Windows® Internals, Sixth Edition, Part 2

Nname logging traces, Tracing and Loggingname resolution, Explicit File I/Onamed data attributes, File RecordsNamed Pipe File System (Npfs) driver, IRP Stack Locationsnamed pipe file system drivers, Smss, Csrss, and Wininitnamed pipes, Using Completion Ports, When There Is No Crash Dump, When There Is No Crash Dumpnamed streams, UDF, Multiple Data Streams, NTFS File System Drivernamespace subdirectories, Disk Device Objectsnamespaces, The Mount Manager–Volume Mounting, The Mount Manager, Mount Points, Volume Mounting, Volume Mounting, Link Tracking–Encryption, Link Tracking, Encryptionshell, Link Tracking–Encryption, Link Tracking, Encryptionvolumes, The Mount Manager–Volume Mounting, The Mount Manager, Mount Points, Volume Mounting, Volume Mountingnaming, I/O System, Disk Device Objects, Shared Memory and Mapped Filesdisk class drivers, Disk Device ObjectsI/O system, I/O Systemsection objects, Shared Memory and Mapped FilesNAND-type flash memory, Solid State Disks–File Deletion and the Trim Command, NAND-Type Flash Memory, File Deletion and the Trim Command, File Deletion and the Trim CommandNAS (network-attached storage), Booting from iSCSINational Language System (NLS) files, The BIOS Boot Sector and Bootmgrnative applications, BIOS Preboot, Smss, Csrss, and WininitNDIS (Network Driver Interface Specification), Layered Driversneither I/O, IRP Buffer Management, IRP Buffer Managementnested file systems, Nested File Systemsnested partitions, GUID Partition Table Partitioningnesting VHDs, Virtual Hard Disk Support.NET Framework, Resource Managersnetwork adapters, Types of Device Drivers, The Start Value, 32-Bit Client Effective Memory Limitsnetwork API drivers, Types of Device Driversnetwork devices, Types of Device Drivers, The Plug and Play (PnP) Manager, Caching with the Direct Memory Access InterfacesNetwork Driver Interface Specification (NDIS), Layered Driversnetwork endpoints, Using Completion Portsnetwork file system drivers, User-Initiated I/O Cancellation, NTFS File System Drivernetwork interface controller ROM, Booting from iSCSInetwork protocol drivers, Fast I/Onetwork providers, Smss, Csrss, and Wininitnetwork redirectors, Cache Coherency, Write Throttlingnetwork storage management, Storage ManagementNetwork subkey, Driver Loading in Safe Mode, Driver Loading in Safe Modenetwork-attached storage (NAS), Booting from iSCSInew operator, Heap ManagerNew Simple Volume wizard, Mirrored VolumesNLS files, The BIOS Boot Sector and Bootmgr, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive Subsystems, Initializing the Kernel and Executive SubsystemsNLS object directory, Initializing the Kernel and Executive SubsystemsNMI (nonmaskable interrupt), Causes of Windows Crashes, Hung or Unresponsive Systems, Hardware MalfunctionsNMICrashDump file, Hardware Malfunctionsno execute page protection (DEP), Protecting Memory–Copy-on-Write, No Execute Page Protection, No Execute Page Protection, Software Data Execution Prevention–Copy-on-Write, Software Data Execution Prevention, Copy-on-Write, Copy-on-Write, Copy-on-Write, User Address Space Layout, Heap Randomization, Physical Address Extension (PAE)address space allocation, User Address Space LayoutASLR, Heap Randomizationmemory manager, Protecting Memory–Copy-on-Write, No Execute Page Protection, Copy-on-Write, Copy-on-WritePAE, No Execute Page Protection, Physical Address Extension (PAE)software data execution prevention, Software Data Execution Prevention–Copy-on-Write, Copy-on-Writestack cookies and pointer encoding, Software Data Execution PreventionNo Reboot (Driver Verifier), Buffer Overruns, Memory Corruption, and Special Poolno-execute memory, The BIOS Boot Sector and Bootmgrnocrashautoreboot element, The BIOS Boot Sector and Bootmgrnodes (NUMA), NUMAnoerrordisplay element, The BIOS Boot Sector and Bootmgrnointegritychecks element, The BIOS Boot Sector and Bootmgrnolowmem element, The BIOS Boot Sector and Bootmgrnolowmen BCD option, Physical Address Extension (PAE), Windows Client Memory LimitsNon Uniform Memory Architecture (NUMA), NUMAnon-fault-tolerant volumes, NTFS Bad-Cluster Recoverynon-PAE kernel, No Execute Page Protectionnon-PAE systems, x86 Virtual Address Translation, x86 Virtual Address Translation, Page Directories, Page Tables and Page Table Entries, Hardware vs. Software Write Bits in Page Table Entriesnon-Plug and Play drivers, Driver Objects and Device Objects, Kernel-Mode Driver Framework (KMDF), Level of Plug and Play Supportcreating device objects, Driver Objects and Device ObjectsKMDF initialization routines, Kernel-Mode Driver Framework (KMDF)PnP levels of support, Level of Plug and Play Supportnonbased sections, Section Objectsnoncached I/O, Opening Devices, Scatter/Gather I/O, File System Interfaces, Explicit File I/O, Memory Manager’s Modified and Mapped Page Writer, Cache Manager’s Lazy Writerfile object attributes, Opening Devicesfile objects, Explicit File I/OIRPs, Memory Manager’s Modified and Mapped Page Writermemory manager and, File System Interfacespage writers, Cache Manager’s Lazy Writerscatter/gather I/O and, Scatter/Gather I/Ononcached memory mapping, Protecting Memorynoncached read operations, File System Interfaces, Write-Back Caching and Lazy Writingnoncommitted transactions, Analysis Pass, Undo Passnonencoded pointers, Software Data Execution Preventionnonmaskable interrupt (NMI), Causes of Windows Crashes, Hung or Unresponsive Systems, Hardware Malfunctionsnonpageable memory, Large and Small Pagesnonpaged look-aside lists, Look-Aside Listsnonpaged pool, Pool Sizes–Pool Sizes, Pool Sizes, Monitoring Pool Usage–Look-Aside Lists, Monitoring Pool Usage, Look-Aside Lists, Virtual Address Space Layouts, 64-Bit Address Space Layouts, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management–User Address Space Layout, System Virtual Address Space Quotas, User Address Space Layout, Commit Charge and the System Commit Limit, Virtual Address Descriptors, NUMA, Advanced Crash Dump Analysis–Stack Trashes, Stack Trashesaddress space, 64-Bit Address Space Layoutscommit charge, Commit Charge and the System Commit Limitdebugging information, Advanced Crash Dump Analysis–Stack Trashes, Stack Trashesexpanding, Dynamic System Virtual Address Space Managementmemory quotas, Dynamic System Virtual Address Space Management–User Address Space Layout, System Virtual Address Space Quotas, User Address Space LayoutNUMA nodes, NUMAperformance counters, Monitoring Pool Usage–Look-Aside Lists, Monitoring Pool Usage, Look-Aside Listsreclaiming virtual addresses, Dynamic System Virtual Address Space Managementsizes, Pool Sizes–Pool Sizes, Pool Sizessystem space, Virtual Address Space LayoutsVADs, Virtual Address Descriptorsnonpaged pool buffers, IRP Buffer Management, User-Mode Driver Framework (UMDF)nonpaged pool session memory, Driver Verifier, Driver Verifiernonpaged system memory, I/O Requests to Layered Driversnonpower-managed queues, KMDF I/O Modelnonprototype PFNs, Page Frame Number Database–Page Frame Number Database, Page Frame Number Databasenonresident attributes (NTFS), Resident and Nonresident Attributes–Data Compression and Sparse Files, Resident and Nonresident Attributes, Resident and Nonresident Attributes, Resident and Nonresident Attributes, Data Compression and Sparse Filesnonsparse data, Compressing Nonsparse Data, Compressing Nonsparse Data, Sparse Files, Sparse Filesnontransacted writers and readers, Isolation, Isolation, Resource Managersnonvolatile data, Write-Back Caching and Lazy Writingnonvolatile memory, Solid State Disksnonvolatile RAM (NVRAM), ReadyDrive, Unified Caching, The UEFI Boot ProcessNOR-type flash memory, Solid State DisksNormal I/O priority, I/O Priorities, Prioritization Strategies, I/O Priority Boosts and Bumps, I/O Priority Boosts and Bumps, I/O Priority Boosts and BumpsNotmyfault.exe, I/O Cancellation for Thread Termination, I/O Cancellation for Thread Termination, Monitoring Pool Usage, Notmyfaultnoumex element, The BIOS Boot Sector and Bootmgrnovesa element, The BIOS Boot Sector and BootmgrNpfs (Named Pipe File System) driver, IRP Stack LocationsNt5.cat file, Driver InstallationNt5ph.cat file, Driver InstallationNtbtlog.txt file, Boot Logging in Safe ModeNtCreateFile function, Opening Devices, Explicit File I/ONtCreateIoCompletion system service, I/O Completion Port OperationNtCreatePagingFile service, Page FilesNtDeviceIoControlFile function, IRP Buffer ManagementNtdll.dll, Opening Devices, Heap Manager, Initializing the Kernel and Executive SubsystemsNTFS file system, I/O System Components, File Deletion and the Trim Command, Spanned Volumes, Mount Points–Volume Mounting, Mount Points, Volume Mounting, exFAT, NTFS, NTFS, NTFS, NTFS, NTFS, NTFS, NTFS, NTFS, File System Driver Architecture, High-End File System Requirements–Data Redundancy and Fault Tolerance, Recoverability, Security, Data Redundancy and Fault Tolerance, Data Redundancy and Fault Tolerance, Data Redundancy and Fault Tolerance, Multiple Data Streams, Multiple Data Streams–Hard Links, Unicode-Based Names, Unicode-Based Names, General Indexing Facility, General Indexing Facility, Hard Links–Symbolic (Soft) Links and Junctions, Hard Links, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Compression and Sparse Files, Per-User Volume Quotas, Per-User Volume Quotas, Encryption–Defragmentation, Encryption, POSIX Support, Defragmentation, Defragmentation, NTFS File System Driver, NTFS On-Disk Structure, Volumes, Master File Table, Master File Table, Master File Table, File Records, File Names, Data Compression and Sparse Files, Data Compression and Sparse Files, Compressing Nonsparse Data, Compressing Nonsparse Data, Compressing Nonsparse Data, Sparse Files, Sparse Files, The Change Journal File–Indexing, Indexing, Object IDs, Reparse Points, Transaction Support–NTFS Recovery Support, Isolation–Transactional APIs, Isolation, Isolation, Isolation, Isolation, Transactional APIs, Transactional APIs, Resource Managers–On-Disk Implementation, Resource Managers, On-Disk Implementation, On-Disk Implementation, On-Disk Implementation–NTFS Recovery Support, Recovery Implementation, NTFS Recovery Support, NTFS Recovery Support, NTFS Recovery Support–Encrypting File System Security, Design, Metadata Logging, Metadata Logging–Recovery, Log File Service, Recovery, Self-Healing, Encrypting File System Security, Troubleshooting Crashesalternate data streams, NTFSchange journal file, The Change Journal File–Indexing, Indexingclusters, NTFS, NTFS On-Disk Structurecompression, NTFS, Compression and Sparse Files, Data Compression and Sparse Files, Data Compression and Sparse Files, Compressing Nonsparse Data, Compressing Nonsparse Datacrash codes, Troubleshooting Crashesdata redundancy, Data Redundancy and Fault Tolerancedata structures, NTFS File System Driverdefragmentation, Defragmentationencryption, NTFS, Encryption–Defragmentation, Encryption, Defragmentationfile names, File Records, File Namesfile system driver, File System Driver Architectureflash memory, File Deletion and the Trim Commandhard links, NTFS, Hard Links–Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctionshigh-end requirements, High-End File System Requirements–Data Redundancy and Fault Tolerance, Data Redundancy and Fault ToleranceI/O system, I/O System Componentsindexing, General Indexing Facilityisolation, Isolation–Transactional APIs, Isolation, Transactional APIsmaster file tables, Master File Table, Master File Table, Master File Tablemetadata logging, Metadata Logging–Recovery, Log File Service, Recoverymount points, Mount Points–Volume Mounting, Mount Points, Volume Mountingmultiple data streams, Multiple Data Streams–Hard Links, Unicode-Based Names, Hard Linksobject attributes, Multiple Data Streamsobject IDs, Object IDsper-user volume quotas, exFAT, Per-User Volume Quotas, Per-User Volume QuotasPOSIX support, POSIX Supportrecoverability, NTFS, Recoverability, Data Redundancy and Fault Tolerance, NTFS Recovery Support–Encrypting File System Security, Design, Metadata Logging, Encrypting File System Securityreparse points, Reparse Pointsresource managers, Resource Managers–On-Disk Implementation, On-Disk Implementationsecurity, NTFS, Securityself-healing, Self-Healingspanned volumes, Spanned Volumessparse files, Compressing Nonsparse Data, Sparse Files, Sparse Filessymbolic links and junctions, NTFS, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctions, Symbolic (Soft) Links and Junctionstransaction logging, On-Disk Implementation–NTFS Recovery Support, Recovery Implementation, NTFS Recovery Supporttransaction support, Transaction Support–NTFS Recovery Support, Isolation, Isolation, Isolation, Transactional APIs, Resource Managers, On-Disk Implementation, NTFS Recovery SupportUnicode-based names, Unicode-Based Names, General Indexing Facilityvolumes, VolumesNTFS file system driver (Ntfs.sys), NTFS, NTFS File System Driver, NTFS File System Driver, NTFS File System DriverNtfsCopyReadA routine, Fast I/ONTFS_FILE_SYSTEM stop code, Causes of Windows CrashesNtInitializeRegistry function, Smss, Csrss, and WininitNtkrnlpa.exe kernel, Physical Address Extension (PAE)NtQuerySystemInformation API, I/O Priority Boosts and Bumps, Logical PrefetcherNtReadFile function, Synchronous and Asynchronous I/O, IRP Buffer Management, Explicit File I/O, Code Overwrite and System Code Write ProtectionNtRemoverIoCompletion system service, I/O Completion Port OperationNtSetInformationFile system service, I/O Completion Port OperationNtSetIoCompletion system service, I/O Completion Port OperationNtSetSystemInformation API, ScenariosNtShutdownSystem function, ShutdownNtWriteFile function, IRP Buffer Management, I/O Request to a Single-Layered Driver, Explicit File I/Onull modem cables, Hung or Unresponsive Systems, When There Is No Crash DumpNUMA (Non Uniform Memory Architecture), Kernel-Mode Heaps (System Memory Pools), NUMANUMA I/O, Disk Class, Port, and Miniport DriversNUMA nodes, Disk Class, Port, and Miniport Drivers, PFN Data Structures, The BIOS Boot Sector and Bootmgrnumproc element, The BIOS Boot Sector and BootmgrNVRAM (nonvolatile RAM), ReadyDrive, Unified Caching, The UEFI Boot Processnx element, The BIOS Boot Sector and Bootmgr