215:
entry in the process's Handle table, which lists the handles it owns, and can be transferred between processes. A process must own a handle to an object to use it, and can own up to 16,000,000 handles at one time. During creation, a process gains handles to a default set of objects. There are different types of handles, such as file handles, event handles, and process handles, which identify the type of target objects but do not distinguish the operations that can be performed through them. This consistency ensures uniform handling of various object types programmatically. Handle creation and resolution of objects from handles are exclusively managed by the Object
Manager, ensuring that no resource usage goes unnoticed.
211:, along with its components such as the memory manager, scheduler and I/O subsystem. Executive objects encapsulate one or more kernel objects and expose not only the kernel and kernel-mediated resources, but also an expanded set of services that the kernel does. Applications themselves can wrap one or more Executive objects and surface objects that offer certain services. Executive objects are also used by the environment subsystems (such as the Win32 subsystem, the OS/2 subsystem, the POSIX subsystem, etc.) to implement the functionality of the respective environments.
119:
556:(to synchronize with one or more objects via certain events). Type objects also have some common attributes, including the type name, whether they are to be allocated in non-paged memory, access rights, and synchronization information. All instances of the same type share the same type object, and the type object is instantiated only once. A new object type can be created by endowing an object with Properties to expose its state and methods to expose the services it offers.
165:
2661:
22:
2672:
179:
line of operating systems, which keeps track of the resources allocated to processes. It is resource-agnostic and can manage any type of resource, including device and file handles. All resources are represented as objects, each belonging to a logical namespace for categorization and having a type
562:
is used to give a descriptive identity to an object, to aid in object lookup. Object
Manager maintains the list of names already assigned to objects being managed, and maps the names to the instances. Since most object accesses occur via handles, it is not always necessary to look up the name to
214:
Whenever an object is created or opened, a reference to the instance, known as a handle, is created. The Object
Manager indexes objects by both their names and handles. Referencing objects by handles is faster since it bypasses name translation. Handles are associated with processes by making an
481:
Each object managed by the Object
Manager has a header and a body; the header contains state information used by Object Manager, whereas the body contains the object-specific data and the services it exposes. An object header contains certain data, exposed as
180:
that represents the type of the resource, which exposes the capabilities and functionalities via properties. An object is kept available until all processes are done with it; Object
Manager maintains the record of which objects are currently in use via
960:
527:
object contains properties unique to the type of the object as well as static methods that implement the services offered by the object. Objects managed by Object
Manager must at least provide a predefined set of services:
199:. Kernel objects represent primitive resources such as physical devices, or services such as synchronization, which are required to implement any other type of OS service. Kernel objects are not exposed to
563:
resolve into the object reference. Lookup is only performed when an object is created (to make sure the new object has a unique name), or a process accesses an object by its name explicitly.
940:
156:
property and other metadata about the resource. Object
Manager is a shared resource, and all subsystems that deal with the resources have to pass through the Object Manager.
1676:
1691:
1856:
933:
39:
1513:
2547:
926:
2676:
949:
1926:
1566:
1150:
985:
2098:
2007:
1523:
1155:
86:
891:
105:
58:
2697:
1846:
1826:
1789:
1751:
1736:
241:
A container holds other kernel objects. Multiple levels of nested directories organize all kernel objects into a single tree.
65:
2592:
2174:
1701:
43:
1716:
2557:
2426:
2113:
2103:
1977:
1881:
1741:
1098:
1053:
72:
817:
2702:
2665:
2033:
1992:
1891:
1746:
1543:
1258:
1208:
737:
for the local namespaces suffice for most uses. Using the former in Win32 user-mode functions translates directly to
2255:
2135:
1841:
1340:
980:
973:
968:
761:
748:
Tools that serve as explorers in the Object
Manager namespaces are available. These include the 32-bit WinObj from
169:
54:
908:
32:
2587:
2552:
1982:
1972:
1911:
1821:
1711:
1681:
1330:
1028:
148:, each reside in a namespace for categorization. Resources can be physical devices, files or folders on volumes,
1952:
1896:
1721:
1490:
1375:
1265:
2537:
2532:
2376:
2371:
2331:
2291:
2241:
1987:
1731:
1726:
1601:
1576:
1538:
1508:
1458:
1270:
1193:
1118:
1038:
1013:
370:
2517:
2481:
2093:
2078:
1836:
1794:
1686:
1616:
1533:
1518:
1113:
2646:
2466:
2411:
2351:
2336:
2145:
1816:
1771:
1628:
1581:
608:
118:
721:
OBJ_INHERIT OBJ_PERMANENT OBJ_EXCLUSIVE OBJ_CASE_INSENSITIVE OBJ_OPENIF OBJ_OPENLINK OBJ_KERNEL_HANDLE
536:(create another handle to the object with which another process can gain shared access to the object),
799:
623:. Each user session is assigned a different namespace. Objects shared between all sessions are in the
2631:
2626:
2471:
2441:
2406:
2296:
2002:
1997:
1901:
1851:
1809:
1779:
1666:
1253:
1218:
1165:
1103:
438:
79:
2572:
2431:
2386:
2361:
2316:
2262:
2061:
1916:
1799:
1248:
1233:
1173:
1093:
1063:
545:
496:
251:
203:
code, but are restricted to kernel code. Applications and services running outside the kernel use
2577:
2527:
2301:
2220:
2206:
2125:
1831:
1671:
1638:
1611:
1606:
1280:
1183:
1178:
1078:
835:
729:
Object
Manager paths are available to many Windows API file functions, although Win32 names like
274:
257:
181:
360:
An object which encapsulates some information, to be used for notifying processes of something.
2641:
2567:
2522:
2421:
2416:
2391:
2346:
2311:
2181:
1485:
1295:
1128:
887:
208:
137:
2582:
2491:
2326:
2269:
2227:
2088:
2056:
2012:
1967:
1886:
1646:
1443:
1320:
1310:
1073:
1068:
871:
410:
306:
149:
164:
2618:
2501:
2476:
2461:
2451:
2401:
2396:
2150:
1784:
1500:
1365:
1355:
1300:
1285:
1143:
1033:
883:
876:
261:
188:
that changes the state of resource allocation to processes goes via the Object
Manager.
2108:
1651:
1463:
1453:
1438:
1370:
1238:
1213:
1188:
1138:
1108:
1018:
770:
454:
An object containing a group of Desktop objects, one Clipboard and other user objects.
913:
2691:
2597:
2456:
2356:
1696:
1656:
1433:
1408:
1400:
1335:
1203:
1003:
766:
380:
2366:
2321:
2248:
2213:
1921:
1871:
1661:
1413:
1360:
1325:
1243:
1223:
1043:
1023:
749:
567:
are used to categorize them according to the types. Predefined directories include
2436:
2381:
2286:
2140:
2028:
1906:
1761:
1553:
1528:
1123:
230:
185:
21:
918:
627:
namespace, and session-specific objects are in the specific session namespaces
2341:
2165:
1706:
1596:
1470:
1390:
1315:
1133:
508:(the number of times a handle, an identifier to the object, has been opened),
176:
152:
entries or even running processes. All objects representing resources have an
1962:
1957:
1591:
1480:
1428:
1198:
718:
The Attributes member can be zero, or a combination of the following flags:
520:(an object that identifies the structure of the object body) of the object.
200:
465:
A reference to another object, via which the referred object can be used.
2542:
2446:
2306:
2066:
1931:
1561:
1418:
1305:
1290:
1228:
1088:
1048:
853:
745:
is still different as this NT form does not turn off pathname expansion.
2562:
2496:
2234:
2120:
2083:
2071:
1756:
1475:
1448:
1423:
1385:
1083:
1008:
512:(the list of processes which has a live reference to the object), its
2636:
2486:
2155:
1936:
1861:
575:(Mutexes, events, semaphores, waitable timers, and section objects),
327:
2602:
2038:
1866:
1571:
1345:
1058:
778:
774:
374:
163:
117:
2130:
1804:
1623:
1586:
922:
2048:
1380:
1350:
1275:
427:
310:
15:
818:"winapi - Is there a difference between \??\ and \\?\ paths?"
122:
Object Manager in Windows, categorized hierarchically using
540:(gather information about its attributes and properties),
279:
An entity containing code in execution, inside a process.
218:
The types of Executive objects exposed by Windows NT are:
175:
Object Manager is the centralized resource broker in the
874:; David Solomon (2005). "Chapter 3: System Mechanisms".
619:(windowing subsystem objects). Objects also belong to a
396:
An objects which notifies processes at fixed intervals.
516:(the number of live references to the object), and the
220:
326:
A region of memory optionally backed by a file or the
854:"hfiref0x/WinObjEx64: Windows Object Explorer 64-bit"
2615:
2510:
2279:
2198:
2191:
2164:
2047:
2021:
1945:
1770:
1637:
1552:
1499:
1399:
1164:
994:
46:. Unsourced material may be challenged and removed.
875:
800:"Naming Files, Paths, and Namespaces - Win32 apps"
781:concepts to the ‘Job’ object type discussed above
504:(the resource usage information for the object),
934:
8:
184:, as well as the ownership information. Any
136:) is a subsystem implemented as part of the
144:. Resources, which are surfaced as logical
2671:
2195:
941:
927:
919:
882:(4th ed.). Microsoft Press. pp.
443:A temporary repository for other objects.
909:Object Manager Routines (Windows Drivers)
106:Learn how and when to remove this message
791:
532:(which closes a handle to an object),
494:(the category the object belongs to),
2548:Next-Generation Secure Computing Base
426:A logical display surface to contain
7:
44:adding citations to reliable sources
1677:Distributed Transaction Coordinator
500:(the access rights for an object),
2008:User Interface Privilege Isolation
773: – the equivalent
615:(security subsystem objects), and
552:(change the security access), and
14:
343:The access rights for an object.
2670:
2660:
2659:
20:
1737:Remote Differential Compression
836:"WinObj - Windows Sysinternals"
490:(which identifies the object),
31:needs additional citations for
2593:Windows System Assessment Tool
1:
630:OBJECT_ATTRIBUTES structure:
55:"Object Manager" Windows
1882:Open XML Paper Specification
1742:Remote Installation Services
950:Microsoft Windows components
692:PSECURITY_QUALITY_OF_SERVICE
2034:Windows Subsystem for Linux
1993:Mandatory Integrity Control
1747:Windows Deployment Services
1544:Wireless Zero Configuration
878:Microsoft Windows Internals
752:and the 64-bit WinObjEx64.
383:access to other resources.
292:A collection of processes.
256:A collection of executable
207:, which are exposed by the
2719:
2136:Universal Windows Platform
1842:Kernel Transaction Manager
1827:Hardware Abstraction Layer
1524:Multimedia Class Scheduler
762:Architecture of Windows NT
468:NtCreateSymbolicLinkObject
170:architecture of Windows NT
168:The Object Manager in the
2655:
2588:Windows Services for UNIX
1973:Data Execution Prevention
1822:Graphics Device Interface
1712:Network Access Protection
1331:Remote Desktop Connection
956:
470:NtOpenSymbolicLinkObject
264:and control information.
1953:Security and Maintenance
1897:Security Account Manager
1491:Windows XP visual styles
695:SecurityQualityOfService
632:
2698:Windows NT architecture
2538:Media Control Interface
2372:Help and Support Center
1988:Kernel Patch Protection
1752:System Resource Manager
1732:Remote Desktop Services
1727:Print Services for UNIX
1509:Service Control Manager
1119:Windows Error Reporting
1039:DirectX Diagnostic Tool
244:NtCreateDirectoryObject
2518:Desktop Cleanup Wizard
2094:COM Structured storage
1795:Desktop Window Manager
1687:Windows Media Services
579:(callback functions),
246:NtOpenDirectoryObject
191:Objects can either be
172:
140:which manages Windows
126:
2146:Windows Mixed Reality
1817:Enhanced Write Filter
1667:Roaming user profiles
167:
121:
2427:Mobile Device Center
2377:Health & Fitness
2175:Solitaire Collection
2003:User Account Control
1998:Protected Media Path
1902:Server Message Block
1852:Logical Disk Manager
1104:System Policy Editor
1089:System Configuration
683:PSECURITY_DESCRIPTOR
497:Security Descriptors
40:improve this article
2573:Virtual DOS machine
1917:System Idle Process
1892:Resource Protection
1800:Portable Executable
1692:Active DRM Services
1094:System File Checker
1064:Performance Monitor
860:. 20 February 2020.
599:(language tables),
546:security descriptor
132:(internally called
2703:Windows components
2578:Windows on Windows
2302:Backup and Restore
2114:Transaction Server
1832:I/O request packet
1672:Folder redirection
1341:Speech Recognition
1099:System Information
1054:Management Console
914:Channel9 Interview
840:docs.microsoft.com
804:docs.microsoft.com
710:POBJECT_ATTRIBUTES
686:SecurityDescriptor
641:_OBJECT_ATTRIBUTES
565:Object directories
352:NtOpenThreadToken
350:NtOpenProcessToken
262:virtual addressing
182:reference counting
173:
127:
2685:
2684:
2611:
2610:
2568:Video for Windows
2523:Games for Windows
2392:Internet Explorer
1486:Windows Spotlight
1129:Windows Installer
872:Russinovich, Mark
704:OBJECT_ATTRIBUTES
573:\BaseNamedObjects
506:Open handle count
474:
473:
386:NtCreateSemaphore
295:NtCreateJobObject
209:Windows Executive
205:Executive objects
197:Executive objects
138:Windows Executive
116:
115:
108:
90:
2710:
2674:
2673:
2663:
2662:
2583:Windows SideShow
2362:Food & Drink
2256:Spider Solitaire
2196:
2089:ActiveX Document
2057:Active Scripting
2013:Windows Firewall
1968:Credential Guard
1647:Active Directory
1444:Indexing Service
1074:Resource Monitor
1069:Recovery Console
943:
936:
929:
920:
897:
881:
862:
861:
850:
844:
843:
832:
826:
825:
814:
808:
807:
796:
744:
740:
736:
732:
714:
711:
708:
705:
702:
699:
696:
693:
690:
687:
684:
681:
678:
675:
672:
669:
666:
663:
660:
657:
654:
651:
648:
645:
642:
639:
636:
618:
614:
606:
603:(type objects),
602:
598:
594:
590:
586:
582:
578:
574:
571:(device names),
570:
566:
561:
555:
551:
548:of the object),
543:
539:
535:
531:
526:
519:
515:
511:
510:Open handle list
507:
503:
499:
493:
492:Object Directory
489:
485:
477:Object structure
388:NtOpenSemaphore
348:NtDuplicateToken
297:NtOpenJobObject
221:
155:
111:
104:
100:
97:
91:
89:
48:
24:
16:
2718:
2717:
2713:
2712:
2711:
2709:
2708:
2707:
2688:
2687:
2686:
2681:
2651:
2619:Microsoft Store
2617:
2607:
2553:POSIX subsystem
2533:File Protection
2506:
2477:Program Manager
2462:Phone Companion
2452:Outlook Express
2402:Make Compatible
2332:Desktop Gadgets
2292:Anytime Upgrade
2275:
2187:
2160:
2151:Windows Runtime
2043:
2017:
1983:Family features
1941:
1766:
1722:DFS Replication
1633:
1548:
1539:Error Reporting
1495:
1395:
1271:Mobility Center
1266:Movies & TV
1160:
1144:Windows Insider
1034:Driver Verifier
1029:Drive Optimizer
996:
990:
981:Booting process
952:
947:
905:
900:
894:
870:
866:
865:
852:
851:
847:
834:
833:
829:
816:
815:
811:
798:
797:
793:
788:
758:
742:
738:
734:
730:
727:
722:
716:
715:
712:
709:
706:
703:
700:
697:
694:
691:
688:
685:
682:
679:
676:
673:
670:
667:
665:PUNICODE_STRING
664:
661:
658:
655:
652:
649:
646:
643:
640:
637:
634:
616:
612:
604:
600:
596:
592:
588:
584:
580:
576:
572:
568:
564:
559:
553:
549:
541:
537:
533:
529:
524:
517:
514:Reference count
513:
509:
505:
501:
495:
491:
487:
483:
479:
469:
417:
400:
387:
364:
351:
349:
347:
334:
333:NtCreateSection
317:
296:
283:
268:
267:NtCreateProcess
245:
162:
153:
112:
101:
95:
92:
49:
47:
37:
25:
12:
11:
5:
2716:
2714:
2706:
2705:
2700:
2690:
2689:
2683:
2682:
2680:
2679:
2668:
2656:
2653:
2652:
2650:
2649:
2644:
2639:
2634:
2629:
2623:
2621:
2613:
2612:
2609:
2608:
2606:
2605:
2600:
2595:
2590:
2585:
2580:
2575:
2570:
2565:
2560:
2555:
2550:
2545:
2540:
2535:
2530:
2525:
2520:
2514:
2512:
2508:
2507:
2505:
2504:
2499:
2494:
2489:
2484:
2482:Steps Recorder
2479:
2474:
2469:
2464:
2459:
2454:
2449:
2444:
2439:
2434:
2429:
2424:
2419:
2414:
2409:
2404:
2399:
2394:
2389:
2384:
2379:
2374:
2369:
2364:
2359:
2354:
2349:
2344:
2339:
2334:
2329:
2324:
2319:
2314:
2309:
2304:
2299:
2294:
2289:
2283:
2281:
2277:
2276:
2274:
2273:
2266:
2259:
2252:
2245:
2238:
2231:
2224:
2217:
2210:
2202:
2200:
2193:
2189:
2188:
2186:
2185:
2178:
2170:
2168:
2162:
2161:
2159:
2158:
2153:
2148:
2143:
2138:
2133:
2128:
2123:
2118:
2117:
2116:
2111:
2109:OLE Automation
2106:
2101:
2096:
2091:
2086:
2076:
2075:
2074:
2069:
2064:
2053:
2051:
2045:
2044:
2042:
2041:
2036:
2031:
2025:
2023:
2019:
2018:
2016:
2015:
2010:
2005:
2000:
1995:
1990:
1985:
1980:
1975:
1970:
1965:
1960:
1955:
1949:
1947:
1943:
1942:
1940:
1939:
1934:
1929:
1924:
1919:
1914:
1909:
1904:
1899:
1894:
1889:
1884:
1879:
1877:Object Manager
1874:
1869:
1864:
1859:
1854:
1849:
1844:
1839:
1837:Imaging Format
1834:
1829:
1824:
1819:
1814:
1813:
1812:
1807:
1797:
1792:
1787:
1782:
1776:
1774:
1768:
1767:
1765:
1764:
1759:
1754:
1749:
1744:
1739:
1734:
1729:
1724:
1719:
1714:
1709:
1704:
1699:
1694:
1689:
1684:
1679:
1674:
1669:
1664:
1659:
1654:
1649:
1643:
1641:
1635:
1634:
1632:
1631:
1626:
1621:
1620:
1619:
1614:
1609:
1604:
1599:
1594:
1584:
1579:
1574:
1569:
1564:
1558:
1556:
1550:
1549:
1547:
1546:
1541:
1536:
1534:Task Scheduler
1531:
1526:
1521:
1516:
1511:
1505:
1503:
1497:
1496:
1494:
1493:
1488:
1483:
1478:
1473:
1468:
1467:
1466:
1464:Special folder
1461:
1456:
1451:
1446:
1436:
1431:
1426:
1421:
1416:
1411:
1405:
1403:
1397:
1396:
1394:
1393:
1388:
1383:
1378:
1376:Voice Recorder
1373:
1368:
1363:
1358:
1353:
1348:
1343:
1338:
1333:
1328:
1323:
1318:
1313:
1308:
1303:
1298:
1293:
1288:
1283:
1278:
1273:
1268:
1263:
1262:
1261:
1251:
1246:
1241:
1236:
1231:
1226:
1221:
1216:
1211:
1206:
1201:
1196:
1191:
1186:
1181:
1176:
1170:
1168:
1162:
1161:
1159:
1158:
1153:
1148:
1147:
1146:
1139:Windows Update
1136:
1131:
1126:
1121:
1116:
1111:
1109:System Restore
1106:
1101:
1096:
1091:
1086:
1081:
1076:
1071:
1066:
1061:
1056:
1051:
1046:
1041:
1036:
1031:
1026:
1021:
1019:Device Manager
1016:
1011:
1009:Command Prompt
1006:
1000:
998:
992:
991:
989:
988:
983:
978:
977:
976:
971:
963:
957:
954:
953:
948:
946:
945:
938:
931:
923:
917:
916:
911:
904:
903:External links
901:
899:
898:
892:
867:
864:
863:
845:
827:
822:Stack Overflow
809:
790:
789:
787:
784:
783:
782:
767:Process groups
764:
757:
754:
726:
723:
720:
633:
542:Query security
478:
475:
472:
471:
466:
463:
462:Symbolic link
459:
458:
455:
452:
451:WindowStation
448:
447:
444:
441:
435:
434:
431:
424:
420:
419:
414:
407:
403:
402:
397:
394:
390:
389:
384:
379:Objects which
377:
367:
366:
361:
358:
354:
353:
344:
341:
337:
336:
335:NtOpenSection
331:
324:
320:
319:
314:
303:
299:
298:
293:
290:
286:
285:
282:NtCreateThread
280:
277:
271:
270:
269:NtOpenProcess
265:
254:
248:
247:
242:
239:
235:
234:
233:to get handle
228:
225:
193:Kernel objects
161:
158:
130:Object Manager
114:
113:
28:
26:
19:
13:
10:
9:
6:
4:
3:
2:
2715:
2704:
2701:
2699:
2696:
2695:
2693:
2678:
2669:
2667:
2658:
2657:
2654:
2648:
2645:
2643:
2640:
2638:
2635:
2633:
2630:
2628:
2625:
2624:
2622:
2620:
2614:
2604:
2601:
2599:
2598:Windows To Go
2596:
2594:
2591:
2589:
2586:
2584:
2581:
2579:
2576:
2574:
2571:
2569:
2566:
2564:
2561:
2559:
2556:
2554:
2551:
2549:
2546:
2544:
2541:
2539:
2536:
2534:
2531:
2529:
2526:
2524:
2521:
2519:
2516:
2515:
2513:
2509:
2503:
2500:
2498:
2495:
2493:
2490:
2488:
2485:
2483:
2480:
2478:
2475:
2473:
2470:
2468:
2467:Photo Gallery
2465:
2463:
2460:
2458:
2455:
2453:
2450:
2448:
2445:
2443:
2440:
2438:
2435:
2433:
2430:
2428:
2425:
2423:
2420:
2418:
2415:
2413:
2412:Meeting Space
2410:
2408:
2405:
2403:
2400:
2398:
2395:
2393:
2390:
2388:
2385:
2383:
2382:HyperTerminal
2380:
2378:
2375:
2373:
2370:
2368:
2365:
2363:
2360:
2358:
2355:
2353:
2352:Easy Transfer
2350:
2348:
2345:
2343:
2340:
2338:
2335:
2333:
2330:
2328:
2325:
2323:
2320:
2318:
2315:
2313:
2310:
2308:
2305:
2303:
2300:
2298:
2295:
2293:
2290:
2288:
2285:
2284:
2282:
2278:
2272:
2271:
2267:
2265:
2264:
2260:
2258:
2257:
2253:
2251:
2250:
2246:
2244:
2243:
2239:
2237:
2236:
2232:
2230:
2229:
2225:
2223:
2222:
2218:
2216:
2215:
2211:
2209:
2208:
2204:
2203:
2201:
2197:
2194:
2190:
2184:
2183:
2179:
2177:
2176:
2172:
2171:
2169:
2167:
2163:
2157:
2154:
2152:
2149:
2147:
2144:
2142:
2139:
2137:
2134:
2132:
2129:
2127:
2124:
2122:
2119:
2115:
2112:
2110:
2107:
2105:
2102:
2100:
2097:
2095:
2092:
2090:
2087:
2085:
2082:
2081:
2080:
2077:
2073:
2070:
2068:
2065:
2063:
2060:
2059:
2058:
2055:
2054:
2052:
2050:
2046:
2040:
2037:
2035:
2032:
2030:
2027:
2026:
2024:
2022:Compatibility
2020:
2014:
2011:
2009:
2006:
2004:
2001:
1999:
1996:
1994:
1991:
1989:
1986:
1984:
1981:
1979:
1976:
1974:
1971:
1969:
1966:
1964:
1961:
1959:
1956:
1954:
1951:
1950:
1948:
1944:
1938:
1935:
1933:
1930:
1928:
1925:
1923:
1920:
1918:
1915:
1913:
1910:
1908:
1905:
1903:
1900:
1898:
1895:
1893:
1890:
1888:
1885:
1883:
1880:
1878:
1875:
1873:
1870:
1868:
1865:
1863:
1860:
1858:
1855:
1853:
1850:
1848:
1847:Library files
1845:
1843:
1840:
1838:
1835:
1833:
1830:
1828:
1825:
1823:
1820:
1818:
1815:
1811:
1808:
1806:
1803:
1802:
1801:
1798:
1796:
1793:
1791:
1788:
1786:
1783:
1781:
1778:
1777:
1775:
1773:
1769:
1763:
1760:
1758:
1755:
1753:
1750:
1748:
1745:
1743:
1740:
1738:
1735:
1733:
1730:
1728:
1725:
1723:
1720:
1718:
1715:
1713:
1710:
1708:
1705:
1703:
1700:
1698:
1695:
1693:
1690:
1688:
1685:
1683:
1680:
1678:
1675:
1673:
1670:
1668:
1665:
1663:
1660:
1658:
1655:
1653:
1650:
1648:
1645:
1644:
1642:
1640:
1636:
1630:
1627:
1625:
1622:
1618:
1615:
1613:
1610:
1608:
1607:Reparse point
1605:
1603:
1600:
1598:
1595:
1593:
1590:
1589:
1588:
1585:
1583:
1580:
1578:
1575:
1573:
1570:
1568:
1565:
1563:
1560:
1559:
1557:
1555:
1551:
1545:
1542:
1540:
1537:
1535:
1532:
1530:
1527:
1525:
1522:
1520:
1517:
1515:
1512:
1510:
1507:
1506:
1504:
1502:
1498:
1492:
1489:
1487:
1484:
1482:
1479:
1477:
1474:
1472:
1469:
1465:
1462:
1460:
1457:
1455:
1452:
1450:
1447:
1445:
1442:
1441:
1440:
1437:
1435:
1432:
1430:
1427:
1425:
1422:
1420:
1417:
1415:
1412:
1410:
1409:Action Center
1407:
1406:
1404:
1402:
1398:
1392:
1389:
1387:
1384:
1382:
1379:
1377:
1374:
1372:
1369:
1367:
1364:
1362:
1359:
1357:
1354:
1352:
1349:
1347:
1344:
1342:
1339:
1337:
1336:Snipping Tool
1334:
1332:
1329:
1327:
1324:
1322:
1319:
1317:
1314:
1312:
1309:
1307:
1304:
1302:
1299:
1297:
1294:
1292:
1289:
1287:
1284:
1282:
1279:
1277:
1274:
1272:
1269:
1267:
1264:
1260:
1257:
1256:
1255:
1252:
1250:
1247:
1245:
1242:
1240:
1237:
1235:
1232:
1230:
1227:
1225:
1222:
1220:
1217:
1215:
1212:
1210:
1207:
1205:
1202:
1200:
1197:
1195:
1194:Character Map
1192:
1190:
1187:
1185:
1182:
1180:
1177:
1175:
1172:
1171:
1169:
1167:
1163:
1157:
1154:
1152:
1149:
1145:
1142:
1141:
1140:
1137:
1135:
1132:
1130:
1127:
1125:
1122:
1120:
1117:
1115:
1112:
1110:
1107:
1105:
1102:
1100:
1097:
1095:
1092:
1090:
1087:
1085:
1082:
1080:
1077:
1075:
1072:
1070:
1067:
1065:
1062:
1060:
1057:
1055:
1052:
1050:
1047:
1045:
1042:
1040:
1037:
1035:
1032:
1030:
1027:
1025:
1022:
1020:
1017:
1015:
1014:Control Panel
1012:
1010:
1007:
1005:
1004:App Installer
1002:
1001:
999:
993:
987:
984:
982:
979:
975:
972:
970:
967:
966:
965:Architecture
964:
962:
959:
958:
955:
951:
944:
939:
937:
932:
930:
925:
924:
921:
915:
912:
910:
907:
906:
902:
895:
893:0-7356-1917-4
889:
885:
880:
879:
873:
869:
868:
859:
855:
849:
846:
841:
837:
831:
828:
823:
819:
813:
810:
805:
801:
795:
792:
785:
780:
776:
772:
768:
765:
763:
760:
759:
755:
753:
751:
746:
724:
719:
659:RootDirectory
631:
628:
626:
622:
610:
557:
547:
521:
502:Quota Charges
498:
476:
467:
464:
461:
460:
456:
453:
450:
449:
445:
442:
440:
437:
436:
432:
429:
425:
422:
421:
415:
412:
408:
405:
404:
399:NtCreateTimer
398:
395:
392:
391:
385:
382:
378:
376:
372:
369:
368:
363:NtCreateEvent
362:
359:
356:
355:
346:NtCreateToken
345:
342:
340:Access token
339:
338:
332:
329:
325:
322:
321:
315:
312:
308:
304:
301:
300:
294:
291:
288:
287:
284:NtOpenThread
281:
278:
276:
273:
272:
266:
263:
259:
255:
253:
250:
249:
243:
240:
237:
236:
232:
229:
226:
223:
222:
219:
216:
212:
210:
206:
202:
198:
194:
189:
187:
183:
178:
171:
166:
159:
157:
151:
147:
143:
139:
135:
131:
125:
120:
110:
107:
99:
88:
85:
81:
78:
74:
71:
67:
64:
60:
57: –
56:
52:
51:Find sources:
45:
41:
35:
34:
29:This article
27:
23:
18:
17:
2632:File Manager
2472:Photo Viewer
2407:Media Center
2367:Groove Music
2297:Address Book
2268:
2261:
2254:
2249:Purble Place
2247:
2240:
2233:
2226:
2219:
2214:Chess Titans
2212:
2205:
2192:Discontinued
2180:
2173:
1876:
1872:Ntoskrnl.exe
1780:Boot Manager
1772:Architecture
1662:Group Policy
1554:File systems
1454:Saved search
1361:Sticky Notes
1326:Quick Assist
1254:Media Player
1224:Feedback Hub
1219:Fax and Scan
1114:Task Manager
1044:Event Viewer
1024:Disk Cleanup
877:
857:
848:
839:
830:
821:
812:
803:
794:
750:Sysinternals
747:
741:, but using
728:
717:
629:
624:
620:
605:\RPC Control
601:\ObjectTypes
558:
550:Set security
538:Query object
522:
480:
401:NtOpenTimer
365:NtOpenEvent
316:NtCreateFile
217:
213:
204:
196:
192:
190:
174:
160:Architecture
145:
141:
133:
129:
128:
123:
102:
93:
83:
76:
69:
62:
50:
38:Please help
33:verification
30:
2647:Minesweeper
2616:Spun off to
2437:MSN Dial-up
2432:Movie Maker
2337:Diagnostics
2287:ActiveMovie
2029:COMMAND.COM
1907:Shadow Copy
1762:Server Core
1602:Mount Point
1529:Shadow Copy
1124:Windows Ink
589:\FileSystem
560:Object name
488:Object Name
416:NtCreateKey
318:NtOpenFile
260:along with
231:System call
227:Description
186:system call
154:Object Type
2692:Categories
2627:DVD Player
2442:NetMeeting
2342:DriveSpace
2207:3D Pinball
1707:SharePoint
1471:Start menu
1316:Phone Link
1179:Calculator
1134:PowerShell
995:Management
786:References
677:Attributes
668:ObjectName
593:\KnownDlls
486:, such as
484:Properties
430:elements.
418:NtOpenKey
238:Directory
177:Windows NT
124:namespaces
96:March 2019
66:newspapers
2422:Messenger
2417:Messaging
2347:DVD Maker
2317:CD Player
2312:CardSpace
2263:Solitaire
1963:BitLocker
1958:AppLocker
1592:Hard link
1481:Task View
1459:Namespace
1429:ClearType
1249:Messaging
1234:Magnifier
1199:Clipchamp
1174:3D Viewer
621:Namespace
613:\Security
577:\Callback
544:(get the
534:Duplicate
439:Clipboard
381:serialize
371:Semaphore
328:page file
201:user mode
142:resources
2666:Category
2543:MS-DOS 7
2528:ScanDisk
2447:NTBackup
2327:Contacts
2307:Cardfile
2242:Hold 'Em
2221:FreeCell
2067:VBScript
1978:Defender
1946:Security
1932:Winlogon
1887:Registry
1501:Services
1434:Explorer
1419:AutoPlay
1306:Paint 3D
1291:OneDrive
1281:Narrator
1229:Get Help
1184:Calendar
1079:Settings
1049:IExpress
756:See also
617:\Windows
611:ports),
423:Desktop
411:registry
323:Section
313:device.
305:An open
150:Registry
2642:Mahjong
2563:Interix
2497:WinHelp
2397:Journal
2387:Imaging
2235:InkBall
2121:DirectX
2084:ActiveX
2072:JScript
1785:Console
1757:Hyper-V
1652:Domains
1476:Taskbar
1449:IFilter
1424:AutoRun
1386:WordPad
1381:Weather
1296:OneNote
1286:Notepad
1209:Cortana
1084:Sysprep
884:124–149
771:cgroups
635:typedef
585:\Driver
581:\Device
258:threads
252:Process
146:objects
80:scholar
2675:
2664:
2637:Hover!
2511:Others
2492:Travel
2487:Syskey
2270:Tinker
2228:Hearts
2156:WinUSB
2141:WinAPI
2126:Native
1937:WinUSB
1862:MinWin
1639:Server
1439:Search
1351:Sports
1321:Photos
1311:People
1189:Camera
890:
858:GitHub
656:HANDLE
650:Length
638:struct
625:GLOBAL
393:Timer
357:Event
309:or an
275:Thread
82:
75:
68:
61:
53:
2603:WinFS
2502:Write
2199:Games
2166:Games
2039:WoW64
1867:NTLDR
1857:LSASS
1790:CSRSS
1597:links
1572:exFAT
1401:Shell
1366:Store
1356:Start
1346:Skype
1301:Paint
1276:Money
1204:Clock
1151:WinRE
1059:Netsh
997:tools
986:Games
779:Linux
775:POSIX
725:Usage
674:ULONG
647:ULONG
530:Close
457:None
446:None
433:None
413:key.
375:Mutex
302:File
87:JSTOR
73:books
2677:List
2558:HPFS
2322:Chat
2280:Apps
2182:Surf
2131:.NET
2099:DCOM
1927:WHEA
1922:USER
1912:SMSS
1702:WSUS
1682:MSMQ
1624:ReFS
1587:NTFS
1562:CDFS
1519:CLFS
1514:BITS
1414:Aero
1391:Xbox
1371:Tips
1259:2022
1244:Maps
1239:Mail
1214:Edge
1166:Apps
961:APIs
888:ISBN
777:and
769:and
735:\\.\
733:and
731:\\?\
597:\Nls
554:Wait
525:Type
518:Type
406:Key
307:file
289:Job
224:Type
59:news
2457:Pay
2357:Fax
2104:OLE
2079:COM
2062:WSH
2049:API
1810:DLL
1805:EXE
1717:PWS
1697:IIS
1657:DNS
1629:UDF
1617:EFS
1612:TxF
1582:FAT
1577:IFS
1567:DFS
1156:WMI
743:\??
739:\??
609:RPC
569:\??
428:GUI
311:I/O
195:or
42:by
2694::
974:NT
969:9x
886:.
856:.
838:.
820:.
802:.
595:,
591:,
587:,
583:,
523:A
409:A
330:.
134:Ob
942:e
935:t
928:v
896:.
842:.
824:.
806:.
713:;
707:*
701:}
698:;
689:;
680:;
671:;
662:;
653:;
644:{
607:(
373:/
109:)
103:(
98:)
94:(
84:·
77:·
70:·
63:·
36:.
Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.
