and Privilegeslocal service account, Service Applications, The Local System Account, The Local System Account, The Local System Account, The Local System Account, The Local Service Account, Shared Service Processesaccount privileges, The Local System Accountgroup membership, The Local System Accountnetwork resource access, The Local System Accountservices running in, Service Applications, The Local Service AccountLocal Session Manager (Lsm.exe), Service Control Manager (SCM)Local SID, Security Identifierslocal system, Debugging Tools for Windows, Security Auditingaudit policy, Security Auditingconnecting to, Debugging Tools for Windowslocal system account, Service Applications, Service Applications, The Local System Account, The Local System Account, The Local System Account, Running with Least Privilegeaccess to resources, Running with Least Privilegecharacteristics, The Local System Accountcore operating system components in, Service Applicationsgroup membership, The Local System Accountprivileges, The Local System Accountservices, running in, Service Applicationslocal-account SIDs, Security Identifierslocally unique identifier (LUID), Tokens (see LUID (locally unique identifier))LocalService service group, Shared Service ProcessesLocalServiceAndNoImpersonation service group, Shared Service ProcessesLocalServiceNetworkRestricted service group, Shared Service ProcessesLocalServiceNoNetwork service group, Shared Service ProcessesLocalSystemNetworkRestricted service group, Shared Service Processeslocation, network, Location and Topology, Location and TopologyNetwork Location Awareness service, Location and Topologylock convoys, Pushlockslock ownership priority boosts, Boosts Due to Scheduler/Dispatcher Events, Priority Boosts for CPU Starvationlockdown, system, AppLockerlocking mechanisms, Data Structures, Pushlocks, User-Mode Resourcesorder of objects, Data StructuresSRW Locks, User-Mode Resourcesuser-mode, Pushlockslocking primitives, Spinlocks, Low-IRQL Synchronizationfor user-mode code, Low-IRQL Synchronizationspinlocks, Spinlockslog hives, Stable Storagelogging, Debugging and Tracing, Transactional Registry (TxR)ALPC messages, Debugging and Tracingtransacted operations, Transactional Registry (TxR)Logical Link Control (LLC), The OSI Reference Modellogical network identity, Network Location Awarenesslogical network interfaces, Network Location Awarenesslogical networks, Network Location Awarenesslogical prefetcher, Executivelogical processors, Synthetic Devices, Overview of Windows Scheduling, Idle Threads, Thread Selection, Thread Selection, NUMA Systems, Processor Group Assignment, Processor Group Assignment, Logical Processor State, Logical Processor State, Logical Processor State, Extended Affinity Mask, Thread Selection on Multiprocessor Systems, Choosing a Processor for a Thread When There Are No Idle Processors, Dynamic Processor Addition and Replacement(see also processors)active, Logical Processor Stateaffinity mask, Thread Selectioncandidate processor selection, Choosing a Processor for a Thread When There Are No Idle Processorscontext switch to new thread, Overview of Windows Schedulingdynamic, Dynamic Processor Addition and Replacementgroup assignment, NUMA Systemsideal, last, and next, Extended Affinity Maskidle, Logical Processor Statenonparked, Logical Processor Statenumber per group, Processor Group Assignmentready queue population, Thread Selection on Multiprocessor Systemsstate information, Thread Selection, Processor Group Assignmentthread selection, Idle ThreadsLogicalProcessorsPerCore value, Thread Selectionlogon, Local Session Manager (Lsm.exe), Viewing and Changing the Registry, Process Monitor Troubleshooting Techniques, Service Startup, Startup Errors, Trusted Computer System Evaluation Criteria, Protecting Objects, Account Rights, Account Rights, Logon, Logon, Logon, Logon, Winlogon Initialization, Winlogon Initialization, User Logon Steps, User Logon Steps, Biometric Framework for User Authenticationaborted, Winlogon Initializationaccount rights retrieval, Account Rightsactive sessions, listing, User Logon Stepsauthentication requirements, Protecting Objectscomponents of, Logonconfiguration data use, Viewing and Changing the Registryinteractive, Logonmanagement, Local Session Manager (Lsm.exe)registry activity during, Process Monitor Troubleshooting Techniquessecure, Trusted Computer System Evaluation Criteriasecurity, Logonservice logon, Service Startupsuccessful, Startup Errorstermination, User Logon Stepstype, determining, Account Rightsuser, Winlogon Initializationvia fingerprint scan, Biometric Framework for User AuthenticationWinlogon management of, Logonlogon sessions, Security Identifiers, Winlogon Initialization, User Logon Stepsactive, listing, User Logon StepsLUID for, Winlogon InitializationSID for, Security Identifierslogon SIDs, Security IdentifiersLogonSessions, User Logon StepsLogonUI, Local Session Manager (Lsm.exe), Security System Components, Logon, Logon, Winlogon Initializationlaunching, Winlogon Initializationnetwork provider DLLs, loading, LogonLogonUser function, ImpersonationLogonUserEx function, Service Startuplow-memory situations, Data StructuresLPC, Windows Global FlagsLSA (Local Security Authority), Account RightsLsaAddAccountRights function, Account RightsLsaAuthenticationPort function, Winlogon InitializationLsaEnumerateAccountRights function, Account RightsLsaEnumerateLogonSessions function, User Logon StepsLsaLogonUser calls, Winlogon InitializationLsaLogonUser function, Account RightsLsaRemoveAccountRights function, Account RightsLSASS (Local Security Authority subsystem), Service Isolation, The Service Control Manager, The Service Control Manager, Service Startup, Service Shutdown, Security System Components, Security System Components, Security System Components, Tokens, Security Auditing, Winlogon Initialization, User Logon Steps, User Logon Stepsallowed access checks, User Logon Stepsaudit policy manintenance, Security Auditinggroups and privileges checks, Tokenslogon termination, User Logon Stepspolicy database, Security System Componentsprocesses shared by, Service Shutdownservice startup, The Service Control Manager, Service StartupSRM connection, Security System Componentsuser logon tasks, Winlogon InitializationLsaStorePrivateData function, Service StartupLsm.exe, Service Control Manager (SCM)LSPs (layered service providers), Winsock ExtensionsLUID (locally unique identifier), Tokens, Tokens, Winlogon Initializationlogon session, Winlogon Initializationtoken authentication ID, TokensLWF (lightweight filter drivers), Variations on the NDIS Miniport