Windows® Internals, Sixth Edition, Part 2

FF10 key, Hung or Unresponsive SystemsF8 key, Last Known Good, Troubleshooting Crashes, Hung or Unresponsive Systemsfail fast policy, Why Does Windows Crash?failed control sets, Post–Splash Screen Crash or Hangfake symbolic records, Software Data Execution Preventionfaked crash screen saver, Conclusionfast dispatch routines, Structure of a Driverfast I/O, Fast I/O–Mapped File I/O and File Caching, Fast I/O, Mapped File I/O and File Caching, Cache Manager, Virtual Block Caching, Fast I/O, Explicit File I/O–Cache Manager’s Read-Ahead Thread, Cache Manager’s Read-Ahead Thread, Cache Manager’s Read-Ahead Threadbypassing file system, Virtual Block Cachingcaching methods, Cache Managerentry points, Fast I/O–Mapped File I/O and File Caching, Fast I/O, Mapped File I/O and File Cachingfile system drivers, Explicit File I/O–Cache Manager’s Read-Ahead Thread, Cache Manager’s Read-Ahead Thread, Cache Manager’s Read-Ahead Threadoperations, Fast I/Ofast lookups, Driver Objects and Device Objectsfast mutexes, Driver Verifier, Hung or Unresponsive Systemsfast references, Windows x64 16-TB Limitationfast teardown queues, System Threadsfast user switching, Components, ScenariosFastfat.sys driver, FAT12, FAT16, and FAT32, Local FSDsFAT volumes, FAT12, FAT16, and FAT32, VolumesFAT12, FAT16, FAT32 file systems, I/O System Components, Spanned Volumes, BitLocker To Go, FAT12, FAT16, and FAT32–FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, Volumes, File Names, NTFS Bad-Cluster Recovery, The BIOS Boot Sector and Bootmgr, The UEFI Boot Processbad sectors, NTFS Bad-Cluster RecoveryBitLocker To Go, BitLocker To GoBootmgr support, The BIOS Boot Sector and BootmgrEFI system partitions, The UEFI Boot Processextending volumes, Spanned VolumesFAT directory entries, FAT12, FAT16, and FAT32–FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32I/O system and, I/O System Componentsshort file names, File Namesvolumes, FAT12, FAT16, and FAT32, VolumesFAT64 file system (exFAT), exFAT–NTFS, NTFS, NTFSfault handler (pager), x86 Virtual Address Translationfault injection, Driver Verifierfault tolerance, RAID-5 Volumes, Data Redundancy and Fault Tolerancefault tolerant heap (FTH), Fault Tolerant Heapfeedback handler, Utility Function, Utility FunctionFEK (File Encryption Key), Encrypting File System Security, Encrypting File System Security, Encrypting File Data, Encrypting File Datafiber-local storage, Process ReflectionFibre Channel devices, Prioritization Strategies, Disk Class, Port, and Miniport DriversFiDOs (filter device objects), Device Stacks, Device StacksFIFO (first in, first out), Placement Policyfile caching, Mapped File I/O and File CachingFile classes, Transactional APIsfile control blocks (FCBs), Locking, Log Types, Owner Pages, NTFS File System Driver, On-Disk Implementationfile drivers, Scatter/Gather I/O–IRP Stack Locations, IRP Stack Locations, IRP Stack LocationsFile Encryption Key (FEK), Encrypting File System Security, Encrypting File System Security, Encrypting File Datafile I/O, File System Interfaces, File System Interfaces, File System Operationfile name indexes, Indexingfile names, Opening Devices, Opening Devices, User Address Space Layout, Logical Prefetcher, Tracing and Logging, Cache Coherency, UDF, FAT12, FAT16, and FAT32, Hard Links–Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, File Records, File Names–Resident and Nonresident Attributes, File Names, File Names, File Names, File Names, File Names, File Names, File Names, File Names, File Names, Resident and Nonresident Attributes, Resident and Nonresident Attributes, The BIOS Boot Sector and Bootmgras attributes, File Recordsassociated with streams, Tracing and Loggingcache processes, Cache Coherencydevice objects in, Opening DevicesFAT volumes, File Namesfile object attributes, Opening Deviceshard links, Hard Links–Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctionskernel image, The BIOS Boot Sector and Bootmgrlong, FAT12, FAT16, and FAT32, File Names, File Namesmapped files, User Address Space Layoutmultiple, File NamesNTFS on-disk structure, File Names–Resident and Nonresident Attributes, File Names, File Names, File Names, Resident and Nonresident Attributes, Resident and Nonresident Attributesprefetched data, Logical Prefetchershort, File Namestunneling, File NamesUDF format, UDFfile namespaces, File Names–File Names, File Names, File Namesfile object extensions, Opening Devicesfile object pointers, Per-File Cache Data Structures, Explicit File I/Ofile objects, Driver Objects and Device Objects–Opening Devices, Opening Devices, Opening Devices, Opening Devices, Opening Devices–Opening Devices, Opening Devices, Opening Devices, Opening Devices, Opening Devices, Opening Devices, I/O Completion Port Operation, Section Objects, Per-File Cache Data Structures, Security, NTFS File System Driver–NTFS File System Driver, NTFS File System Driverattributes, Opening Devicescompletion ports and, I/O Completion Port Operationextension fields, Opening Deviceshandles, Opening Devices, NTFS File System Driver–NTFS File System Driver, NTFS File System DriverI/O functions, Driver Objects and Device Objects–Opening Devices, Opening Devices, Opening Devices, Opening Devicespointers, Per-File Cache Data Structuressection object pointers, Section Objectssecurity descriptors, Securityviewing handles, Opening Devices–Opening Devices, Opening Devices, Opening Devicesfile record numbers, Hard Links, Object IDs, Resource Managers, On-Disk Implementationfile records, Master File Table, File Records, File Records, File Records, File Names, Resident and Nonresident Attributes, Resident and Nonresident Attributes, Resident and Nonresident Attributesfile sizes, File Systems, UDF, Indexingfile system cache, x86 System Address Space Layout, File System Interfaces, File System Interfaces, Caching with the Mapping and Pinning Interfacesfile system filter drivers, Mount Points, File System Filter Drivers, Process Monitorfile system formats, Volume Mounting, Volume Mounting, File Systemsfile system metadata, Single, Centralized System Cache, Recoverable File System Support, Systemwide Cache Data Structures, Caching with the Mapping and Pinning Interfaces, Caching with the Mapping and Pinning Interfacesfile system minifilters, Memory Manager’s Modified and Mapped Page WriterFile System Recognizer, Volume Mountingfile systems, File Deletion and the Trim Command–File Deletion and the Trim Command, File Deletion and the Trim Command, Volume Mounting, Attaching VHDs, Cache Manager, File Systems–CDFS, Windows File System Formats–Local FSDs, CDFS, CDFS, UDF, UDF, FAT12, FAT16, and FAT32–exFAT, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, exFAT–NTFS, exFAT, exFAT, exFAT–Local FSDs, exFAT, NTFS, NTFS, NTFS, File System Driver Architecture–Process Monitor, Local FSDs–Local FSDs, Local FSDs, Local FSDs, Local FSDs, Local FSDs, Local FSDs, Remote FSDs, Locking, Locking, Locking–Locking, Locking, Locking, Locking, Locking, File System Operation–Process Monitor, File System Operation, Explicit File I/O, Explicit File I/O, Explicit File I/O, Explicit File I/O, Memory Manager’s Modified and Mapped Page Writer, Cache Manager’s Read-Ahead Thread, File System Filter Drivers, File System Filter Drivers–Process Monitor, Process Monitor, Process Monitor, Process Monitor, Process Monitor, Troubleshooting File System Problems–Common Log File System, Process Monitor Troubleshooting Techniques, Common Log File System, Common Log File System, Log Types, Log Layout, Log Blocks, Owner Pages, Translating Virtual LSNs to Physical LSNs, Management Policies, NTFS Design Goals and Features–Data Redundancy and Fault Tolerance, Recoverability, Data Redundancy and Fault Tolerance, Multiple Data Streams–NTFS File System Driver, General Indexing Facility, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Compression and Sparse Files, Compression and Sparse Files, Per-User Volume Quotas, Link Tracking, Defragmentation, Defragmentation, Dynamic Partitioning, NTFS File System Driver, NTFS File System Driver, NTFS On-Disk Structure, Clusters–Master File Table, Master File Table, Master File Table, Master File Table, Master File Table, File Record Numbers, File Records, Resident and Nonresident Attributes, Resident and Nonresident Attributes, Data Compression and Sparse Files, Data Compression and Sparse Files, Compressing Sparse Data, Compressing Nonsparse Data, Compressing Nonsparse Data, Sparse Files, The Change Journal File, The Change Journal File, Indexing, Indexing, Object IDs, Quota Tracking, Consolidated Security, Consolidated Security, Transaction Support, Resource Managers, Resource Managers, On-Disk Implementation, On-Disk Implementation, NTFS Recovery Support–Self-Healing, NTFS Recovery Support, NTFS Recovery Support, Design–Log File Service, Design, Log File Service, Log File Service, Log Record Types, Log Record Types, Log Record Types, Recovery, Redo Pass, Undo Pass, Undo Pass, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, Self-Healing, Encrypting File System Security–Conclusion, Encrypting File System Security, Encrypting File System Security, Encrypting File System Security, Encrypting a File for the First Time, Encrypting File Data, Backing Up Encrypted Files, Conclusioncache manager and, Cache ManagerCDFS, CDFSCLFS, Common Log File System, Log Types, Log Layout, Log Blocks, Owner Pages, Translating Virtual LSNs to Physical LSNs, Management Policiesdeleting files, File Deletion and the Trim Command–File Deletion and the Trim Command, File Deletion and the Trim CommandEFS, Encrypting File System Security–Conclusion, Encrypting File System Security, Encrypting File System Security, Encrypting File System Security, Encrypting a File for the First Time, Encrypting File Data, Backing Up Encrypted Files, ConclusionexFAT, exFAT–NTFS, exFAT, NTFSFAT12, FAT16, FAT32, FAT12, FAT16, and FAT32–exFAT, FAT12, FAT16, and FAT32, exFATfile system driver architecture, File System Driver Architecture–Process Monitor, Local FSDs, Remote FSDs, Locking, Locking, Locking, Locking, Locking, File System Operation, Explicit File I/O, Explicit File I/O, Explicit File I/O, Explicit File I/O, Memory Manager’s Modified and Mapped Page Writer, File System Filter Drivers, Process Monitor, Process Monitorfilter drivers, File System Filter Drivers–Process Monitor, Process Monitorinstances, mounting, Volume Mountinglocal FSDs, Local FSDs–Local FSDs, Local FSDs, Local FSDsnested, Attaching VHDsNTFS, exFAT–Local FSDs, NTFS, Local FSDsNTFS advanced features, Multiple Data Streams–NTFS File System Driver, General Indexing Facility, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Compression and Sparse Files, Compression and Sparse Files, Per-User Volume Quotas, Link Tracking, Defragmentation, Defragmentation, Dynamic Partitioning, NTFS File System Driver, NTFS File System DriverNTFS high-end file system requirements, NTFS Design Goals and Features–Data Redundancy and Fault Tolerance, Recoverability, Data Redundancy and Fault ToleranceNTFS on-disk structure, NTFS On-Disk Structure, Clusters–Master File Table, Master File Table, Master File Table, Master File Table, Master File Table, File Record Numbers, File Records, Resident and Nonresident Attributes, Resident and Nonresident Attributes, Data Compression and Sparse Files, Data Compression and Sparse Files, Compressing Sparse Data, Compressing Nonsparse Data, Compressing Nonsparse Data, Sparse Files, The Change Journal File, The Change Journal File, Indexing, Indexing, Object IDs, Quota Tracking, Consolidated Security, Consolidated Security, Transaction Support, Resource Managers, Resource Managers, On-Disk Implementation, On-Disk Implementation, NTFS Recovery SupportNTFS recovery support, NTFS Recovery Support–Self-Healing, NTFS Recovery Support, Design, Log File Service, Log Record Types, Log Record Types, Log Record Types, Recovery, Redo Pass, Undo Pass, Undo Pass, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, Self-Healingoperations, File System Operation–Process Monitor, Cache Manager’s Read-Ahead Thread, Process Monitoroverview, File Systems–CDFS, CDFSrecoverable, Design–Log File Service, Log File Serviceregistered, viewing, Locking–Locking, Lockingtroubleshooting, Troubleshooting File System Problems–Common Log File System, Process Monitor Troubleshooting Techniques, Common Log File SystemUDF, UDFWindows file systems, Windows File System Formats–Local FSDs, UDF, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, exFAT, NTFS, Local FSDsfile-allocation chains, FAT12, FAT16, and FAT32–FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32file-to-offset pairs, Tracing and LoggingFileCompletionInformation class, I/O Completion Port OperationFileEncryptionStatus function, EncryptionFileInfo driver (Fileinfo.sys), Components, Tracing and Loggingfiles, Typical I/O Processing, Opening Devices, Opening Devices, Opening Devices–Opening Devices, Opening Devices, Opening Devices, Mapped File I/O and File Caching, KMDF Data Model, File Deletion and the Trim Command–File Deletion and the Trim Command, File Deletion and the Trim Command, Stream-Based Caching, File System Interfaces–Fast I/O, File System Interfaces, Fast I/O, Read-Ahead and Write-Behind–Conclusion, Write-Back Caching and Lazy Writing, Disabling Lazy Writing for a File, Conclusion, Remote FSDs–File System Operation, Locking, File System Operation, Cache Manager’s Read-Ahead Thread, Troubleshooting File System Problems, Process Monitor Basic vs. Advanced Modes, Multiple Data Streams–Multiple Data Streams, Multiple Data Streams, General Indexing Facility, Hard Links–Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Compression and Sparse Files, Compression and Sparse Files, Compression and Sparse Files, NTFS File System Driver–NTFS File System Driver, NTFS File System Driver, File Records–File Names, File Records, File Names, File Names, Resident and Nonresident Attributes–Data Compression and Sparse Files, Resident and Nonresident Attributes, Resident and Nonresident Attributes, Data Compression and Sparse Files–The Change Journal File, Data Compression and Sparse Files, Data Compression and Sparse Files, Compressing Nonsparse Data, Compressing Nonsparse Data, The Change Journal File, The Change Journal File, Backing Up Encrypted Files–Conclusion, Conclusionattributes, Multiple Data Streams–Multiple Data Streams, Multiple Data Streamsattributes list, File Records–File Names, File Records, File Nameschange notifications, Process Monitor Basic vs. Advanced Modescompression, Compression and Sparse Files, Data Compression and Sparse Files–The Change Journal File, Data Compression and Sparse Files, Compressing Nonsparse Data, Compressing Nonsparse Data, The Change Journal Filecopying encrypted, Backing Up Encrypted Files–Conclusion, Conclusiondeleted, File Deletion and the Trim Command–File Deletion and the Trim Command, File Deletion and the Trim Commandhandles, NTFS File System Driver–NTFS File System Driver, NTFS File System Driverhard links, Hard Links–Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctionsindexing, General Indexing FacilityKMDF objects, KMDF Data Modellocking, Remote FSDs–File System Operation, Locking, File System Operationmapped file I/O, Mapped File I/O and File Cachingmissing, Troubleshooting File System Problemsmultiple names, File Namesnew, The Change Journal Fileopen instances of, Opening Devicesread-ahead and write-behind, Read-Ahead and Write-Behind–Conclusion, Write-Back Caching and Lazy Writing, Conclusionresident and nonresident attributes, Resident and Nonresident Attributes–Data Compression and Sparse Files, Resident and Nonresident Attributes, Resident and Nonresident Attributes, Data Compression and Sparse Filessecurity descriptors, Opening Devicessetting up for cache access, File System Interfaces–Fast I/O, File System Interfaces, Fast I/Osparse files, Compression and Sparse Files, Compression and Sparse Filesstreams, Stream-Based Cachingtemporary, Disabling Lazy Writing for a Fileusage patterns, Cache Manager’s Read-Ahead Threadviewing device handles, Opening Devices–Opening Devices, Opening Devices, Opening Devicesvirtual, Typical I/O ProcessingFILE_ATTRIBUTE_COMPRESSED flag, Compression and Sparse FilesFILE_ATTRIBUTE_ENCRYPTED flag, EncryptionFILE_ATTRIBUTE_REPARSE_POINT flag, Symbolic (Soft) Links and JunctionsFILE_ATTRIBUTE_TEMPORARY flag, Disabling Lazy Writing for a FileFILE_FLAG_NO_BUFFERING flag, Read-Ahead and Write-Behind, Explicit File I/OFILE_FLAG_OVERLAPPED flag, Synchronous and Asynchronous I/OFILE_FLAG_RANDOM_ACCESS flag, Cache Virtual Memory Management, Fast I/O, Intelligent Read-AheadFILE_FLAG_SEQUENTIAL_SCAN flag, Cache Virtual Memory Management, Intelligent Read-AheadFILE_FLAG_WRITE_THROUGH flag, Forcing the Cache to Write Through to DiskFILE_SUPPORTS_TRANSACTIONS value, Transactional APIsFILE_SYSTEM_RECOGNITION_STRUCTURE type, Local FSDsfilter device objects (FiDOs), Device Stacks, Device Stacks, Basic Disk Volume Managerfilter drivers, Opening Devices, I/O Requests to Layered Drivers, User-Mode Driver Framework (UMDF), Level of Plug and Play Support, Driver Support for Plug and Play, BitLocker Drive Encryption, Full-Volume Encryption Driver–BitLocker Management, BitLocker Management, Process Monitor–Process Monitor, Process Monitor, Process MonitorBitLocker, BitLocker Drive Encryptionfile associations, Opening Devicesfile system drivers and, I/O Requests to Layered DriversFVE drivers, Full-Volume Encryption Driver–BitLocker Management, BitLocker ManagementPnP manager, Level of Plug and Play Support, Driver Support for Plug and PlayProcess Monitor, Process Monitor–Process Monitor, Process Monitor, Process MonitorUMDF reflectors, User-Mode Driver Framework (UMDF)Filter Manager (Fltmc.exe), I/O Requests to Layered Drivers, Process Monitor, Process Monitorfilter miniport drivers, Process Monitorfilters, IRPs and, I/O Requests to Layered Driversfind APIs, Transactional APIsFindFirstChangeNotification function, Process Monitor Basic vs. Advanced Modes, Change LoggingFindNextChangeNotification function, Process Monitor Basic vs. Advanced ModesFindNextFile API, Transactional APIsFireWire cables, Hung or Unresponsive Systemsfirst in, first out (FIFO), Placement Policyfirstmegabytepolicy element, The BIOS Boot Sector and Bootmgrfixed disks, Volume Management, Virtual Hard Disk Supportflash disks, Prioritization Strategies, BitLocker Drive Encryption, BitLocker To Go, ReadyBoost–Unified Caching, ReadyDrive, Unified CachingBitLocker encryption, BitLocker Drive EncryptionBitLocker To Go, BitLocker To GoI/O prioritization strategy, Prioritization StrategiesReadyBoost, ReadyBoost–Unified Caching, ReadyDrive, Unified Cachingflash drivers, User-Mode Driver Framework (UMDF)flash memory, Solid State Disks, NAND-Type Flash Memory, NAND-Type Flash Memory, ReadyBoostfloppy disk drive letters, The Mount Managerfloppy disks, Storage ManagementFltmc.exe (Filter Manager), Process Monitorflush queues (CLFS), Log Types–Log Types, Log TypesFlushFileBuffers function, Forcing the Cache to Write Through to Diskflushing caches, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Forcing the Cache to Write Through to Disk, Design, Log File Service, Recovery, Analysis Pass, Shutdownin recovery passes, Recovery, Analysis Passlazy write systems, DesignLFS operations, Log File Serviceshutdown process, Shutdownthreads explicitly flushing, Forcing the Cache to Write Through to Diskwrite operations, Write-Back Caching and Lazy Writingwrite-behind operations, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writingflushing mapped files, Flushing Mapped Files–Write Throttling, Write Throttlingflushing modified pages, Modified Page Writer, Modified Page WriterFlushViewOfFile function, Reserving and Committing Pagesfontpath element, The BIOS Boot Sector and Bootmgrfopen function, Opening DevicesForce Pending I/O Requests option, Driver Verifierforced affinitization, Algorithm Overrides, Performance Checkforcing IRQL checks, Driver Verifierforeground processes, Componentsforeign volume recovery keys, BitLocker Key Recoveryformat command, UDF, Volumes, ClustersFormat utility, NTFS Bad-Cluster Recoveryformat, disk, Disk Sector Format–NAND-Type Flash Memory, Disk Sector Format, Disk Sector Format, NAND-Type Flash MemoryFO_RANDOM_ACCESS flag, Fast I/Ofragmentation, Heap Manager Structure, The Low Fragmentation Heap, Clusters, Compressing Nonsparse Datafree blocks, Heap Manager, Heap Security Features, Pageheap, Fault Tolerant Heapfree function, Types of Heapsfree lists, Memory Manager Components, Examining Memory Usage, NUMA, Page List Dynamics, Balance Set Manager and Swapperfree page lists, Modified Page Writerpage writer, Modified Page Writerfree pages, Reserving and Committing Pages, Modified Page Writer, PFN Data StructuresFree PFN state, Page Frame Number Database, Page Frame Number Databasefree pool tag, Monitoring Pool Usagefree space, Management Policiesfreed buffers, Look-Aside Listsfreed memory, Dynamic System Virtual Address Space Management, Driver Verifier, Driver Verifier, Memory Notification Eventsfreed object referencing, Driver Verifierfreed pool, Basic Crash Dump Analysis, Buffer Overruns, Memory Corruption, and Special Poolfreezes, VSS writers and, VSS Architecture, VSS Architecturefrequency (processors), Utility Function, Utility Function, Increase/Decrease Actions, Performance Checkfront-end heap, Heap Manager Structure, The Low Fragmentation HeapFSCTL control codes, Symbolic (Soft) Links and Junctions, Compression and Sparse Files, Compression and Sparse Files, Defragmentation, Data Compression and Sparse Files, Compressing Nonsparse Data, Resource Managers, Logging Implementation, Encrypting File System Securitycluster usage, Defragmentationcompression, Compression and Sparse Files, Data Compression and Sparse Files, Compressing Nonsparse Datarepairing volumes, Encrypting File System Securityreparse points, Symbolic (Soft) Links and Junctionssparse files, Compression and Sparse FilesTxF recovery process, Logging ImplementationTxF resource managers, Resource ManagersFSCTL_QUERY_FILE_SYSTEM_RECOGNITION code, Local FSDsFsdepends.sys driver, Nested File SystemsFSDs (file system drivers), Fast I/O, IRP Stack Locations, I/O Requests to Layered Drivers–I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, Mount Points, Virtual Disk Service, Per-File Cache Data Structures–Caching with the Mapping and Pinning Interfaces, File System Interfaces, File System Interfaces, Caching with the Mapping and Pinning Interfaces, Caching with the Mapping and Pinning Interfaces–Fast I/O, Caching with the Direct Memory Access Interfaces, Fast I/O, Write-Back Caching and Lazy Writing, File System Driver Architecture, File System Driver Architecture, Local FSDs, Local FSDs–Local FSDs, Local FSDs, Local FSDs, Remote FSDs–File System Operation, Remote FSDs–File System Operation, Remote FSDs, Locking, Locking, Locking, Locking, Locking, File System Operation–Process Monitor, File System Operation, File System Operation, File System Operation, Explicit File I/O, Explicit File I/O, Explicit File I/O, Explicit File I/O, Explicit File I/O, Explicit File I/O, Memory Manager’s Modified and Mapped Page Writer–Process Monitor, Memory Manager’s Page Fault Handler, Process Monitor, Process Monitor, Dynamic Partitioningassociated IRPs, I/O Requests to Layered Drivers–I/O Requests to Layered Drivers, I/O Requests to Layered Drivers, I/O Requests to Layered Driverscache manager, File System Driver Architecturecached files, File System Interfacesclient and server-side remote FSDs, Remote FSDs–File System Operation, Remote FSDs, Locking, Locking, Locking, Locking, File System Operation, File System Operationdisk I/O operations, Virtual Disk Servicefast I/O, Fast I/O, Explicit File I/O, Explicit File I/Ofile I/O operations, Per-File Cache Data Structures–Caching with the Mapping and Pinning Interfaces, File System Interfaces, Caching with the Mapping and Pinning Interfacesfile system operations, File System Operation–Process Monitor, Explicit File I/O, Explicit File I/O, Explicit File I/O, Explicit File I/O, Memory Manager’s Modified and Mapped Page Writer–Process Monitor, Memory Manager’s Page Fault Handler, Process Monitor, Process Monitorfunctions, IRP Stack Locationslazy writer, Write-Back Caching and Lazy Writinglocal FSDs, Local FSDs–Local FSDs, Local FSDs, Local FSDslocking, Remote FSDs–File System Operation, Locking, File System Operationmapping and pinning interfaces, Caching with the Mapping and Pinning Interfaces–Fast I/O, Caching with the Direct Memory Access Interfaces, Fast I/Omemory manager, File System Driver Architectureregistering, Local FSDsreparse points, Mount Pointsshrinking partitions, Dynamic Partitioningvolume manager and disk drivers, I/O Requests to Layered DriversFsRtlXxx functions, Lockingfsutil command, Hard Links, Self-HealingFsutil.exe utility, Master File Table, The Change Journal File, Isolation, Resource Managers, On-Disk ImplementationFs_rec.sys driver, Volume MountingFTH (fault tolerant heap), Fault Tolerant HeapFthsvc.dll, Fault Tolerant Heapfull-volume encryption (FVE), Full-Volume Encryption Driver–BitLocker Management, BitLocker Management, BitLocker Managementfull-volume encryption key (FVEK), Encryption Keys–Trusted Platform Module (TPM), Trusted Platform Module (TPM)fully provisioned virtual hard disks, Virtual Hard Disk Supportfully reentrant functionality, Internal Synchronizationfunction codes (IRP stack locations), IRP Stack Locationsfunction drivers, Level of Plug and Play Support, Driver Support for Plug and Play, Driver Support for Plug and Play–The Start Value, Driver Loading, Initialization, and Installation, The Start Value, Device Stacks, Device Stack Driver Loading, Driver Installationclass/port drivers, Device Stacksorder of loading, Device Stack Driver LoadingPnP driver installation, Driver InstallationPnP manager, Level of Plug and Play Support, Driver Support for Plug and PlayPnP state transitions, Driver Support for Plug and Play–The Start Value, Driver Loading, Initialization, and Installation, The Start Valuefunction filters, WDM Driversfunctional device objects (FDOs), Device Stacks–Device Stack Driver Loading, Device Stacks, Device Stack Driver Loadingfunctions (user-mode applications), The I/O Manager–Device Drivers, Typical I/O Processing, Device DriversFVE (full-volume encryption), Full-Volume Encryption Driver–BitLocker Management, BitLocker ManagementFVEK (full-volume encryption keys), Encryption Keys–Trusted Platform Module (TPM), Trusted Platform Module (TPM)Fvevol.sys driver, BitLocker Drive Encryption, Full-Volume Encryption Driver