Windows OS Flashcards
Windows boot sequence?
BIOS initializes the hardware
Master Boot Record at start of Disk0
Loads code from boot sector of the active partition.
Bootloader loads & runs the bootloader from the file system
What is Windows Registry?
a system-defined database in which applications and system components store and retrieve configuration data.
What format is windos Registry?
A Tree format.
Each node is called a key.
Each key contains a subkey and data entries called values.
What is HKCR?
HKEY_Classes_Root
key contains files name extension associations and COM classes registration information.
What is HKCC?
HKEY_Current_Config
containes information a bout the current hardware profile of the local computer system.
this is stored in memory by the system kernel in order to mapp all other subkeys.
HKCU
HKEY_CURRENT_USER
preferences include the setting environment variables, data about program groups, colors, printers, network connections.
What Registry is used for start up application
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
What are hives?
is a logical group of keys, subkeys in a regitry that has a set of supporting files containing backups of its dat.
HKLM\SAM
is usually appears empty for most users. Unless they are given permission by admin. it is used to reference all the security accounts manger databases for all domains in the local system has been administratively authorized or configured.
HKLM\SECURITY
normally empty unless given access. This is linked to the Security database of the domain into which the current user is logged on. The kernel will access it to read and enforce the security policy applicable to the current user. And all application and operations started by the user.
HKLM\System
Only writable by admins. It contains information about eh windows system setup, data for secure random number generator, list the currently mounted devices contain a files systems.
HKLM\SOFTWARE
contains software and windows settings. It is mostly modified by applications and system installers. It is organized by software vendor.
Also includes a policy subkey for enforcing general usage policies for applications an system service including central certificates store for authenticating, authorizing and disallowing remote systems or services running outside the local network domain.
How many are there What are the WinAPI?
They are 8? Base Services Advances services Graphic Devices Interfaces UI Common Dialog box library Common control library window shell network services.
What is Base Services?
Provides access to the basic resources availble to a windows system. Such as file systems, devices, process, threads, error handling. These files resides in System32 directory
What is Advances services?
Provides access to function beyond the kernel. Like windows registry,shutdow/restart the system, stat/stop/create window services, manage user accounts.
What is Graphic Devices Interface?
control external outputs.
What is UI?
Provides the functions to create an manage screen windows.
What is Common Dialog Box library?
provides applications the standard dialog boxes to open & save files, choose font, color etc.
What is Common Control Library?
gives application advanced control provided by the OS. Like status bars, grogress bars toolbars, tabs.
What is Window shell?
llows applications to access functions provided by OS shell. To change and enhance it.
What is Network Services?
gives various networking abilities of the OS. Netbios/winsock,netdde, rpc.
Windows File system type
FAT32
File path types
A volume letter followed by : ex C:
A directory name C:\DIRECTORY
An optional filename C:\DIRECTORY\filename.txt
Absolute filepath
is the full path
C:\Directory\FileName
\Directory\Gile name
Relative filepath
..\Directory\FileName
What is UNC?
Universal naming convention paths. which is used to access network resources.
\MYNETWORKDEVICELOCATION
Where is the host file stored in windows
C:\Windows\System32\Drivers\etc\
List the Admin share for windows?
How man are there
7
Diskvolumd$ Admin$ Fax$ Ipc$ Print$ Sysvol netlogn
User profile location
On XP and 2000 C:\Documents and Settings\Application Data
On Windows plus its C:\Users\user-name\AppData\Roaming
Windows directory layout
\Perflogs(Hidden) \Program Files \Program Files (x86) \ProgramData \Users -> Public ->[username]->AppData \Windows ->System,System32,SysWowo64 ->WinSxs
What in \Perflogs
May hold windows performance log, but on default configuration, it is empty.
what in \Program Files
32-bit architecture: All apps (both 16-bit and 32-bit) are installed in this folder.
64-bit architecture: 64-bit apps are installed in this folder.
What is \Program Files (x86) ?
Appears on 64-bit editions of Windows. 32-bit and 16-bit apps are by default installed in this folder, even though 16-bit apps do not run on 64-bit Windows
\ProgramData
Contains program data that are expected to be accessed by computer programs regardless of the user account in the context of which they run. For example, an app may store specific information needed to operate DVD recorders or image scanners connected to a computer, because all users use them. Windows itself uses this folder. For example, Windows Defender stores its virus definitions in \ProgramData\Microsoft\Windows Defender. Programs do not have permission to store files in this folder, but have permission to create subfolders and store files in them. The organization of the files is at the discretion of the developer.