RAM (random access memory)
restricting amount, 15
and warm boot, 219
randomization. See Address Space Layout Randomization (ASLR)
RDC. See Remote Desktop Connection (RDC)
read access, to Documents and Settings, denying for Everyone group, 17
reading files, under virtualization, 119-120
rebooting
delay, 51-52
and transaction rollback, 24
recovery in BitLocker, 194, 209-216
console, 209
desktop hardware failure, without TPM, 210
"found" laptop, 214-215
laptop hardware failure, with TPM, 211-212
lost USB key, with TPM, 212-214
policy for user choices, 219
summary, 215-216
recovery key, 206, 210
multiple copies, 216
recovery password, 194, 206, 215
storage location, 210
storing in Active Directory, 216
"A referral was returned from the server" message, 110
reg.exe application, 121
Registry. See also HKEY_
and malware, 132
remote access, 27
setting to virtualize key, 121
transaction-based, 23-24
virtualization, 120-121
Registry Editor, 100
registry notification hooks, 232
regulations, 184
relative ID (RID), 67
Remote Assistance, 247
Remote Desktop Connection (RDC), 22, 247
for cutting and pasting files, 23
Remote Desktop for Vista, 21-24
remote management, with WMI, 220
Remote Procedure Call (RPC), 247
removememory option in BCD, 15
repartitioning, 202
reputation, 109
requireAdministrator option, for manifest level= entry, 91
resource editor, 88-89
for adding manifest, 91-92
resources, in EXE file, viewing, 89, 89, 90
response, 28
restoring files, privilege for, 71
restricted user, 65
rights, 68-69
Rights Management Services (RMS), 183
rollback of transaction, at reboot, 24
root account, in Unix or Linux, 62
rootkits, 187, 231, 251
RPC (Remote Procedure Call), 247
RPCSS.DLL, 95
"Run as administrator," 75, 75-80
and process integrity level, 154
for starting command prompt, 3
"Run…," restoring to Start menu, 7-8
RunAs feature, to view administrator token command prompt window, 75-80
Russinovich, Mark, 4
Process Explorer, 155-156