Windows® Internals, Sixth Edition, Part 1

UUAC (User Account Control), Local Session Manager (Lsm.exe), Local Session Manager (Lsm.exe), HKEY_USERS, User Account Control and Virtualization, User Account Control and Virtualization, User Account Control and Virtualization, File System and Registry Virtualization, Registry Virtualization, Running with Administrator Rights, Running with Administrator Rights, Requesting Administrative Rights, Auto-Elevation, Controlling UAC Behavior, Controlling UAC Behavioraccess tokens, Local Session Manager (Lsm.exe)administrative rights requests, Running with Administrator Rightsadministrative rights, running with, Running with Administrator Rightsauto-elevation, Requesting Administrative Rightselevation, User Account Control and Virtualization, Registry Virtualizationmodifying behavior of, Auto-Elevationstandard user rights, User Account Control and Virtualizationstorage location of settings, Controlling UAC Behaviorturning off, Controlling UAC Behaviorvirtualization, file system and registry, File System and Registry Virtualizationvirtualized registry root, HKEY_USERSUAC File Virtualization Filter Driver, File VirtualizationUBPM (Unified Background Process Manager), Service Tags, Service Tags, Initialization, Initialization, Initialization, Initialization, Initialization, Initialization, Initialization, UBPM API, UBPM API, Provider Registration, Consumer Registration, Consumer Registrationarchitecture, Service Tagsconsumer registration, Provider Registrationconsumer thread creation, InitializationETW consumer initialization, Initializationevent manager setup, Initializationevent processing, Initializationinitialization, Initializationinternal tracing support, Initializationprovider registration, UBPM APIservice control programs, Consumer RegistrationTaskHost, Initialization, Consumer RegistrationUBPM API, UBPM APIUIPI (User Interface Privilege Isolation), Determining AccessUMDF (User-Mode Driver Framework), Windows Driver Model (WDM)UMPD (User Mode Print Driver) framework, Data StructuresUMS (user-mode scheduling), Processes, Threads, and Jobsunauthorized access, Security, Software Restriction Policiespreventing, Security(see also security mechanisms)Software Restriction Policies for, Software Restriction Policiesunauthorized operations, Super PrivilegesUNC names, HTTP, Surrogate Providersredirector support, Surrogate ProvidersUNC paths, accessing, UPnP with PnP-Xunconnected communication ports, Connection Modelundocumented interfaces, viewing, Windows Driver Foundationunhandled exception filter calls, Unhandled Exceptionsunhandled exceptions, Exception Dispatching, Unhandled Exceptionsdebugging, Unhandled Exceptionsunicast packets, Network Address TranslationUnicode, RegistryUnified Background Process Manager (UBPM), Service Tags (see UBPM (Unified Background Process Manager))Universal Naming Convention (UNC), HTTP, UPnP with PnP-XUniversal Plug and Play, Message QueuingUNIX-based applications, Subsystem for Unix-based Applications, Networking APIsnetworking, Networking APIssubsystem for, Subsystem for Unix-based Applicationsunrestricted service SIDs, Service Isolationunwait boosts, Boosts Due to Scheduler/Dispatcher Eventsuploads, Background Intelligent Transfer ServiceUSB network devices, Connection-Oriented NDISuser access restrictions, Security(see also access rights)User Account Control (UAC), Local Session Manager (Lsm.exe) (see UAC (User Account Control))User Account Control Settings dialog box, Auto-Elevationuser address space, Kernel Mode vs. User ModeUser APC reserve object, Reserve Objectsuser applications, Kernel Mode vs. User Mode, Architecture Overviewuser mode vs. kernel mode, Kernel Mode vs. User Modeuser authentication, Security, Logon, Assured Authenticationbiometric framework, Assured Authenticationuser callbacks, User Callbacksuser environment initialization, Winlogon, LogonUI, and UserinitUSER functions, Windows Subsystemuser identification, LogonUser Interface Privilege Isolation (UIPI), Determining AccessUser Interface Services, Windows Operating System Versionsuser logon, Local Session Manager (Lsm.exe), Winlogon Initialization, Winlogon Initialization, User Logon Steps, User Logon Steps, Biometric Framework for User Authentication(see also logon)active sessions, listing, User Logon StepsAssured Authentication, User Logon Stepsauthentication, Winlogon Initializationmanagement, Local Session Manager (Lsm.exe)via fingerprint scan, Biometric Framework for User Authenticationuser mode, Processes, Threads, and Jobs, Kernel Mode vs. User Mode, Kernel Mode vs. User Mode, Requirements and Design Goals, Operating System Modelcontext switches, Processes, Threads, and Jobstransitioing to kernel mode, Kernel Mode vs. User ModeUser Mode Print Driver framework (UMPD), Data Structuresuser profiles, HKEY_USERS, HKEY_USERS, User Logon Steps, User Account Control and VirtualizationHKU subkeys, HKEY_USERSloading, User Logon Stepsper-user settings, User Account Control and Virtualizationstorage location, HKEY_USERSUser Profiles management dialog box, HKEY_USERSuser rights, Account Rights, User Account Control and Virtualizationadding, removing, enumerating, Account Rightsuser-mode address space, Data Structuresuser-mode APCs, Dispatch or Deferred Procedure Call (DPC) Interruptsuser-mode applications, Timer Expiration, Exception Dispatchingtimer use, Timer Expirationvectored exception handling, Exception Dispatchinguser-mode code, Low-IRQL Synchronization, Condition Variables, Interrupt Levels vs. Priority Levelslocking primitives, Low-IRQL Synchronizationpassive interrupt level, Interrupt Levels vs. Priority LevelsSRW Locks for, Condition Variablesuser-mode debugger, Data Structures, Data Structures, Examining Thread ActivityCSR_PROCESS, dumping, Data StructuresCSR_THREAD, dumping, Data Structuresthread stack, displaying, Examining Thread Activityuser-mode debugging, Executive, User-Mode Debugging, User-Mode Debugging, Kernel Support, Native Support, Native Supportkernel support, User-Mode Debuggingnative support, Kernel SupportWinDbg for, Native SupportWindows subsystem support, Native SupportUser-Mode Driver Framework (UMDF), Windows Driver Model (WDM)user-mode dump processes, Debugging Tools for Windowsuser-mode processes, Kernel Debugging, Architecture Overview, Session Manager (Smss), Session Manager (Smss)debugging, Kernel Debuggingservices, Session Manager (Smss)session manager, Session Manager (Smss)types, Architecture Overviewuser-mode scheduling (UMS), Processes, Threads, and Jobsuser-mode synchronization objects, Data Structures, Pushlocks, Pushlockscritical sections, Data Structures, Pushlocksuser-mode thread pools, Worker Factories (Thread Pools)user-mode threads, preempting, Dispatch or Deferred Procedure Call (DPC) InterruptsUser32.dll, Architecture OverviewUserinit.exe, Local Session Manager (Lsm.exe), User Logon Stepsusers, Security, Security, Interactive Services and Session 0 Isolation, Choosing a Processor for a Thread When There Are No Idle Processors, CPU Rate Limits, Protecting Objects, Protecting Objects, Tokens, Tokens, Tokens, Logon, Winlogon Initialization, Windows Networking ComponentsCPU priority, Choosing a Processor for a Thread When There Are No Idle ProcessorsCPU rate limits, CPU Rate Limitsgroup membership, Tokens, Tokensidentity validation, Protecting Objects, Logonintra-user isolation, Protecting Objectslocal logon SID, Winlogon Initializationof the transport, Windows Networking Componentsprivileges, Tokenssecurity context, Securitysecurity credentials, Securityservice UI notifications, Interactive Services and Session 0 Isolation