Windows® Internals, Sixth Edition, Part 1

Nname parsing, Cell Mapsname resolution, Early Process Initialization, BranchCache Optimized Application Retrieval: HTTP Sequence, BranchCache Optimized Application Retrieval: HTTP Sequence, Peer Name Resolution ProtocolDNS, BranchCache Optimized Application Retrieval: HTTP SequencePNRP, Peer Name Resolution Protocolname retention, Object Securitynamed pipes, Debugging Tools for Windows, Session Manager (Smss), HTTP, HTTP, HTTP, Named-Pipe Operation, Named Pipe and Mailslot Implementation, Named Pipe and Mailslot Implementation, Named Pipe and Mailslot Implementation, Named Pipe and Mailslot Implementationactivity, viewing, Named Pipe and Mailslot Implementationas FSDs, Named Pipe and Mailslot Implementationconnections, establishing, Named-Pipe Operationcreation, Session Manager (Smss)implementation, Named Pipe and Mailslot Implementationmodes, HTTPnamespace, listing, Named Pipe and Mailslot Implementationservers and clients, HTTPtarget systems, connecting, Debugging Tools for Windowsnamespace extensions, Networking APIsnamespace service providers, Winsock Extensions, Extending WinsockWinsock, adding to, Winsock Extensionsnamespaces, Object Methods, Object Methods, Object Directories, Object Directories, Object Directories, Object Directories, The Common Information Model and the Managed Object Format Language, Class Association, WMI Implementation, Distributed File System Namespace, Offline Filesaggregation and availability, Distributed File System NamespaceCIMV2, Class Associationfile-system, Object Methodsglobal, Object Directoriesinstancing, Object Directoriesprivate, Object Directoriesregistry, Object Methodsscopes, Offline Filessecurity, WMI Implementationsession, Object DirectoriesWMI, The Common Information Model and the Managed Object Format LanguageNAP (Network Access Protection), Network Access Protection, Network Access Protection, Network Access Protection, Network Access Protection, Network Access Protection, Direct Accessclient configuration, Network Access Protectionclient-side architecture, Network Access ProtectionDA and, Direct AccessGroup Policy settings, Network Access Protectionserver-side, Network Access ProtectionNAP Agent, Network Access ProtectionNasarre, Christophe, Windows Operating System Versions, Timer Coalescing, What Signals an Object?NAT (Network Address Translation), Network Address TranslationNational Computer Security Center (NCSC), Securitynative system calls, Windows API, Worker Factories (Thread Pools)definition, Windows APIworker factory management, Worker Factories (Thread Pools)native system services, defined, Windows APINbsts command, NetBIOS OperationNCSI (Network Connectivity Status Indicator), Network Location Awareness, Passive Poll, Passive Poll, Registry Change Monitoring, Registry Change Monitoringactive probing, Registry Change Monitoringnetwork change monitoring, Passive Pollpassive polling, Passive Pollregistry change monitoring, Registry Change MonitoringNDIS (Network Driver Interface Specification), Internet Protocol Security, NDIS Drivers, NDIS Drivers, NDIS Drivers, NDIS Drivers, NDIS Drivers, NDIS Drivers, Variations on the NDIS Miniport, Variations on the NDIS Miniportcomponents, NDIS Driversconnection-oriented, NDIS Drivers, Variations on the NDIS Miniportfeatures, NDIS Driverslightweight filter drivers, NDIS Drivers, Variations on the NDIS Miniportreceive-side scaling, NDIS DriversTCP/IP offloading, NDIS DriversNDIS drivers, Windows Networking Components, Internet Protocol Security, NDIS Drivers, NDIS Drivers, NDIS Drivers, Variations on the NDIS Miniport, Variations on the NDIS Miniport, Connection-Oriented NDISconnection-oriented, Variations on the NDIS Miniportexecution environment, NDIS Driversintermediate, Variations on the NDIS Miniportnetwork medium activity, NDIS Driverspausing and resuming, NDIS DriversRemote NDIS, Connection-Oriented NDISNDIS library, Windows Networking Components, Internet Protocol SecurityNDIS Lightweight Filter driver, Multiple UNC Provider, NDIS DriversNDIS miniport drivers, Windows Networking Components, NDIS Drivers, Connection-Oriented NDIS, Connection-Oriented NDISfor USB network devices, Connection-Oriented NDISlisting, NDIS Driverspackets through, capturing, Connection-Oriented NDISNdis.sys, Windows Networking ComponentsNdiskd kernel debugger extension library, NDIS Drivers.NET Framework, Windows API, Windows API, Windows APICommon Language Runtime, Windows APIcomponents, Windows APIFramework Class Library, Windows APINet APIs, Remote AccessNetBIOS, NetBIOS, NetBIOS, NetBIOS, NetBIOS, NetBIOS Operation, NetBIOS Operation, NetBIOS Operationimplementation, NetBIOS Operationnames, listing, NetBIOS Operationnaming convention, NetBIOSoperation, NetBIOSrouting scheme, NetBIOS Operationsessions, NetBIOSNetBIOS Extended User Interface (NetBEUI) protocol, NetBIOS API ImplementationNetbios function, NetBIOS OperationNetBT (NetBIOS over TCP/IP) driver, NetBIOS API ImplementationNetlogon, User Logon StepsNetsh, Winsock Extensions, Caching Modes, Caching Modes, Internet Protocol SecurityBranchCache configuration, Caching Modesconnection security settings, Internet Protocol Securitypublication and republication cache configuration, Caching ModesWinsock service and namespace providers, viewing, Winsock ExtensionsNetwork Access Protection (NAP), Network Access Protectionnetwork access, protecting, Network Access Protectionnetwork activity, displaying, Performance Monitornetwork adapter drivers, Internet Protocol Security, Internet Protocol SecurityNDIS drivers, Internet Protocol Securitynetwork adapters, Internet Protocol Security, NDIS DriversWake-on-LAN, NDIS DriversNetwork Address Translation (NAT), Network Address Translationnetwork applications, Location and Topology, QoSdynamic configuration, Location and Topologyservice levels, QoSnetwork bandwidth, Distributed File System Namespace, BranchCache, QoS, QoSconserving, Distributed File System Namespacemanaging and prioritizing, QoSreal-time information, QoSreducing, BranchCacheNetwork Basic Input/Output System (NetBIOS), NetBIOSnetwork communication, authentication and encryption, RPC Operationnetwork connections, The OSI Reference Model, Message Queuing, Network Location Awareness, Internet Protocol Security, Connection-Oriented NDISconnectivity level, determining, Network Location Awarenessestablishing, The OSI Reference Modelmonitoring, Connection-Oriented NDISpeer-to-peer, Message Queuingsecurity configuration, Internet Protocol SecurityNetwork Connections dialog box, Multiple Provider RouterNetwork Connectivity Status Indicator (NCSI), Network Location Awarenessnetwork diagnostics, Diagnostic Functionalitynetwork drive letter assignment, The Service Control ManagerNetwork Driver Interface Specification (NDIS), Internet Protocol Security (see NDIS (Network Driver Interface Specification))Network File System (NFS), Mini-Redirectorsnetwork group, Security Identifiersnetwork layer in OSI reference model, The OSI Reference ModelNetwork List Manager (NLM) APIs, Network Location AwarenessNetwork Load Balancing, Network Load BalancingNetwork Location Awareness (NLA) service, Location and Topologynetwork logon service (Netlogon), Security System ComponentsNetwork Module Registrar (NMR), Winsock KernelNetwork Monitor, Connection-Oriented NDIS, Connection-Oriented NDISdownloading, Connection-Oriented NDISpacket capture, Connection-Oriented NDISnetwork packet throttling, Priority Boosts for Multimedia Applications and Gamesnetwork protocol requests, Protocol Driversnetwork provider interface, Multiple Provider Routernetwork providers, Multiple Provider Router, Multiple Provider Routerdrive-letter mapping, Multiple Provider Routernetwork redirectors, Device Drivers (see redirectors)network restriction rules, Service Isolationnetwork servers, Device Driversnetwork service account, Service Applications, The Local System Account, The Local System Account, The Local System Accountaccount privileges, The Local System Accountgroup membership, The Local System Accountservices running in, Service Applicationsnetwork services, RPC Operation, Binding, Binding, Remote Access, Network Load Balancing, Network Access Protection, Direct AccessActive Directory, Remote AccessDirectAccess, Direct AccessNetwork Access Protection, Network Access ProtectionNetwork Load Balancing, Network Load Balancingremote access, BindingRPC applications, RPC OperationNetwork Shell (Netsh.exe), Caching Modes (see Netsh)network stack, Networking, Protocol Drivers, Protocol Drivers, Windows Filtering PlatformIPv4 and IPv6 coexistence, Protocol Driverslegacy protocol support, Protocol DriversWFP integration, Windows Filtering Platformnetwork status events, WSK Implementationnetwork traffic, Passive Poll, Windows Filtering Platform, Internet Protocol Security, QoS, QoSauthentication and key negotiation, Internet Protocol Securityfirst-come, first-served delivery, QoSmonitoring, intercepting, and processing, Windows Filtering Platformpolling for, Passive Polltagging and shaping, QoSnetwork transmissions, Networking, The OSI Reference Model, Windows Sockets, Winsock Server Operationmulticast messages, Windows SocketsOSI reference model, traversing, The OSI Reference Modelrequests and replies, Networkingzero-copy, Winsock Server Operationnetwork-based attack prevention, Network Address Translationnetworking, Windows API, Networking, Networking, Networking, The OSI Reference Model, The OSI Reference Model, Networking APIs, HTTP, Background Intelligent Transfer Service, UPnP with PnP-X, Surrogate Providers, Distributed File System Namespace, Distributed File System Namespace, Offline Files, Caching Modes, BranchCache, BranchCache Optimized Application Retrieval: HTTP Sequence, Location and Topology, Location and Topology, Protocol Drivers, Protocol Drivers, Protocol Drivers, Windows Filtering Platform, Windows Filtering Platform, Internet Protocol Security, Variations on the NDIS Miniport, QoS, QoS, BindingAPIs, Networking APIsarchitecture, Networkingbinding, QoSBranchCache, BranchCacheconnection-oriented network hardware, Variations on the NDIS MiniportDistributed File System Namespace, Distributed File System NamespaceDistributed File System Replication, Distributed File System Namespacefiltering operations, Windows Filtering Platformhigh-loss scenarios, Protocol Driverslocation-based configuration settings, Location and Topologyname resolution, BranchCache Optimized Application Retrieval: HTTP SequenceNDIS drivers, Internet Protocol Securitynetwork services, BindingOffline Files, Offline FilesOSI reference model, The OSI Reference Modelperformance features, Protocol Driversprivacy, Background Intelligent Transfer Serviceprotocol drivers, Protocol DriversQuality of Service, QoSredirectors, UPnP with PnP-Xslow-link latency threshold, Caching Modessoftware components, Networkingsurrogate providers, Surrogate Providerstopology discovery and mapping, Location and TopologyUNC names, HTTPWindows components, The OSI Reference ModelWindows Filtering Platform, Windows Filtering Platformnetworking APIs, The OSI Reference Model, Windows Networking Components, Networking APIs, Networking APIs, Winsock Kernel, WSK Implementation, Web Access APIs, HTTP, HTTP, HTTP, NetBIOS, Background Intelligent Transfer Service, Background Intelligent Transfer Service, Peer-to-Peer Infrastructure, Peer-to-Peer Infrastructure, Message QueuingBackground Intelligent Transfer Service, Background Intelligent Transfer Servicebyte mode and message mode, HTTPDistributed Component Object Model, Peer-to-Peer InfrastructureInternet APIs, Web Access APIsmailslots, HTTPMessage Queuing, Peer-to-Peer Infrastructurenamed pipes, HTTPNetBIOS, NetBIOSPeer-to-Peer Infrastructure, Background Intelligent Transfer Serviceremote procedure call, WSK ImplementationUniversal Plug and Play, Message QueuingWindows Sockets, Networking APIsWinsock Kernel, Windows Networking Components, Winsock Kernelnetworking components, Network Location Awareness, Registry Change Monitoring, Variations on the NDIS Miniport, QoS, Network Access Protectionconnection-oriented, Variations on the NDIS Miniporthealth policies for, Network Access Protectioninstalling, QoSlogical network identity and interfaces, Network Location Awarenessnetwork connectivity, testing, Registry Change Monitoringnetworks, Network Location Awareness, Passive Poll, Active Probe, Protocol Drivers, QoSbursty behavior, QoSchanges on, monitoring, Passive PollIPv6, Protocol Driverslogical, Network Location Awarenessmapping, Active ProbeNetworkService service group, Shared Service ProcessesNetworkServiceAndNoImpersonation service group, Shared Service ProcessesNew Connection Security Rule Wizard, Internet Protocol SecurityNext Generation TCP/IP Stack, Protocol Driversnext processor, Extended Affinity MaskNFS (Network File System), Mini-RedirectorsNIC driver encapsulation, Windows Networking ComponentsNLA (Network Location Awareness) service, Location and TopologyNMR (Network Module Registrar), Winsock KernelNo-Execute-Up mandatory policy, Integrity LevelsNo-Read-Up mandatory policy, Integrity Levels, Determining AccessNo-Write-Up mandatory policy, Integrity LevelsNobody SID, Security Identifiersnode addresses, The OSI Reference Modelnodes, Symmetric Multiprocessing, The OSI Reference Model, The OSI Reference Modelend, The OSI Reference Modelintermediate, The OSI Reference Modelnonuniform memory access (NUMA) systems, Package Sets and SMT SetsNotepad registry settings, Process Monitor Internalsnotifications, Message Model, Viewing and Changing the Registry, Process Monitor Internals, Service Applications, Interactive Services and Session 0 Isolation, Service Startup, Service Shutdown, Service Shutdown, Initializationasynchronous, Message Modelchange, Viewing and Changing the Registry, Process Monitor Internalsfrom services, Interactive Services and Session 0 Isolation, Service Startuppreshutdown, Service Applications, Service Shutdownshutdown, Service Shutdowntime-change, InitializationNotifyBootConfigStatus function, Startup ErrorsNT Kernel Logger, Kernel Event TracingNtAllocateReserveObject system call, Reserve ObjectsNtAlpcCreatePortSection API, Asynchronous OperationNtCreateThreadEx function, Birth of a ThreadNtCreateUserProcess function, Flow of CreateProcess, Stage 1: Converting and Validating Parameters and Flags, Stage 1: Converting and Validating Parameters and Flags, Stage 2: Opening the Image to Be Executedcalling, Stage 1: Converting and Validating Parameters and Flagsexecutable file, opening, Stage 1: Converting and Validating Parameters and Flagsexecutive process object creation, Stage 2: Opening the Image to Be ExecutedNtDelayExecutionThread calls, Ideal and Last ProcessorNtdll.dll, Architecture Overview, Subsystem for Unix-based Applications, Kernel Support, Native Support, Image Loader, Worker Factories (Thread Pools)DbgUi functions, Kernel Supportimage loader, Native Supportworker factory interface, Worker Factories (Thread Pools)NTDS API, Active DirectoryNtGlobalFlag variable, System Worker Threads, Windows Global Flagsviewing and setting, Windows Global FlagsNtInitializeRegistry function, Accepting the Boot and Last Known GoodNtkrnlpa.exe, Architecture OverviewNtoskrnl.exe, Kernel Debugging, Architecture Overview, Differences Between Client and Server Versions, Kernel Event TracingNtQueryInformationWorkerFactory API, Worker Factories (Thread Pools)NtQueueUserApcThread system call, Reserve ObjectsNtSetIoCompletion API, Reserve ObjectsNtSetSystemInformation, Session Manager (Smss)null sessions, The Local System Account, ImpersonationNUMA (nonuniform memory access) systems, Symmetric Multiprocessing, Package Sets and SMT SetsNUMA distance array, NUMA SystemsNUMA node 0, NUMA SystemsNUMA nodes, NUMA SystemsNUMA Proximity IDs, NUMA SystemsNUMA spanning, Memory Virtualization