Windows 2000 Course Summary Computing Department, Lancaster University, UK

Overview Goals Goals –Provide a summary of the whole course –Highlight key areas of importance

System Architecture (1) What is Windows 2000? What is Windows 2000? –Features overview –Design objectives How these differ from Win9x How these differ from Win9x –Product Packaging Key Concepts Key Concepts –Win32 API –Processes, Thread and Jobs –Virtual Memory –Kernel Mode vs. User Mode –Registry

System Architecture (2) Windows 2000 Architecture Components Windows 2000 Architecture Components –Executive –Kernel –HAL –Device Drivers –Win32 User/GDI In further detail: In further detail: –The role of each component –Interaction between components

System Architecture (3) Environment Subsystems Environment Subsystems –Subsystem Components and their Role Overview of OS/2, POSIX and Win32 subsystems Overview of OS/2, POSIX and Win32 subsystems Subsystem Function Paths Subsystem Function Paths –Image Headers (Subsystem Type/Native Images) –POSIX Experimentation

System Architecture (4) OS Kernel Functionality OS Kernel Functionality –NTOSKRNL.EXE –Internal Naming Convention Listing Undocumented Functions Listing Undocumented Functions –Mechanism for Invoking System Functions from User Mode –Differences between Win32 and NtDll.Dll –Location of Operating System code System Processes System Processes –Processed-Based Windows 2000 Code –Process Creation Hierarchy –System Start-up Processes

System Mechanisms (1) Objects and Handles Objects and Handles –Introduction to objects –Benefits of using objects –Different types of Win32 objects Kernel objects, GDI objects and User objects Kernel objects, GDI objects and User objects –Handles and Reference Counts –Security –Object Manager Functionality

System Mechanisms (2) Kernel Mode Programming Environment Kernel Mode Programming Environment –Invoking Kernel-Mode Routines –Trap Dispatching –Interrupts and Exceptions How interrupts/exceptions are generated How interrupts/exceptions are generated Dispatching of Interrupts Dispatching of Interrupts Interrupt Precedence via IRQLs Interrupt Precedence via IRQLs Software Interrupts Software Interrupts Hardware Interrupt Processing on x86 Hardware Interrupt Processing on x86

Overview of Windows 2000 Management Mechanisms The registry The registry –Contents –Organisation –Access Services Services –General concepts –Components –Examples Windows Management Instrumentation Windows Management Instrumentation –Windows 2000 WMI-enabled tools

Processes, Threads and Scheduling (1) What are processes, threads and jobs? What are processes, threads and jobs? –In further detail: What each process has associated with it What each process has associated with it Viewing process information Viewing process information What each thread has associated with it What each thread has associated with it Viewing thread information Viewing thread information Fibers Fibers –General concepts / implementation “environment” Win32 process and thread APIs Win32 process and thread APIs Exiting of processes Exiting of processes –Different API calls used

Processes, Threads and Scheduling (2) General scheduling concepts General scheduling concepts –Views of priorities The Win32 point of view The Win32 point of view The Windows 2000 scheduler point of view The Windows 2000 scheduler point of view Win32 priorities versus kernel priorities Win32 priorities versus kernel priorities –Manual process priority adjustments –Win32 scheduling-related APIs Thread scheduling Thread scheduling –General Windows 2000 scheduler concepts –Multiprocessor issues –Scheduling scenarios: preemption, voluntary switch, running thread experiences quantum end

Processes, Threads and Scheduling (3) Thread scheduling (cont.) Thread scheduling (cont.) –Quantum details –Thread scheduling states –Watching the scheduler –Priority adjustments Applicable classes Applicable classes Non applicable classes Non applicable classes Boosting Boosting –Conditions for boosting –General concepts CPU starvation CPU starvation –Balance Set Manager

Processes, Threads and Scheduling (4) Thread scheduling (cont.) Thread scheduling (cont.) –Multiprocessor support Concept of soft affinity Concept of soft affinity Concept of hard affinity Concept of hard affinity Hard affinity example Hard affinity example

Memory Management (1) Virtual memory Virtual memory –General principles –Application’s view –Mapping virtual memory to physical memory pages Virtual address space Virtual address space –Windows 2000 memory manager –Virtual address space allocation Different regions Different regions Page sizes within NT and 2000 Page sizes within NT and 2000

Memory Management (2) Virtual address space (cont.) Virtual address space (cont.) –Division between process space and system space Process space - unique per process, user accessible Process space - unique per process, user accessible – Contents System space - system wide, kernel mode accessible System space - system wide, kernel mode accessible –Contents –Windows 9x virtual address space Additional user-mode shared memory - system wide Additional user-mode shared memory - system wide –Virtual address translation

Memory Management (3) Physical memory Physical memory –Maximum memory support Under NT Under NT Under 2000 via extended addressing support - “PAE” Under 2000 via extended addressing support - “PAE” Increased limits under 64-bit Windows 2000 Increased limits under 64-bit Windows 2000 –Page files Size Size Events when page file space runs low Events when page file space runs low Who is consuming space? Who is consuming space? Page faults Page faults

Memory Management (4) Physical memory (cont.) Physical memory (cont.) –Working set General concepts General concepts Working set limit Working set limit Page replacement algorithm Page replacement algorithm System services System services –Adjust size, self-initiated trimming –System working set –Accounting for physical memory usage Memory management information Memory management information –General, process and physical memory information

Windows Networking (1) OSI model and Windows 2000 networking components OSI model and Windows 2000 networking components –OSI reference model overview –Mapping of components against OSI layers What each component does, and what layer it fits into What each component does, and what layer it fits into –Networking APIs –Transport Driver Interface (TDI) clients –TDI transports (also known as protocol drivers) –NDIS library –NDIS miniport drivers

Windows Networking (2) Windows 2000 networking stack: Windows 2000 networking stack: –Services Remote access Remote access Active directory Active directory File replication service File replication service Network load balancing Network load balancing –Networking APIs Windows Sockets (Winsock) Windows Sockets (Winsock) Named pipes and mailslots Named pipes and mailslots Remote procedure call (RPC) Remote procedure call (RPC) NetBIOS NetBIOS Other Other –Telephony API, DCOM, message queuing

Windows Networking (3) Windows 2000 networking stack: (cont.) Windows 2000 networking stack: (cont.) –Protocol drivers Purpose Purpose Drivers natively supported by Windows 2000 Drivers natively supported by Windows 2000 Other driver support Other driver support –NDIS drivers Purpose Purpose NDIS 5 features NDIS 5 features

Windows Networking (4) Winsock2 Winsock2 –Basic concepts –Overview of main features –Simultaneous access to multiple transport protocols Winsock2 API / SPI separation Winsock2 API / SPI separation Winsock2 DLL Winsock2 DLL –Winsock1.1 backward compatibility Source code compatibility Source code compatibility Binary compatibility Binary compatibility –Layered protocol architecture Layered protocols and base protocols Layered protocols and base protocols Protocol chains Protocol chains

I/O System, Cache Manager, File Systems (1) I/O System I/O System –Design goals –Components –I/O operations Flow of a typical I/O request Flow of a typical I/O request –Types of device driver Including user-mode drivers… Including user-mode drivers… –Win32 I/O APIs Device-independent APIs Device-independent APIs Device-type-dependent APIs Device-type-dependent APIs

I/O System, Cache Manager, File Systems (2) Cache Manager Cache Manager –Overview File system types supported File system types supported Types of data to be cached Types of data to be cached –Key features –Interaction between cache and memory manager File Systems File Systems –Others CDFS, UDF, FAT12, FAT16 and FAT32 CDFS, UDF, FAT12, FAT16 and FAT32 –NTFS Overview Overview Advanced features Advanced features