(Lecture 1) Windows 2000 OS Introduction
(Lecture 1) Windows 2000 OS Introduction
Overview
Goals
Overview Windows 2000 and product variations Introduce key Windows 2000 concepts such as the Win32 API, processes, threads, virtual memory, kernel mode and user mode Introduce tools that can be used to examine Windows 2000 internal behaviour
Course Textbook
This book has been used as
a basis for much of the material you will find within this course By far the best textbook in this area buy it!
Introduction
Windows 3.0
Introduced on May 22, 1990 Big change: Supported 16-bit protected mode (Intel 286/386 processors) Could access upto 16 megabytes of memory
Windows NT
Introduced in July 1993 First Windows version supporting 32-bit mode of Intel 386, 486 and Pentium processors Designed to be portable to non-Intel processors
Windows 2000
Released in June 1998 Performance improvements & hardware support Internet Integration Introduced in February 2000
Released in September 2000
Windows Millennium
Integrated networking
Peer to peer bundled (similar to Windows 9x) 2000 Server adds enterprise-wide capability (domains) 5 transports: NetBeui, TCP/IP, IPX/SPX, AppleTalk, DLC
Windows 9x
Windows 2000 filing system supports security Windows 2000 is fully 32-bit Windows 2000 is fully reentrant
Windows 9x contains lots of 16-bit code Significant portions of 9x are nonreentrant
No master processor: OS and user threads can be scheduled to run on any processor
Product Packaging
Windows 2000 Professional
Windows 2000 Server
Desktop version Licensed for 2CPUs, 4GB RAM Superset of Win2K Professional Adds Server and Networking Functionality (Domains, DNS) Licensed for 8 CPUs, 8GB RAM
Key Concepts
Win32 API
Win32s Win 3.1/DOS Windows 95/98/ Millennium Windows 2000
What is a thread?
What is a job?
process All threads in a process share the same per-process address space
Thread
Task Manager
To start: Ctrl+Alt+Del or
Processes tab:
Performance tab:
Subset of performance
Virtual Memory
Virtual address space = logical view Memory manager translates virtual addresses into
physical addresses Paging transfers some memory contents to disk, freeing physical memory
Virtual Memory Physical Memory
system prevented from modifying critical data However, OS components/device drivers can still corrupt system!
Organised to hives
Pieces of the registry database stored in different files
Organised to hives
Pieces of the registry database stored in different files
Registry Organisation
Five main hives for location machine information
\HKEY_LOCAL_MACHINE\System \HKEY_LOCAL_MACHINE\Hardware \HKEY_LOCAL_MACHINE\Software \HKEY_LOCAL_MACHINE\SAM
Controls booting and running the system Hardware configuration data, resource usage Volatile (not saved across boots) Per-machine software data (not critical for booting)
Try regmon!
Tools Preview
Tool
Performance Monitor Task Manager
Executable
perfmon Bundled with 2000 Bundled with 2000
Functionality
System Monitoring, Viewing Performance Counter Logs Provides information about processes and performance
taskman
Process Viewer
Tlist Registry Monitor
pview
tlist regmon
Resource Kit
Resource Kit Inside Windows 2000 Inside Windows 2000
File Monitor
filemon