index_S

Index

[SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [J] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X]

safe mode
     boot logging
     boot option
     post-splash screen crashes
     starting services in
     user-mode programs
SANs (System Area Networks) 2nd 3rd
SAPICs (Streamlined Advanced Programmable Interrupt Controllers)
Savedump process 2nd 3rd
scalability, Windows
scatter/gather I/O
ScAutoStartServices function 2nd
ScCreateServiceDB function
ScGetBootAndSystemDriverState function
scheduling schemas, Active Directory
ScLoadDeviceDriver function
ScLogonAndStartImage function 2nd
screen saver, Blue Screen
ScRevertToLastKnownGood function
scripts
     Software Restriction Policies
     WMI
ScShutdownAllServices function
SCSI (Small Computer System Interface) 2nd 3rd 4th 5th 6th
scsi() ARC syntax
Scsiport.sys
ScStartService function 2nd
secret service passwords
secrets, Lsass 2nd
Section executive object type
section objects
     access-control lists (ACLs)
     attributes
     cache manager 2nd
     data structures
     memory management
     process creation
     prototype PTEs
     shared memory and mapped files
     viewing
     viewing control areas
sectors
     bad-cluster recovery and spare
     boot
     boot process
     defined 2nd
secure attention sequence (SAS) 2nd 3rd
Secure Channel (SChannel) SSP
secure desktops, Winlogon
Secure Sockets Layer (SSL) 2nd
security
     Access token executive object type
     account rights and privileges, 516
     Address Windowing Extensions
     auditing
     AuthZ API
     Common Criteria (CC)
     components
     contexts
     driver-signing policy
     ETHREAD blocks
     Evaluation Criteria (TCSEC)
     executive object 2nd
     executive object services
     explicit file I/O
     file object
     IPSec
     job objects
     kernel mode
     logging activity in unprivileged accounts
     logon
     mailslot
     memory protection 2nd 3rd
     named pipe
     NTFS consolidated security descriptors
     NTFS design requirement
     NTFS security file
     object manager
    object protection [See object security]
     processes 2nd 3rd
     rating standards
     Recovery Console
     registry 2nd
     Regmon tool
     remote procedure call (RPC)
    Security Accounts Manager (SAM) [See Security Accounts Manager (SAM)]
    security descriptors [See security descriptors]
    security identifiers [See security identifiers (SIDs)]
     service accounts
     services 2nd 3rd
     Software Restriction Policies
     system code write protection 2nd
     threads
     troubleshooting access-denied errors
     viewing registry security settings
     warning regarding GUI security editors
     Windows and
     Windows NT file system
     WMI
     zero-initialized pages
Security Accounts Manager (SAM)
     Active Directory and
     privileges
     security
security descriptors
     access control
     attributes
     file object
     NTFS consolidated
     registry
     service
     viewing
     warning regarding GUI security editors
security editors, warning regarding GUI
security identifiers (SIDs)
     access checks
     machine
     quota management
     registry
     viewing, using PsGetSid tool
security inheritance support DLL
security method, executive object
security policies
Security Policy Editor
security quality of service (SQOS)
security reference monitor (SRM)
     executive
     executive objects
     initialization 2nd 3rd
     local procedure calls
     Lsass
     security
Security Support Provider Interface (SSPI) packages
security support providers (SSPs)
Security Target (ST) concept
security-descriptor cell data type
SeDefaultObjectMethod function
segment structure 2nd
SeLsaCommandPort
Semaphore executive object type
semaphores
     executive resources
     priority boosts after waiting for
send function
serial port boot options 2nd 3rd 4th
serialization, NDIS
SeRmCommandPort
Server Message Block (SMB) protocol
server versions, Windows
servers
     file system driver
     named pipe
     ports
     RPC server name publishing
     server farm online crash analysis
     Winsock
service accounts
     interactive services
     local service account
     local system account
     network service account
     running services in alternate
service applications
service control manager (SCM) [See also services]
     auto-start device driver loading
     boot process 2nd
     initialization
     network binding
     safe mode boots
     service control programs (SCPs)
     services 2nd
     system processes
service control programs (SCPs)
     service applications
     service control manager
     services
Service Host (Svchost) process
     as shared service process
     WMI provider
service packs, Windows
     symbol files
     system service numbers
service provider interface (SPI),Winsock
Service-0x0-3e7$ windows station
services [See also device drivers]
     accepting boot and last know good
     components of
     executive object generic
     failures
     interactive
     listing installed
     memory manager 2nd
     service applications
     service control manager (SCM) 2nd
     service control programs (SCPs)
     service descriptor tables
    service dispatching [See system service dispatching]
     service processes
     shared processes
     shutdown of
     SrvAny tool
     startup errors
     startup of
     viewing details inside service processes
     Windows and
Services for UNIX 2nd 3rd
Services MMC snap-in 2nd
Services.exe [See service control manager (SCM)]
SeSecurityPrivilege and SeAuditPrivilege privileges
SeSinglePrivilegeCheck and SePrivilegeCheck functions
session layer, OSI model
session space
     sessions
     viewing
     x86 layouts
session working sets
sessions
     NetBIOS
     session zero
     Terminal Services and multiple
SetHandleInformation function 2nd
SetInformationJobObject function
SetPriorityClass function
SetProcessAffinityMask function
SetProcessShutdownParameters function
SetProcessWorkingSetSize function 2nd
SetProcessWorkingSetSizeEx function 2nd
SetServiceStatus function
SetThreadAffinityMask function
SetThreadIdealProcessor function
SetThreadPriorityBoost function
Setup function
Setup program, Windows
     boot process 2nd
     partitioning
     repair installs
     security identifiers (SIDs)
setup programs [See also installation]
     driver signing
     registry settings
     service applications
    Windows [See Setup program, Windows]
Setup.log
     determining which HAL is running
     kernel versions
     multiprocessor and uniprocessor file versions
Setupdd.sys
SetupDiEnumDeviceInterfaces function
SetupDiGetDeviceInterfaceDetail function
SetWindowsHook function
shadow copies
shared assemblies
shared cache map structures 2nd 3rd
shared executive objects
shared folders
shared memory [See also section objects]
     Section executive object type
     section objects, mapped files, and
     sections
     Windows NT
shared resources 2nd [See also file objects]
shared service processes
shell
     boot option
    Explorer.exe as [See Explorer.exe]
     initialization
     NTFS shortcuts
     safe mode boots
     user logon
     Userinit.exe
short names, NTFS
short quantum 2nd
shutdown
     clearing page file
     overview
     service
     shutdown levels 2nd
side-by-side assemblies
signaled state, dispatcher object 2nd
signature() syntax
signatures, hive 2nd
simple volumes
single sign-on
single-layered device drivers
size
     cache
     hive limits
SleepEx function
Small Computer System Interface (SCSI) 2nd 3rd 4th 5th 6th
small memory dump crash dump files
small pages
small-IRP look-aside list
Smss (Session Manager)
     Autochk.exe
     boot process 2nd 3rd
     Chkdsk
     creating sessions
     initialization
     Recovery Console
     system processes
sockets, Winsock
soft page faults
soft partitions
soft real-time systems
SoftICE tool
software configuration, registry
software data execution prevention (DEP)
Software Development Kit [See Platform Software Development Kit (SDK)]
software interrupt request levels
     asynchronous procedure calls (APCs)
     dispatch or deferred procedure call (DPC) interrupts
     interrupt dispatching
     monitoring activity
software keys, device
software providers, VDS
Software Restriction Policies 2nd
software resumption, system power states and
spanned volumes
spare sectors
sparse data, compressing
sparse files, NTFS 2nd
Spcmdcon.sys
special pool option, Driver Verifier 2nd
spinlocks
     functions of
     instack queued
     IRP synchronization
     kernel-mode mechanisms vs.
     multiprocessor thread dispatching
     queued
SQL Server
SRSetRestorePoint and SRRemoveRestorePoint functions
SrvAny tool
stability
stability, Windows
stacks
     creating thread, for processes
     heap manager stack traces
     inswapping and outswapping
     IRP stack locations 2nd 3rd
     network
     stack frame exception handlers
     stack trashing and crash dump analysis
     viewing device
     viewing thread
     Windows storage stack
standby pages 2nd 3rd 4th 5th 6th 7th
standby state, thread
start address, thread 2nd
start command 2nd
start I/O routine, device driver
Start value, device driver
start-device command, Plug and Play manager
start-of-process function
start-of-thread function
StartService function
StartServiceCtrlDispatcher function 2nd
states
     page
     PFN entry
     shared page
     system power and device power 2nd
     thread scheduling and thread
static WMI classes
stop codes
stop command, Plug and Play manager
storage area networking [See System Area Networks (SANs)]
storage management
     disk drivers
     terminology
    volume management [See volume management]
     watching physical disk I/O
Storport.sys
stream caching, cache manager
stream control blocks (SCBs), NTFS
Streamlined Advanced Programmable Interrupt Controller (SAPIC)
Streams tool
streams, NTFS data
Strings tool
     looking inside prefetch files
     searching for device drivers by pool tags
     SYSTEM hive corruption problem
     troubleshooting pool leaks
striped volumes 2nd 3rd
striped volumes with parity
structured exception handling [See also exception dispatching]
Structured Query Language (SQL), WMI scripts and
stub procedures, RPC
subkey-list cell data type
subkeys, registry
subsection structures, section object
support images, process creation and
surprise-remove command, Plug and Play manager
SvcCtrlMain function 2nd
SwitchToFiber function
symbol server, Microsoft 2nd
Symbolic link executive object type
symbolic links device object 2nd
symbols
     kernel debugging 2nd
     viewing, using Process Explorer
symmetric encryption algorithms
symmetric multiprocessing (SMP), Windows 2nd
SYNCH_LEVEL IRQLs 2nd
synchronization
     deadlock detection 2nd
     executive
     heap
     high-IRQL
     kernel dispatcher objects
     KTHREAD blocks
     low-IRQL
     memory manager internal
     multiprocessing
     multiprocessor thread context switching
     Mutex executive object type
     mutual exclusion
     scalability
     synchronous I/O requests to single-layered drivers
     type object attribute
     uniprocessor dispatcher database
     viewing global queued spinlocks
synchronous I/O
syscall instruction
sysenter instruction
sysexit instruction
sysinternals tools
     Accvio.exe
     Blue Screen screen saver
     ChkReg tool
     Clockres tool
     Dbgview.exe tool
     device drivers
     Diskmon tool
     EFSDump tool
    Explorer PsExec tool [See PsExec tool]
    Filemon tool [See Filemon tool]
    Handle tool [See Handle tool]
     Junction tool
     LDMDump tool
    LiveKd tool [See LiveKd tool]
     LogonSessions tool
     Msconfig tool
     Notmyfault tool 2nd 3rd 4th
     NTFSInfo tool
     Pagedefrag tool
     Pendmoves tool
     PipeList tool
     PsGetSid tool
     Testlimit tool
     Windows and
system access-control lists (SACLs) assignment
System account
system accounts
system architecture 2nd [See also system architecture, Windows]
system architecture, Windows
     checked build versions
     checking Ntoskrnl versions
     differences between client and server versions
     portability
     scalability
     symmetric multiprocessing (SMP)
     system components [See also system components, Windows]
     user-mode and kernel-mode processes
     viewing multiprocessor-specific support files on Windows 2000
System Area Networks (SANs) 2nd 3rd
system audit and system audit- object ACEs
system cache
     centralized [See also cache manager]
     data structures
     extra memory
     system space
system clock
     boot options 2nd
     DPCs
     interrupts
     IRQLs
system code
system code write protection 2nd
system components, Windows
     determining which HAL is running
     device drivers [See also device drivers]
     environment subsystems and subsystem DLLs
     examining undocumented interfaces
     executive
     hardware abstraction layer [See also HAL (hardware abstraction layer)]
     kernel [See also kernel]
     Ntdll.dll library
System Disk Image (SDI) file boot options 2nd
system files corruption problem
SYSTEM hive 2nd 3rd 4th 5th 6th
System Information viewer tool
system mapped views
system mechanisms, Windows
     kernel event tracing
     local procedure calls (LPCs)
    object manager [See object manager]
     system worker threads
    trap dispatching [See trap dispatching]
     Windows global flags
system memory pools
     configuring
     Driver Verifier
     look-aside lists
     monitoring usage
     types of
system monitoring [See Performance tool]
System object
system page table entries (PTEs)
system power states
     mapping device power states to
     power manager
System process
system processes 2nd
     idle process
     interrupts and DPCs
     listing installed services
     service control manager (SCM)
     System process and system threads
     viewing service details inside service processes
     Winlogon, Lsass, and Userinit
system profile
System Restore
     as file system filter driver
     post-splash screen crashes
     restoring SYSTEM hive
System Restore Wizard
system service dispatching 2nd
     32-bit
     64-bit
     kernel-mode
     KTHREAD blocks
     mode transitions
     Regmon tool
     service descriptor tables
     viewing activity
system services [See also services; system service dispatching]
     dispatching and Ntdll.dll
     exceptions
     executive
     Windows and
system shutdown 2nd
system space
     components
     page table entries (PTEs)
     x86 layouts
system startup [See boot process]
system support processes
system threads
system timer [See system clock]
System tool
     crash dump file settings
     page file configuration settings
system variables [See also kernel variables]
     cache flush
     cache manager mapping and pinning activity
     cache manager MDL activity
     cache physical size and page fault
     cache read activity
     cache virtual size and address
     fast I/O
     intelligent read-ahead
     lazy writer
System Volume Information directory 2nd
system volumes 2nd 3rd
system worker threads 2nd 3rd 4th
system working sets 2nd 3rd 4th 5th
system-call hooking, Regmon and
System.alt
System.log
System.sav
Systematic Flaw Remediation, security rating and
SystemParametersInfo function
systemwide cache data structures
systemwide class registration data
systemwide dispatcher spinlock
systemwide settings, registry 2nd
SYSVOL directory