See how the core components of the Windows operating system work behind the scenes—guided by a team of internationally renowned internals experts. Fully updated for Windows Server(R) 2008 and Windows Vista(R), this classic guide delivers key architectural insights on system design, debugging, performance, and support—along with hands-on ...

See more details below
Windows Internals

Available on NOOK devices and apps  
  • NOOK Devices
  • Samsung Galaxy Tab 4 NOOK 7.0
  • Samsung Galaxy Tab 4 NOOK 10.1
  • NOOK HD Tablet
  • NOOK HD+ Tablet
  • NOOK eReaders
  • NOOK Color
  • NOOK Tablet
  • Tablet/Phone
  • NOOK for Windows 8 Tablet
  • NOOK for iOS
  • NOOK for Android
  • NOOK Kids for iPad
  • PC/Mac
  • NOOK for Windows 8
  • NOOK for PC
  • NOOK for Mac
  • NOOK for Web

Want a NOOK? Explore Now

NOOK Book (eBook)
BN.com price
(Save 42%)$55.99 List Price


See how the core components of the Windows operating system work behind the scenes—guided by a team of internationally renowned internals experts. Fully updated for Windows Server(R) 2008 and Windows Vista(R), this classic guide delivers key architectural insights on system design, debugging, performance, and support—along with hands-on experiments to experience Windows internal behavior firsthand.

Delve inside Windows architecture and internals:

  • Understand how the core system and management mechanisms work—from the object manager to services to the registry
  • Explore internal system data structures using tools like the kernel debugger
  • Grasp the scheduler's priority and CPU placement algorithms
  • Go inside the Windows security model to see how it authorizes access to data
  • Understand how Windows manages physical and virtual memory
  • Tour the Windows networking stack from top to bottom—including APIs, protocol drivers, and network adapter drivers
  • Troubleshoot file-system access problems and system boot problems
  • Learn how to analyze crashes
Read More Show Less

Product Details

  • ISBN-13: 9780735637962
  • Publisher: Pearson Education
  • Publication date: 7/1/2009
  • Series: Developer Reference
  • Sold by: Barnes & Noble
  • Format: eBook
  • Edition number: 5
  • Pages: 1264
  • File size: 22 MB
  • Note: This product may take a few minutes to download.

Meet the Author

Mark Russinovich is a Technical Fellow in the Windows Azure group at Microsoft. He is coauthor of Windows Sysinternals Administrator’s Reference, co-creator of the Sysinternals tools available from Microsoft TechNet, and coauthor of the Windows Internals book series. David A. Solomon is coauthor of the Windows Internals book series and has taught his Windows internals class to thousands of developers and IT professionals worldwide, including Microsoft staff. He is a regular speaker at Microsoft conferences, including TechNet and PDC. Alex Ionescu is a chief software architect and consultant expert in low-level system software, kernel development, security training, and reverse engineering. He teaches Windows internals course with David Solomon, and is active in the security research community.

Read More Show Less

Table of Contents

Dedication; Foreword; Acknowledgments; Introduction; Structure of the Book; History of the Book; Fifth Edition Changes; Hands-On Experiments; Topics Not Covered; A Warning and a Caveat; Find Additional Content Online; Support; Chapter 1: Concepts and Tools; 1.1 Windows Operating System Versions; 1.2 Foundation Concepts and Terms; 1.3 Virtual Memory; 1.4 Security; 1.5 Digging into Windows Internals; 1.6 Conclusion; Chapter 2: System Architecture; 2.1 Requirements and Design Goals; 2.2 Operating System Model; 2.3 Architecture Overview; 2.4 Differences Between Client and Server Versions; 2.5 Key System Components; 2.6 Environment Subsystems and Subsystem DLLs; 2.7 Conclusion; Chapter 3: System Mechanisms; 3.1 Trap Dispatching; 3.2 System Service Dispatching; 3.3 Object Manager; 3.4 Synchronization; 3.5 System Worker Threads; 3.6 Windows Global Flags; 3.7 Advanced Local Procedure Calls (ALPCs); 3.8 Kernel Event Tracing; 3.9 Wow64; 3.10 User-Mode Debugging; 3.11 Image Loader; 3.12 Hypervisor (Hyper-V); 3.13 Kernel Transaction Manager; 3.14 Hotpatch Support; 3.15 Kernel Patch Protection; 3.16 Code Integrity; 3.17 Conclusion; Chapter 4: Management Mechanisms; 4.1 The Registry; 4.2 Services; 4.3 Windows Management Instrumentation; 4.4 Windows Diagnostic Infrastructure; 4.5 Conclusion; Chapter 5: Processes, Threads, and Jobs; 5.1 Process Internals; 5.2 Protected Processes; 5.3 Thread Internals; 5.4 Examining Thread Activity; 5.5 Worker Factories (Thread Pools); 5.6 Thread Scheduling; 5.7 Job Objects; 5.8 Conclusion; Chapter 6: Security; 6.1 Security Ratings; 6.2 Security System Components; 6.3 Protecting Objects; 6.4 Account Rights and Privileges; 6.5 Security Auditing; 6.6 Logon; 6.7 User Account Control; 6.8 Software Restriction Policies; 6.9 Conclusion; Chapter 7: I/O System; 7.1 I/O System Components; 7.2 Device Drivers; 7.3 I/O Processing; 7.4 Kernel-Mode Driver Framework (KMDF); 7.5 User-Mode Driver Framework (UMDF); 7.6 The Plug and Play (PnP) Manager; 7.7 The Power Manager; 7.8 Conclusion; Chapter 8: Storage Management; 8.1 Storage Terminology; 8.2 Disk Drivers; 8.3 Volume Management; 8.4 BitLocker Drive Encryption; 8.5 Volume Shadow Copy Service; 8.6 Conclusion; Chapter 9: Memory Management; 9.1 Introduction to the Memory Manager; 9.2 Memory Manager Components; 9.3 Internal Synchronization; 9.4 Examining Memory Usage; 9.5 Services the Memory Manager Provides; 9.6 Reserving and Committing Pages; 9.7 Locking Memory; 9.8 Allocation Granularity; 9.9 Kernel-Mode Heaps (System Memory Pools); 9.10 Look-Aside Lists; 9.11 Heap Manager; 9.12 Virtual Address Space Layouts; 9.13 User Address Space Layout; 9.14 Address Translation; 9.15 Page Fault Handling; 9.16 Stacks; 9.17 Virtual Address Descriptors; 9.18 NUMA; 9.19 Section Objects; 9.20 Driver Verifier; 9.21 Page Frame Number Database; 9.22 Physical Memory Limits; 9.23 Working Sets; 9.24 Proactive Memory Management (SuperFetch); 9.25 Conclusion; Chapter 10: Cache Manager; 10.1 Key Features of the Cache Manager; 10.2 Cache Virtual Memory Management; 10.3 Cache Size; 10.4 Cache Data Structures; 10.5 File System Interfaces; 10.6 Fast I/O; 10.7 Read Ahead and Write Behind; 10.8 Conclusion; Chapter 11: File Systems; 11.1 Windows File System Formats; 11.2 File System Driver Architecture; 11.3 Troubleshooting File System Problems; 11.4 Common Log File System; 11.5 NTFS Design Goals and Features; 11.6 NTFS File System Driver; 11.7 NTFS On-Disk Structure; 11.8 NTFS Recovery Support; 11.9 Encrypting File System Security; 11.10 Conclusion; Chapter 12: Networking; 12.1 Windows Networking Architecture; 12.2 Networking APIs; 12.3 Multiple Redirector Support; 12.4 Name Resolution; 12.5 Location and Topology; 12.6 Protocol Drivers; 12.7 NDIS Drivers; 12.8 Binding; 12.9 Layered Network Services; 12.10 Conclusion; Chapter 13: Startup and Shutdown; 13.1 Boot Process; 13.2 Troubleshooting Boot and Startup Problems; 13.3 Shutdown; 13.4 Conclusion; Chapter 14: Crash Dump Analysis; 14.1 Why Does Windows Crash?; 14.2 The Blue Screen; 14.3 Troubleshooting Crashes; 14.4 Crash Dump Files; 14.5 Windows Error Reporting; 14.6 Online Crash Analysis; 14.7 Basic Crash Dump Analysis; 14.8 Using Crash Troubleshooting Tools; 14.9 Advanced Crash Dump Analysis; 14.10 Conclusion; Glossary;

Read More Show Less

Customer Reviews

Be the first to write a review
( 0 )
Rating Distribution

5 Star


4 Star


3 Star


2 Star


1 Star


Your Rating:

Your Name: Create a Pen Name or

Barnes & Noble.com Review Rules

Our reader reviews allow you to share your comments on titles you liked, or didn't, with others. By submitting an online review, you are representing to Barnes & Noble.com that all information contained in your review is original and accurate in all respects, and that the submission of such content by you and the posting of such content by Barnes & Noble.com does not and will not violate the rights of any third party. Please follow the rules below to help ensure that your review can be posted.

Reviews by Our Customers Under the Age of 13

We highly value and respect everyone's opinion concerning the titles we offer. However, we cannot allow persons under the age of 13 to have accounts at BN.com or to post customer reviews. Please see our Terms of Use for more details.

What to exclude from your review:

Please do not write about reviews, commentary, or information posted on the product page. If you see any errors in the information on the product page, please send us an email.

Reviews should not contain any of the following:

  • - HTML tags, profanity, obscenities, vulgarities, or comments that defame anyone
  • - Time-sensitive information such as tour dates, signings, lectures, etc.
  • - Single-word reviews. Other people will read your review to discover why you liked or didn't like the title. Be descriptive.
  • - Comments focusing on the author or that may ruin the ending for others
  • - Phone numbers, addresses, URLs
  • - Pricing and availability information or alternative ordering information
  • - Advertisements or commercial solicitation


  • - By submitting a review, you grant to Barnes & Noble.com and its sublicensees the royalty-free, perpetual, irrevocable right and license to use the review in accordance with the Barnes & Noble.com Terms of Use.
  • - Barnes & Noble.com reserves the right not to post any review -- particularly those that do not follow the terms and conditions of these Rules. Barnes & Noble.com also reserves the right to remove any review at any time without notice.
  • - See Terms of Use for other conditions and disclaimers.
Search for Products You'd Like to Recommend

Recommend other products that relate to your review. Just search for them below and share!

Create a Pen Name

Your Pen Name is your unique identity on BN.com. It will appear on the reviews you write and other website activities. Your Pen Name cannot be edited, changed or deleted once submitted.

Your Pen Name can be any combination of alphanumeric characters (plus - and _), and must be at least two characters long.

Continue Anonymously
Sort by: Showing all of 5 Customer Reviews
  • Posted September 5, 2009

    A great update!

    I own version 4 of this book, and the team has done a great job on the update. More than just explaining the "new stuff", they also have removed old information that is no longer accurate (after all, the original book was based on Windows 2000), and reexplained things that were not fully understood in the past.

    For example, the details on SuperCache are now more fully detailed out.

    On the down side, I have to wait for version 6 of the book to get better insight on WIndows 7!

    Was this review helpful? Yes  No   Report this review
  • Posted August 22, 2009

    Excellent resource for IT Pros

    If you're a programmer, PC repair technician, or IT professional, this book is the perfect behind-the-scenes explanation of what makes Windows tick and where specifically you should be looking when you have a problem.

    Was this review helpful? Yes  No   Report this review
  • Anonymous

    Posted April 24, 2010

    No text was provided for this review.

  • Anonymous

    Posted March 23, 2011

    No text was provided for this review.

  • Anonymous

    Posted January 8, 2010

    No text was provided for this review.

Sort by: Showing all of 5 Customer Reviews

If you find inappropriate content, please report it to Barnes & Noble
Why is this product inappropriate?
Comments (optional)