2309:
31:
2320:
177:
Winlogon sets the protection of the window station and corresponding desktops to ensure that each is properly accessible. In general, this means that the local system will have full access to these objects and that an interactively logged-on user will have read access to the window station object and
257:
Multiple networks installed on a
Windows system can be included in the authentication process and in password-updating operations. This inclusion lets additional networks gather identification and authentication information all at once during normal logon, using the secure desktop of Winlogon. Some
249:
workstation as locked. When there is mouse or keyboard activity, Winlogon invokes the WlxDisplayLockedNotice function of the GINA and locked workstation behavior resumes. If the screen saver is not secure, any keyboard or mouse activity terminates the screen saver without notification to the GINA.
239:
When a user logs on, the GINA is responsible for creating one or more initial processes for that user. Winlogon provides a support function for the GINA to apply the security of the newly logged-on user to these processes. However, the preferred way to do this is for the GINA to call the
Windows
248:
Winlogon monitors keyboard and mouse activity to determine when to activate screen savers. After the screen saver is activated, Winlogon continues to monitor keyboard and mouse activity to determine when to terminate the screen saver. If the screen saver is marked as secure, Winlogon treats the
271:
Winlogon is a common target for several threats that could modify its function and memory usage. Winlogon has support for plugins that get loaded and notified about specific events. Some rootkits bundle
Winlogon plugins because they are loaded before any user logs in. Some registry keys allow
230:
When users log on, their user profiles are loaded into the registry. In this way, the processes of the user can use the special registry key HKEY_CURRENT_USER. Winlogon does this automatically after a successful logon but before activation of the shell for the newly logged-on
20:
221:
When
Winlogon encounters a SAS event or when a SAS is delivered to Winlogon by the GINA, Winlogon sets the state accordingly, changes to the Winlogon desktop, and calls one of the SAS processing functions of the
608:
588:
286:
115:
The first part of the logon process
Winlogon conducts is starting the process that shows the user the logon screen. Before Windows Vista this was done by
798:
1324:
1474:
1339:
259:
198:
194:
116:
1504:
581:
120:
105:
119:, but starting with Vista this is done by LogonUI. These programs are responsible for getting user credential and passing them to the
146:
desktop when the shell indicates that it is ready to display something for the user, or after thirty seconds, whichever comes first.
1161:
307:
in
September 2020, Winlogon was the only piece missing from the source code, rendering the leaked operating system incomplete.
2195:
574:
71:
is running (requiring another authentication step). The roles and responsibilities of
Winlogon have changed significantly in
1854:
84:
2324:
597:
326:
281:
272:
multiple values to be supplied that allow a malicious program to be executed at the same time as a legitimate system file.
2350:
1574:
1214:
633:
460:
1746:
1655:
1171:
803:
443:
363:
408:
379:
509:
485:"Boot or Logon Autostart Execution: Winlogon Helper DLL, Sub-technique T1547.004 - Enterprise | MITRE ATT&CK®"
1494:
1437:
1399:
1384:
2240:
1822:
1349:
1364:
94:
2205:
2074:
1761:
1751:
1625:
1529:
1389:
746:
701:
2345:
2313:
1681:
1640:
1539:
1394:
1191:
906:
856:
1903:
1783:
1489:
988:
628:
621:
616:
2235:
2200:
1630:
1620:
1559:
1469:
1359:
1329:
978:
676:
190:
90:
60:
1600:
1544:
1524:
1369:
1138:
1023:
913:
161:
prompt is shown. Winlogon now starts the program specified in the
Userinit value which defaults to
554:
Windows Vista and
Windows Server 2008: Understanding, Enhancing and Extending Security End-to-end
2185:
2180:
2024:
2019:
1979:
1939:
1889:
1635:
1379:
1374:
1249:
1224:
1186:
1156:
1106:
918:
841:
766:
686:
661:
101:
2165:
2129:
1741:
1726:
1484:
1442:
1334:
1264:
1181:
1166:
761:
213:
SAS as one of the SASs it recognizes should use the
Winlogon support provided for this purpose.
2294:
2114:
2059:
1999:
1984:
1793:
1464:
1419:
1276:
1229:
553:
126:
After control is given back to Winlogon, it creates and opens an interactive window station,
2279:
2274:
2119:
2089:
2054:
1944:
1650:
1645:
1549:
1499:
1457:
1427:
1314:
901:
866:
813:
751:
557:
158:
64:
8:
2220:
2079:
2034:
2009:
1964:
1910:
1709:
1564:
1447:
896:
881:
821:
741:
711:
561:
542:
536:
304:
2225:
2175:
1949:
1868:
1773:
1479:
1319:
1286:
1259:
1254:
1101:
928:
831:
826:
726:
187:
154:
2289:
2215:
2170:
2069:
2064:
2039:
1994:
1959:
1829:
1133:
943:
776:
439:
359:
53:
38:
2230:
2139:
1974:
1917:
1875:
1736:
1704:
1660:
1615:
1534:
1294:
1091:
968:
958:
721:
716:
560:
presentation that includes information on changes to Winlogon in Windows Vista and
56:
2266:
2149:
2124:
2109:
2099:
2049:
2044:
1798:
1432:
1148:
1013:
1003:
948:
933:
791:
681:
484:
355:
197:/credential providers to use as their SAS, or as part of their SAS. In general,
1756:
1299:
1111:
1086:
1018:
886:
861:
836:
786:
756:
666:
566:
108:, but since Vista these have been launched by the Windows Startup Application (
2339:
2245:
2104:
2004:
1344:
1304:
1081:
1056:
1048:
983:
851:
651:
72:
2014:
1969:
1896:
1861:
1569:
1519:
1309:
1061:
1008:
973:
891:
871:
691:
671:
548:
297:
186:
Winlogon has special hooks into the User32 server that allow it to monitor
201:
should monitor SASs on their own; however, any GINA that has the standard
2084:
2029:
1934:
1788:
1676:
1554:
1409:
1201:
1176:
771:
68:
63:, loading the user profile on logon, creates the desktops for the window
1989:
1813:
1354:
1244:
1118:
1038:
963:
781:
34:
30:
24:
1610:
1605:
1239:
1128:
1076:
846:
240:
function CreateProcessAsUser, and let the system provide the service.
193:(SAS) events. Winlogon makes this SAS event information available to
2190:
2094:
1954:
1714:
1209:
1066:
953:
938:
876:
736:
696:
2210:
2144:
1882:
1768:
1731:
1719:
1404:
1123:
1096:
1071:
1033:
1028:
731:
656:
327:"Windows Administration: Inside the Windows Vista Kernel: Part 2"
258:
of the parameters required in the Winlogon services available to
998:
100:
Before Windows Vista, Winlogon was responsible for starting the
2284:
2134:
1803:
1584:
1509:
923:
2250:
1686:
1514:
1219:
993:
706:
438:(6th ed.). Redmond, Wash.: Microsoft Press. p. 77.
291:
434:
Ionescu, Alex; Russinovich, Mark; Solomon, David A. (2012).
1778:
1452:
1271:
1234:
19:
1696:
433:
549:
MSKB:193361 MSGINA.DLL does not Reset WINLOGON Structure
262:
explicitly support these additional network providers.
142:. Winlogon switches from the Winlogon desktop to the
287:
Architecture of the Windows NT operating system line
85:
Booting process of Windows NT § Authentication
349:
2337:
596:
16:Component of Microsoft Windows operating systems
294:, a trojan that attaches itself to winlogon.exe
545:, Developer tutorial for writing a custom GINA
539:, Developer tutorial for writing a custom GINA
178:full access to the application desktop object.
582:
350:Russinvoich, Mark E.; Solomon, David (2005).
67:, and optionally locking the computer when a
165:. This value supports multiple executables.
461:"Winlogon Notification Events - Win32 apps"
2319:
589:
575:
121:Local Security Authority Subsystem Service
106:Local Security Authority Subsystem Service
458:
324:
29:
18:
2338:
507:
2196:Next-Generation Secure Computing Base
570:
510:"Windows XP source code leaks online"
354:(4th ed.). Redmond, Washington:
174:Window station and desktop protection
59:that is responsible for handling the
37:lock screen, requiring user to press
403:
401:
282:List of Microsoft Windows components
236:Assignment of security to user shell
23:Classic "Begin logon" dialog box on
1325:Distributed Transaction Coordinator
168:
13:
1656:User Interface Privilege Isolation
266:
14:
2362:
530:
427:
398:
343:
254:Multiple network provider support
2318:
2308:
2307:
149:The system switches back to the
123:, which authenticates the user.
1385:Remote Differential Compression
2241:Windows System Assessment Tool
501:
477:
452:
372:
318:
130:, and creates three desktops,
1:
311:
95:booting process of Windows NT
75:and later operating systems.
1530:Open XML Paper Specification
1390:Remote Installation Services
598:Microsoft Windows components
153:desktop if the user presses
89:Winlogon is launched by the
7:
1682:Windows Subsystem for Linux
1641:Mandatory Integrity Control
1395:Windows Deployment Services
1192:Wireless Zero Configuration
352:Microsoft Windows Internals
305:Windows XP Source code leak
300:, a similar process in UNIX
275:
78:
10:
2367:
2351:Computer security software
1784:Universal Windows Platform
1490:Kernel Transaction Manager
1475:Hardware Abstraction Layer
1172:Multimedia Class Scheduler
508:Warren, Tom (2020-09-25).
82:
2303:
2263:
2236:Windows Services for UNIX
2158:
1927:
1846:
1839:
1812:
1695:
1669:
1621:Data Execution Prevention
1593:
1470:Graphics Device Interface
1418:
1360:Network Access Protection
1285:
1200:
1147:
1047:
979:Remote Desktop Connection
812:
642:
604:
543:Customizing GINA - Part 2
537:Customizing GINA - Part 1
436:Windows internals, Part 1
191:secure attention sequence
91:Session Manager Subsystem
61:secure attention sequence
1601:Security and Maintenance
1545:Security Account Manager
1139:Windows XP visual styles
183:Standard SAS recognition
2186:Media Control Interface
2020:Help and Support Center
1636:Kernel Patch Protection
1400:System Resource Manager
1380:Remote Desktop Services
1375:Print Services for UNIX
1157:Service Control Manager
767:Windows Error Reporting
687:DirectX Diagnostic Tool
415:. Microsoft Corporation
386:. Microsoft Corporation
218:SAS routine dispatching
102:Service Control Manager
2166:Desktop Cleanup Wizard
1742:COM Structured storage
1443:Desktop Window Manager
1335:Windows Media Services
52:) is the component of
42:
27:
1794:Windows Mixed Reality
1465:Enhanced Write Filter
1315:Roaming user profiles
83:Further information:
33:
22:
2075:Mobile Device Center
2025:Health & Fitness
1823:Solitaire Collection
1651:User Account Control
1646:Protected Media Path
1550:Server Message Block
1500:Logical Disk Manager
752:System Policy Editor
737:System Configuration
558:Microsoft PowerPoint
245:Screen saver control
227:User profile loading
159:User Account Control
2221:Virtual DOS machine
1565:System Idle Process
1540:Resource Protection
1448:Portable Executable
1340:Active DRM Services
742:System File Checker
712:Performance Monitor
562:Windows Server 2008
465:learn.microsoft.com
331:learn.microsoft.com
2346:Windows components
2226:Windows on Windows
1950:Backup and Restore
1762:Transaction Server
1480:I/O request packet
1320:Folder redirection
989:Speech Recognition
747:System Information
702:Management Console
188:Control-Alt-Delete
155:Control-Alt-Delete
43:
28:
2333:
2332:
2259:
2258:
2216:Video for Windows
2171:Games for Windows
2040:Internet Explorer
1134:Windows Spotlight
777:Windows Installer
380:"Window Stations"
93:as a part of the
57:operating systems
54:Microsoft Windows
2358:
2322:
2321:
2311:
2310:
2231:Windows SideShow
2010:Food & Drink
1904:Spider Solitaire
1844:
1843:
1737:ActiveX Document
1705:Active Scripting
1661:Windows Firewall
1616:Credential Guard
1295:Active Directory
1092:Indexing Service
722:Resource Monitor
717:Recovery Console
591:
584:
577:
568:
567:
524:
523:
521:
520:
505:
499:
498:
496:
495:
489:attack.mitre.org
481:
475:
474:
472:
471:
456:
450:
449:
431:
425:
424:
422:
420:
405:
396:
395:
393:
391:
376:
370:
369:
347:
341:
340:
338:
337:
322:
169:Responsibilities
164:
152:
145:
141:
137:
133:
129:
111:
2366:
2365:
2361:
2360:
2359:
2357:
2356:
2355:
2336:
2335:
2334:
2329:
2299:
2267:Microsoft Store
2265:
2255:
2201:POSIX subsystem
2181:File Protection
2154:
2125:Program Manager
2110:Phone Companion
2100:Outlook Express
2050:Make Compatible
1980:Desktop Gadgets
1940:Anytime Upgrade
1923:
1835:
1808:
1799:Windows Runtime
1691:
1665:
1631:Family features
1589:
1414:
1370:DFS Replication
1281:
1196:
1187:Error Reporting
1143:
1043:
919:Mobility Center
914:Movies & TV
808:
792:Windows Insider
682:Driver Verifier
677:Drive Optimizer
644:
638:
629:Booting process
600:
595:
533:
528:
527:
518:
516:
506:
502:
493:
491:
483:
482:
478:
469:
467:
459:alvinashcraft.
457:
453:
446:
432:
428:
418:
416:
407:
406:
399:
389:
387:
378:
377:
373:
366:
356:Microsoft Press
348:
344:
335:
333:
323:
319:
314:
278:
269:
267:Vulnerabilities
212:
208:
204:
171:
162:
150:
143:
139:
135:
131:
127:
109:
87:
81:
39:Ctrl+Alt+Delete
17:
12:
11:
5:
2364:
2354:
2353:
2348:
2331:
2330:
2328:
2327:
2316:
2304:
2301:
2300:
2298:
2297:
2292:
2287:
2282:
2277:
2271:
2269:
2261:
2260:
2257:
2256:
2254:
2253:
2248:
2243:
2238:
2233:
2228:
2223:
2218:
2213:
2208:
2203:
2198:
2193:
2188:
2183:
2178:
2173:
2168:
2162:
2160:
2156:
2155:
2153:
2152:
2147:
2142:
2137:
2132:
2130:Steps Recorder
2127:
2122:
2117:
2112:
2107:
2102:
2097:
2092:
2087:
2082:
2077:
2072:
2067:
2062:
2057:
2052:
2047:
2042:
2037:
2032:
2027:
2022:
2017:
2012:
2007:
2002:
1997:
1992:
1987:
1982:
1977:
1972:
1967:
1962:
1957:
1952:
1947:
1942:
1937:
1931:
1929:
1925:
1924:
1922:
1921:
1914:
1907:
1900:
1893:
1886:
1879:
1872:
1865:
1858:
1850:
1848:
1841:
1837:
1836:
1834:
1833:
1826:
1818:
1816:
1810:
1809:
1807:
1806:
1801:
1796:
1791:
1786:
1781:
1776:
1771:
1766:
1765:
1764:
1759:
1757:OLE Automation
1754:
1749:
1744:
1739:
1734:
1724:
1723:
1722:
1717:
1712:
1701:
1699:
1693:
1692:
1690:
1689:
1684:
1679:
1673:
1671:
1667:
1666:
1664:
1663:
1658:
1653:
1648:
1643:
1638:
1633:
1628:
1623:
1618:
1613:
1608:
1603:
1597:
1595:
1591:
1590:
1588:
1587:
1582:
1577:
1572:
1567:
1562:
1557:
1552:
1547:
1542:
1537:
1532:
1527:
1525:Object Manager
1522:
1517:
1512:
1507:
1502:
1497:
1492:
1487:
1485:Imaging Format
1482:
1477:
1472:
1467:
1462:
1461:
1460:
1455:
1445:
1440:
1435:
1430:
1424:
1422:
1416:
1415:
1413:
1412:
1407:
1402:
1397:
1392:
1387:
1382:
1377:
1372:
1367:
1362:
1357:
1352:
1347:
1342:
1337:
1332:
1327:
1322:
1317:
1312:
1307:
1302:
1297:
1291:
1289:
1283:
1282:
1280:
1279:
1274:
1269:
1268:
1267:
1262:
1257:
1252:
1247:
1242:
1232:
1227:
1222:
1217:
1212:
1206:
1204:
1198:
1197:
1195:
1194:
1189:
1184:
1182:Task Scheduler
1179:
1174:
1169:
1164:
1159:
1153:
1151:
1145:
1144:
1142:
1141:
1136:
1131:
1126:
1121:
1116:
1115:
1114:
1112:Special folder
1109:
1104:
1099:
1094:
1084:
1079:
1074:
1069:
1064:
1059:
1053:
1051:
1045:
1044:
1042:
1041:
1036:
1031:
1026:
1024:Voice Recorder
1021:
1016:
1011:
1006:
1001:
996:
991:
986:
981:
976:
971:
966:
961:
956:
951:
946:
941:
936:
931:
926:
921:
916:
911:
910:
909:
899:
894:
889:
884:
879:
874:
869:
864:
859:
854:
849:
844:
839:
834:
829:
824:
818:
816:
810:
809:
807:
806:
801:
796:
795:
794:
787:Windows Update
784:
779:
774:
769:
764:
759:
757:System Restore
754:
749:
744:
739:
734:
729:
724:
719:
714:
709:
704:
699:
694:
689:
684:
679:
674:
669:
667:Device Manager
664:
659:
657:Command Prompt
654:
648:
646:
640:
639:
637:
636:
631:
626:
625:
624:
619:
611:
605:
602:
601:
594:
593:
586:
579:
571:
565:
564:
551:
546:
540:
532:
531:External links
529:
526:
525:
500:
476:
451:
445:978-0735648739
444:
426:
397:
371:
365:978-0735619173
364:
358:. p. 81.
342:
325:Archiveddocs.
316:
315:
313:
310:
309:
308:
301:
295:
289:
284:
277:
274:
268:
265:
264:
263:
255:
251:
250:
246:
242:
241:
237:
233:
232:
228:
224:
223:
219:
215:
214:
210:
206:
202:
184:
180:
179:
175:
170:
167:
80:
77:
15:
9:
6:
4:
3:
2:
2363:
2352:
2349:
2347:
2344:
2343:
2341:
2326:
2317:
2315:
2306:
2305:
2302:
2296:
2293:
2291:
2288:
2286:
2283:
2281:
2278:
2276:
2273:
2272:
2270:
2268:
2262:
2252:
2249:
2247:
2246:Windows To Go
2244:
2242:
2239:
2237:
2234:
2232:
2229:
2227:
2224:
2222:
2219:
2217:
2214:
2212:
2209:
2207:
2204:
2202:
2199:
2197:
2194:
2192:
2189:
2187:
2184:
2182:
2179:
2177:
2174:
2172:
2169:
2167:
2164:
2163:
2161:
2157:
2151:
2148:
2146:
2143:
2141:
2138:
2136:
2133:
2131:
2128:
2126:
2123:
2121:
2118:
2116:
2115:Photo Gallery
2113:
2111:
2108:
2106:
2103:
2101:
2098:
2096:
2093:
2091:
2088:
2086:
2083:
2081:
2078:
2076:
2073:
2071:
2068:
2066:
2063:
2061:
2060:Meeting Space
2058:
2056:
2053:
2051:
2048:
2046:
2043:
2041:
2038:
2036:
2033:
2031:
2030:HyperTerminal
2028:
2026:
2023:
2021:
2018:
2016:
2013:
2011:
2008:
2006:
2003:
2001:
2000:Easy Transfer
1998:
1996:
1993:
1991:
1988:
1986:
1983:
1981:
1978:
1976:
1973:
1971:
1968:
1966:
1963:
1961:
1958:
1956:
1953:
1951:
1948:
1946:
1943:
1941:
1938:
1936:
1933:
1932:
1930:
1926:
1920:
1919:
1915:
1913:
1912:
1908:
1906:
1905:
1901:
1899:
1898:
1894:
1892:
1891:
1887:
1885:
1884:
1880:
1878:
1877:
1873:
1871:
1870:
1866:
1864:
1863:
1859:
1857:
1856:
1852:
1851:
1849:
1845:
1842:
1838:
1832:
1831:
1827:
1825:
1824:
1820:
1819:
1817:
1815:
1811:
1805:
1802:
1800:
1797:
1795:
1792:
1790:
1787:
1785:
1782:
1780:
1777:
1775:
1772:
1770:
1767:
1763:
1760:
1758:
1755:
1753:
1750:
1748:
1745:
1743:
1740:
1738:
1735:
1733:
1730:
1729:
1728:
1725:
1721:
1718:
1716:
1713:
1711:
1708:
1707:
1706:
1703:
1702:
1700:
1698:
1694:
1688:
1685:
1683:
1680:
1678:
1675:
1674:
1672:
1670:Compatibility
1668:
1662:
1659:
1657:
1654:
1652:
1649:
1647:
1644:
1642:
1639:
1637:
1634:
1632:
1629:
1627:
1624:
1622:
1619:
1617:
1614:
1612:
1609:
1607:
1604:
1602:
1599:
1598:
1596:
1592:
1586:
1583:
1581:
1578:
1576:
1573:
1571:
1568:
1566:
1563:
1561:
1558:
1556:
1553:
1551:
1548:
1546:
1543:
1541:
1538:
1536:
1533:
1531:
1528:
1526:
1523:
1521:
1518:
1516:
1513:
1511:
1508:
1506:
1503:
1501:
1498:
1496:
1495:Library files
1493:
1491:
1488:
1486:
1483:
1481:
1478:
1476:
1473:
1471:
1468:
1466:
1463:
1459:
1456:
1454:
1451:
1450:
1449:
1446:
1444:
1441:
1439:
1436:
1434:
1431:
1429:
1426:
1425:
1423:
1421:
1417:
1411:
1408:
1406:
1403:
1401:
1398:
1396:
1393:
1391:
1388:
1386:
1383:
1381:
1378:
1376:
1373:
1371:
1368:
1366:
1363:
1361:
1358:
1356:
1353:
1351:
1348:
1346:
1343:
1341:
1338:
1336:
1333:
1331:
1328:
1326:
1323:
1321:
1318:
1316:
1313:
1311:
1308:
1306:
1303:
1301:
1298:
1296:
1293:
1292:
1290:
1288:
1284:
1278:
1275:
1273:
1270:
1266:
1263:
1261:
1258:
1256:
1255:Reparse point
1253:
1251:
1248:
1246:
1243:
1241:
1238:
1237:
1236:
1233:
1231:
1228:
1226:
1223:
1221:
1218:
1216:
1213:
1211:
1208:
1207:
1205:
1203:
1199:
1193:
1190:
1188:
1185:
1183:
1180:
1178:
1175:
1173:
1170:
1168:
1165:
1163:
1160:
1158:
1155:
1154:
1152:
1150:
1146:
1140:
1137:
1135:
1132:
1130:
1127:
1125:
1122:
1120:
1117:
1113:
1110:
1108:
1105:
1103:
1100:
1098:
1095:
1093:
1090:
1089:
1088:
1085:
1083:
1080:
1078:
1075:
1073:
1070:
1068:
1065:
1063:
1060:
1058:
1057:Action Center
1055:
1054:
1052:
1050:
1046:
1040:
1037:
1035:
1032:
1030:
1027:
1025:
1022:
1020:
1017:
1015:
1012:
1010:
1007:
1005:
1002:
1000:
997:
995:
992:
990:
987:
985:
984:Snipping Tool
982:
980:
977:
975:
972:
970:
967:
965:
962:
960:
957:
955:
952:
950:
947:
945:
942:
940:
937:
935:
932:
930:
927:
925:
922:
920:
917:
915:
912:
908:
905:
904:
903:
900:
898:
895:
893:
890:
888:
885:
883:
880:
878:
875:
873:
870:
868:
865:
863:
860:
858:
855:
853:
850:
848:
845:
843:
842:Character Map
840:
838:
835:
833:
830:
828:
825:
823:
820:
819:
817:
815:
811:
805:
802:
800:
797:
793:
790:
789:
788:
785:
783:
780:
778:
775:
773:
770:
768:
765:
763:
760:
758:
755:
753:
750:
748:
745:
743:
740:
738:
735:
733:
730:
728:
725:
723:
720:
718:
715:
713:
710:
708:
705:
703:
700:
698:
695:
693:
690:
688:
685:
683:
680:
678:
675:
673:
670:
668:
665:
663:
662:Control Panel
660:
658:
655:
653:
652:App Installer
650:
649:
647:
641:
635:
632:
630:
627:
623:
620:
618:
615:
614:
613:Architecture
612:
610:
607:
606:
603:
599:
592:
587:
585:
580:
578:
573:
572:
569:
563:
559:
555:
552:
550:
547:
544:
541:
538:
535:
534:
515:
511:
504:
490:
486:
480:
466:
462:
455:
447:
441:
437:
430:
414:
410:
404:
402:
385:
381:
375:
367:
361:
357:
353:
346:
332:
328:
321:
317:
306:
302:
299:
296:
293:
290:
288:
285:
283:
280:
279:
273:
261:
256:
253:
252:
247:
244:
243:
238:
235:
234:
229:
226:
225:
220:
217:
216:
200:
196:
192:
189:
185:
182:
181:
176:
173:
172:
166:
160:
156:
147:
124:
122:
118:
113:
107:
103:
98:
96:
92:
86:
76:
74:
73:Windows Vista
70:
66:
62:
58:
55:
51:
50:Windows Logon
47:
40:
36:
32:
26:
21:
2280:File Manager
2120:Photo Viewer
2055:Media Center
2015:Groove Music
1945:Address Book
1916:
1909:
1902:
1897:Purble Place
1895:
1888:
1881:
1874:
1867:
1862:Chess Titans
1860:
1853:
1840:Discontinued
1828:
1821:
1579:
1520:Ntoskrnl.exe
1428:Boot Manager
1420:Architecture
1310:Group Policy
1202:File systems
1102:Saved search
1009:Sticky Notes
974:Quick Assist
902:Media Player
872:Feedback Hub
867:Fax and Scan
762:Task Manager
692:Event Viewer
672:Disk Cleanup
517:. Retrieved
513:
503:
492:. Retrieved
488:
479:
468:. Retrieved
464:
454:
435:
429:
417:. Retrieved
412:
388:. Retrieved
383:
374:
351:
345:
334:. Retrieved
330:
320:
270:
163:userinit.exe
148:
125:
114:
99:
88:
49:
45:
44:
2295:Minesweeper
2264:Spun off to
2085:MSN Dial-up
2080:Movie Maker
1985:Diagnostics
1935:ActiveMovie
1677:COMMAND.COM
1555:Shadow Copy
1410:Server Core
1250:Mount Point
1177:Shadow Copy
772:Windows Ink
140:ScreenSaver
110:wininit.exe
69:screensaver
2340:Categories
2275:DVD Player
2090:NetMeeting
1990:DriveSpace
1855:3D Pinball
1355:SharePoint
1119:Start menu
964:Phone Link
827:Calculator
782:PowerShell
643:Management
519:2020-09-27
494:2023-05-14
470:2023-05-14
409:"Desktops"
336:2023-05-14
312:References
157:or when a
35:Windows 11
25:Windows XP
2070:Messenger
2065:Messaging
1995:DVD Maker
1965:CD Player
1960:CardSpace
1911:Solitaire
1611:BitLocker
1606:AppLocker
1240:Hard link
1129:Task View
1107:Namespace
1077:ClearType
897:Messaging
882:Magnifier
847:Clipchamp
822:3D Viewer
514:The Verge
2314:Category
2191:MS-DOS 7
2176:ScanDisk
2095:NTBackup
1975:Contacts
1955:Cardfile
1890:Hold 'Em
1869:FreeCell
1715:VBScript
1626:Defender
1594:Security
1580:Winlogon
1535:Registry
1149:Services
1082:Explorer
1067:AutoPlay
954:Paint 3D
939:OneDrive
929:Narrator
877:Get Help
832:Calendar
727:Settings
697:IExpress
556:—
419:19 April
390:19 April
276:See also
151:Winlogon
132:Winlogon
104:and the
79:Overview
46:Winlogon
2290:Mahjong
2211:Interix
2145:WinHelp
2045:Journal
2035:Imaging
1883:InkBall
1769:DirectX
1732:ActiveX
1720:JScript
1433:Console
1405:Hyper-V
1300:Domains
1124:Taskbar
1097:IFilter
1072:AutoRun
1034:WordPad
1029:Weather
944:OneNote
934:Notepad
857:Cortana
732:Sysprep
303:In the
144:Default
136:Default
128:WinSta0
65:station
2323:
2312:
2285:Hover!
2159:Others
2140:Travel
2135:Syskey
1918:Tinker
1876:Hearts
1804:WinUSB
1789:WinAPI
1774:Native
1585:WinUSB
1510:MinWin
1287:Server
1087:Search
999:Sports
969:Photos
959:People
837:Camera
442:
362:
2251:WinFS
2150:Write
1847:Games
1814:Games
1687:WoW64
1515:NTLDR
1505:LSASS
1438:CSRSS
1245:links
1220:exFAT
1049:Shell
1014:Store
1004:Start
994:Skype
949:Paint
924:Money
852:Clock
799:WinRE
707:Netsh
645:tools
634:Games
298:getty
292:Vundo
260:GINAs
231:user.
222:GINA.
199:GINAs
195:GINAs
2325:List
2206:HPFS
1970:Chat
1928:Apps
1830:Surf
1779:.NET
1747:DCOM
1575:WHEA
1570:USER
1560:SMSS
1350:WSUS
1330:MSMQ
1272:ReFS
1235:NTFS
1210:CDFS
1167:CLFS
1162:BITS
1062:Aero
1039:Xbox
1019:Tips
907:2022
892:Maps
887:Mail
862:Edge
814:Apps
609:APIs
440:ISBN
421:2014
413:MSDN
392:2014
384:MSDN
360:ISBN
203:Ctrl
138:and
117:GINA
2105:Pay
2005:Fax
1752:OLE
1727:COM
1710:WSH
1697:API
1458:DLL
1453:EXE
1365:PWS
1345:IIS
1305:DNS
1277:UDF
1265:EFS
1260:TxF
1230:FAT
1225:IFS
1215:DFS
804:WMI
211:Del
207:Alt
112:).
2342::
622:NT
617:9x
512:.
487:.
463:.
411:.
400:^
382:.
329:.
134:,
97:.
590:e
583:t
576:v
522:.
497:.
473:.
448:.
423:.
394:.
368:.
339:.
209:+
205:+
48:(
41:.
Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.
