Booting process of Windows
The booting process of Microsoft Windows varies between different releases.
DOS-based Windows
Windows 1.x/2.x
In Windows versions 1.01 to Windows 2.11, the system was loaded when WIN.COM
was executed. It then loaded WIN100.BIN
or WIN200.BIN
and WIN100.OVL
or WIN200.OVL
, along with the configuration settings file WIN.INI
. The default shell is the MS-DOS Executive.
The modules GDI.EXE
, KERNEL.EXE
and USER.EXE
, fonts, and the various device drivers (such as COMM.DRV
, MOUSE.DRV
, KEYBOARD.DRV
) are incorporated in WIN100.BIN
/WIN200.BIN
and WIN100.OVL
/WIN200.OVL
.
Windows 3.x/9x
In Windows 3.x and 95/98/ME, the boot loader phase is handled by MS-DOS. During the boot phase, CONFIG.SYS
and AUTOEXEC.BAT
are executed, along with the configuration settings files WIN.INI
and SYSTEM.INI
. Virtual device drivers are also loaded in the startup process: they are most commonly loaded from the registry (HKLM\System\CurrentControlSet\Services\VxD
) or from the SYSTEM.INI
file.
MS-DOS starts WIN.COM
. In Windows 3.x, the WIN.COM
starts KRNL286.EXE
(standard mode) or KRNL386.EXE
(386 enhanced mode). In Windows 9x, the WIN.COM
starts VMM32.VXD
.
When all system configuration files and device drivers have been loaded, the 16-bit modules, KRNL386.EXE
, GDI.EXE
, and USER.EXE
, are loaded, then the 32-bit DLLs (KERNEL32.DLL
, GDI32.DLL
, and USER32.DLL
) are loaded. The 32-bit VxD message server (MSGSRV32) starts MPREXE.EXE
, which is responsible for loading the network logon client (such as Client for Microsoft Networks, Microsoft Family Logon or Windows Logon).
When a user is logging on to Windows, the startup sound is played, the shell (usually EXPLORER.EXE
) is loaded from the [boot] section of the SYSTEM.INI
file, and startup items are loaded.
In all versions of Windows 9x except ME, it is also possible to load Windows by booting to a DOS prompt and typing "win". There are some command line switches that can be used with the WIN command: with the /D
switch, Windows boots to safe mode, and with the /D:n
switch, Windows boots to safe mode with networking. The latter switch only works properly with Windows 95.[1] In Windows 3.1, additional options are available, such as /3
, which starts Windows in 386 enhanced mode, and /S
, which starts Windows in standard mode[2]
A startup sound was first added in Windows 3.0 after installing the Multimedia Extensions (MME),[3] but not enabled by default until Windows 3.1.
Windows NT
In Windows NT, the booting process is initiated by NTLDR in versions before Vista and the Windows Boot Manager in Vista and later.[4] The boot loader is responsible for accessing the file system on the boot drive, starting ntoskrnl.exe, and loading boot-time device drivers into memory. Once all the boot and system drivers have been loaded, the kernel starts the session manager, which begins the login process. After the user has successfully logged into the machine, winlogon applies User and Computer Group Policy setting and runs startup programs declared in the Windows Registry and in "Startup" folders.[5]
In Windows 95/98/ME, it was also possible to run a program before the user logs on by using RunServicesOnce or RunServices keys. In Windows NT, this has been replaced by the services.exe program, which is able to load a set of system services before a user logs on. Additionally, in English-language versions of Windows, the startup folder was called "StartUp" instead of "Startup" in Win9x.
Due to the minimally restricted environment of these operating systems, any program can add itself to the Startup registry key or system folder. This method is frequently used by malware.
See also
References
- ^ "Unable to Start Windows 98 in Safe Mode with Network Support". Support. Microsoft. January 23, 2007. Archived from the original on October 14, 2007.
- ^ "Windows 3.1 WIN.COM Command Switches". Support. Microsoft. October 13, 2003. Archived from the original on April 23, 2007.
- ^ Windows 3.0 MME... actually has a startup sound (and more!), archived from the original on 2021-12-13, retrieved 2021-06-22
- ^ "Boot Sequence of Windows Multi-Boot - Multibooters.com". www.multibooters.com. Archived from the original on 2020-02-19. Retrieved 2020-11-19.
- ^ "Troubleshooting the Startup Process". Windows XP Resource Kit. Microsoft Technet. November 3, 2005. Archived from the original on October 26, 2011. Retrieved October 24, 2011.
- v
- t
- e
tools
- App Installer
- Command Prompt
- Control Panel
- Device Manager
- Disk Cleanup
- Drive Optimizer
- Driver Verifier
- DirectX Diagnostic Tool
- Event Viewer
- IExpress
- Management Console
- Netsh
- Performance Monitor
- Recovery Console
- Resource Monitor
- Settings
- Sysprep
- System Configuration
- System File Checker
- System Information
- System Policy Editor
- System Restore
- Task Manager
- Windows Error Reporting
- Windows Ink
- Windows Installer
- PowerShell
- Windows Update
- WinRE
- WMI
- 3D Viewer
- Clock
- Calculator
- Calendar
- Camera
- Character Map
- Clipchamp
- Cortana
- Edge
- Fax and Scan
- Feedback Hub
- Get Help
- Magnifier
- Maps
- Messaging
- Media Player
- 2022
- Movies & TV
- Mobility Center
- Money
- Narrator
- Notepad
- OneDrive
- OneNote
- Paint
- Paint 3D
- People
- Phone Link
- Photos
- Quick Assist
- Snipping Tool
- Speech Recognition
- Skype
- Sports
- Start
- Sticky Notes
- Store
- Tips
- Voice Recorder
- Weather
- WordPad
- Xbox
- Active Directory
- Domains
- DNS
- Group Policy
- Roaming user profiles
- Folder redirection
- Distributed Transaction Coordinator
- MSMQ
- Windows Media Services
- Active DRM Services
- IIS
- WSUS
- SharePoint
- Network Access Protection
- PWS
- DFS Replication
- Print Services for UNIX
- Remote Desktop Services
- Remote Differential Compression
- Remote Installation Services
- Windows Deployment Services
- System Resource Manager
- Hyper-V
- Server Core
- Boot Manager
- Console
- CSRSS
- Desktop Window Manager
- Portable Executable
- Enhanced Write Filter
- Graphics Device Interface
- Hardware Abstraction Layer
- I/O request packet
- Imaging Format
- Kernel Transaction Manager
- Library files
- Logical Disk Manager
- LSASS
- MinWin
- NTLDR
- Ntoskrnl.exe
- Object Manager
- Open XML Paper Specification
- Registry
- Resource Protection
- Security Account Manager
- Server Message Block
- Shadow Copy
- SMSS
- System Idle Process
- USER
- WHEA
- Winlogon
- WinUSB
- Solitaire Collection
- Surf
Microsoft Store
- DVD Player
- File Manager
- Hover!
- Mahjong
- Minesweeper
- Category
- List