MCS 041 Block 3 Unit 4

Case Study Windows 2000

By Kirit A. Dhabalia

Content
Windows 2000 An Introduction Windows 2000 Programming Windows 2000 OS Process and Threads Booting Windows 2000 Memory Management Input/Output Windows 2000 File System Management

Windows 2000 An Introduction

Significant Features of Windows 2000 Support for FAT16, FAT32 and NTFS Increased uptime of the system and significantly fewer OS reboot scenarios Windows installer tracks applications and recognises and replace missing components Protects memory of individual apps and processes to avoid a single app bringing the system down Encrypted file systems protect sensitive data Secure virtual private networking (VPN) supports tunneling in to private LAN over public internet Personalised menus adapt to the way you work Multilingual version allows for user interface and help to switch, based on login Includes broader support for high-speed networking devices, including native ATM and cable modems Supports universal bus (USB) and IEEE 1394 for greater bandwidth devices

Windows 2000 An Introduction

The new features in windows 2000 OS are:
Active directory service Security using kerberos Support for smart cards System monitoring tools Better integration of laptop computers with desktop computers System management infrastructure Single instance store and job objects The file system NTFS has been extended to support encrypted files, quotas, linked files, mounted volumes and content indexing etc internationalisation

Windows 2000 An Introduction

When the system is installed, version is recorded in the registry (internal database). At boot time, the OS checks the registry to see the version. Windows 2000 to make two or four servers look like a single server to the outside world
Windows 2000 Ver. Max. RAM CPU Max Clients Cluster Size Optimized for

Professional
Server Advance Server Datacenter Server

4 GB
4 GB 8 GB 64 GB

2
4 8 32

10
Unlimited Unlimited Unlimited

0
0 2 4

Response Time
Throughput Throughput Throughput

Windows 2000 Programming

Application Programming Interface The Registry
All the info. Needed for booting and configuring the system and tailoring it to the current user was gathered in a big central database called registry. Top level key starts with the string HKEY (root key)
HKEY_LOCAL_MACHINE HKEY_USERS HKEY_PERFORMANCE_DATA HKEY_CLASS_ROOT HKEY_CURRENT_CONFIG HKEY_CURRENT_USER

Windows 2000 OS Structure

Win 2k consists of two major components
OS itself, which runs in kernel mode Environment subsystems, which run in user mode
Service Process POSIX Program POSIX Subsys Win32 Program Win32 Subsys OS/2 Program OS/2 Subsys

System Interface (NT DLL.DLL) System Services I/O Mgr File Sys
Object Process Mgr Mgr Memory Security Mgr Mgr Cache PmP Power Config LPC Mgr Mgr Mgr Mgr Mgr Win32 GDI

Kernel Hardware Abstraction Layer (HAL) Hardware

VD

Windows 2000 OS Structure

HAL Services
Access to device registers Bus-independent device addressing Interrupt handling Resetting DMA transfer Control of the times and real time clock Low-level spin locks and multiprocessor synchronization Interfacing with the BIOS and its CMOS configuration memory

Windows 2000 OS Structure

Kernal Layer
The purpose of the kernel is to make the rest of the operating system hardware-independent. It access the hardware via HAL (Hardware Abstraction Layer)
File Name Ntoskrnl.exe Hal.dll Win32k.sys *.sys Consists of Kernel and executive HALL Win32 and GDI Driver files

Windows 2000 OS Structure

Object Type Process Thread Semaphore Mutex Event Port Timer Queue Open File Access token Profile Section Key Object directory Symbolic link Device Device driver Description User Process Thread within a process Counting semaphore used for interprocess synchronization Binary semaphore used to enter a critical region Synchronization object with persistent state (signaled/not) Mechanism for interprocess message passing Object allowing a thread to sleep for a fixed time interval Object used for completion notification on asynchronous I/O Object associated with open file Security descriptor for some object Data structure used for profiling CPU usage Structure used for mapping files into virtual address space Register key Directory for grouping objects within the object manager Pointer to another object by name I/O device object Each loaded device has its own object

Environment Subsystem User mode components are of three kinds

DLLs Environment subsystems Service processes

Process And Threads

Windows processes and threads
Every process consists of one or more threads Threads are scheduled on the basis of the following factors
Availability of resources such as CPU and physical memory Priority Fairness and many more

Job: Collection of processes that share quotas and limits Process: Container for holding resources Thread : Entity scheduled by the kernel Fiber: Light weight thread managed entirely in user space

Process And Threads

Relationship between jobs, processes and threads
Job Process Address Space

Thread

Stack

Process Handle

Kernel mode Thread stack

Process Handle

Process And Threads

API Calls

Pointer to the name of the executable file Command line itself Pointer to a security descriptor for the process Pointer to a security descriptor for the initial thread A bit telling whether the new process inherits the creators handles Miscellaneous flag A pointer to the environment string Pointer to the name of the new process current working directory Pointer for initial window on the screen Pointer to a structure that returns 18 values

Booting Windows 2000

Boot process consist of reading in the first sector of the first disk, the master boot record and jumping to it The assembly language program reads the partition table to check which partition table contains the bootable OS On finding the OS partition, it reads the first sector of the partition, called the boot sector The program in the boot sector reads its partitions root directory, searching for a file called ntldr Ntldr is loaded into memory and executed. Ntldr loads windows 2000 Ntldr reads boot.ini, the only configuration information that is not available in the registry Ntldr then selects and loads hal.dll and ntoskrnl.exe and bootvid.dll (default video driver) Ntldr next reads the registry to find out which drivers are needed to complete the boot. It reads all drivers and passes the control to ntoskrnl.exe General initialisation After the service processes (user space daemons) start and allow user to log in. winlogon.exe first creates the authentication manager (lsass.exe) and then the parent process of the services (services.exe). Winlogon.exe is responsible for user logins. A separate program in msgina.dll handles the actual login dialog

Thank You