Komponen teras Senarai_komponen_Microsoft_Windows

KomponenAcronymDescription
Windows kernel (Windows NT)
Ntoskrnl.exeThe Windows kernel image. Provides the kernel and executive layers of the kernel architecture, and is responsible for services such as hardware virtualization, process and memory management, etc.
hal.dllHALProvides and handles the interaction between software and hardware via the Hardware Abstraction Layer.
Core processes (Windows NT)
System idle processSIPA counter which measures how much idle capacity the CPU has at any given time. The process runs in the background and monitors processing bandwidth, occupied memory and the Windows virtual paging file.
Session Manager SubsystemSMSSPerforms several critical boot-time operations, such as the creation of environment variables, starting CSRSS, and performs file-copy operations that were queued up from before the system was booted (pending file rename operations). During system operation, it handles the creation of logon sessions via Winlogon and handles Windows File Protection.
Client/Server Runtime SubsystemCSRSSUser-mode side of the Win32 subsystem. Provides the capability for applications to use the Windows API.
Local Security Authority Subsystem ServiceLSASSResponsible for enforcing the security policy on the system. Verifies users logging on to the computer and creates security tokens.
WinlogonResponsible for handling the secure attention key, loading the user profile on logon, and optionally locking the computer when a screensaver is running. On Windows NT systems prior to Windows Vista, Winlogon is also responsible for loading GINA libraries which are responsible collecting logon credentials from the user.
Svchost.exeA generic host process name for services that run from dynamic-link libraries (DLLs). Several Svchost processes are typically present on a Windows machine, each running in a different security context, depending on what privileges the contained services require.
Windows on Windows and WOW64WoWAn abstraction layer that allows legacy code to operate on more modern versions of Windows; typically this means running 16-bit Windows applications on 32-bit Windows, and 32-bit applications on 64-bit Windows.
Virtual DOS machineNTVDMAllows MS-DOS programs to run on Intel 80386 or higher computers when there is already another operating system running and controlling the hardware. Diperkenalkan in Windows 2.1; not available in any 64-bit edition of Windows.
System startup (Windows NT)
NTLDR, IA64ldr, WinloadThe boot loader; performs basic system initialization options such as loading the hardware abstraction layer and boot-time device drivers, prior to passing control to the Windows kernel. In versions prior to Vista, NTLDR and IA64ldr also display menus to the user if multiple operating systems are defined in boot.ini, or if F8 is pressed.
Recovery ConsoleProvides the means for administrators to perform a limited range of tasks using a command line interface, primarily to aid in recovering from situations where Windows does not boot successfully.
ntdetect.comUsed during the boot process to detect basic hardware components that may be required during the boot process.
Windows Boot ManagerIn Windows Vista and later operating systems, displays boot menus to the user if multiple operating systems are configured in the system's Boot Configuration Data.
Graphical subsystem
Graphics Device InterfaceGDI/GDI+The kernel graphics component for representing graphical objects and transmitting them to output devices such as monitors and printers.
Desktop Window ManagerDWMThe compositing manager introduced in Windows Vista that handles compositing and manages special effects on screen objects in a graphical user interface.