Microsoft Windows Internals 4th Edition Comments And Corrections

This article contains comments, corrections, and information about known errors relating to the Microsoft Press book Microsoft Windows Internals 4th Edition, 0-7356-1917-4.

The following topics are covered:

• Page 11: URL for information on use of the symbol server incorrect
• Page 20: User-Mode Time Should Be CPU Usage
• Page 21: Incorrect Windows Versions
• Page 29: URL for information on use of the symbol server incorrect
• Page 29: URL for Debugging Tools download incorrect
• Page 38: Incorrect statement regarding OS/2 support in Windows 2000
• Page 42: Correction To Key
• Page 48: Errors in the Windows XP Professional and Windows Server 2003 Datacenter Edition rows of Table 2-4
• Page 51: Incorrect figure referenced
• Page 53: Incorrect statement regarding OS/2 support in Windows 2000
• Page 72: Incorrect instructions for listing drivers
• Page 74: "Local Security Authority" referred to as "Local security authentication"
• Page 88: Error in keyboard ISR interrupt number
• Page 139: Byte and Second
• Page 148: Incorrect Folder Listed
• Pages 179 & 180: All Instances Of "\Windows\System32\Syswow64" Should Be "\Windows\Syswow64"
• Page 181: 64 Should Be 32
• Page 220: Correction to sentence describing table 4-9 regarding local service account
• Page 257: Add "Applies to 32-bit systems only"
• Page 520: SeBackup Should Be SeBackupPrivilege
• Page 524: "saRegisterLogonProcess" Should Be "LsaRegisterLogonProcess"
• Page 667: "System Working Sat" Should Be "System Working Set"
• Pages 680 and 682: Windows32 should be Windows
• Page 691: Corrections To Cluster Information
• Page 729: Correction To Figure 12-20
• Page 787: "Internet Connection Firewall" Should Be "Windows Firewall"
• Page 841: Error In Figure 13-24
• Page 863: Correction To Operating System

Page 11: URL for information on use of the symbol server incorrect

On page 11, the last sentence of the second paragraph reads:

"For more information on configuring use of the symbol server, see http://www.microsoft.com/whdc/ddk/debugging/symbols.mspx."

It should read:

"For more information on configuring use of the symbol server, see http://www.microsoft.com/whdc/devtools/debugging/debugstart.mspx."

Page 20: User-Mode Time Should Be CPU Usage

On page 20, there is an incorrect reference to user-mode time.

Change:
"will show user-mode time in green"

To:
"will show total CPU usage in green"

Page 21: Incorrect Windows Versions

On page 21, there is an error regarding the list of Windows versions.

Change:
" Windows 2000 Server and Windows 2003 Standard Edition support two simultaneous remote connections. (This is to facilitate remote management-for example, use of management tools that require being logged in to the machine being managed.) Windows 2000 Advanced Server, Datacenter Server, Windows Server 2003 Enterprise Edition, and Datacenter Edition can support more than two sessions if appropriately licensed and configured as a terminal server."

To:
"The Windows 2000 Server and Windows Server 2003 editions support two simultaneous remote connections. (This is to facilitate remote management-for example, use of management tools that require being logged in to the machine being managed.) Windows 2000 Server, Advanced Server, Datacenter Server, Windows Server 2003 Standard Edition, Enterprise Edition, and Datacenter Edition can support more than two sessions if appropriately licensed and configured as a terminal server. "

Page 29: URL for information on use of the symbol server incorrect

On page 29, the first sentence at the top of the page reads:

"For detailed instructions on how to use the symbol server, see the Debugging Tools help file or the Web page www.microsoft.com/whdc/ddk/debugging/symbols.mspx."

It should read:

"For detailed instructions on how to use the symbol server, see the Debugging Tools help file or the Web page http://www.microsoft.com/whdc/devtools/debugging/debugstart.mspx."

Page 29: URL for Debugging Tools download incorrect

On page 29, the second sentence under the "Windows Debugging Tools" heading reads:

"You can find the latest version at www.microsoft.com/whdc/ddk/debugging."

It should read:

"You can find the latest 32-bit version at http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx and the latest 64-bit version at http://www.microsoft.com/whdc/devtools/debugging/install64bit.mspx."

Page 38: Incorrect statement regarding OS/2 support in Windows 2000

On page 38, the third sentence of the final bullet point reads:

"OS/2 was dropped as of Windows 2000."

It should read:

"However, OS/2 last shipped with Windows 2000."

Page 42: Correction To Key

On page 42,

Change:
"HKLM/SYSTEM/CurrentControlSet\Control\Session\Manager\LicensesProcessors"

To
"HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\LicensedProcessors "
Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

Page 48: Errors in the Windows XP Professional and Windows Server 2003 Datacenter Edition rows of Table 2-4

On page 48, the Windows XP Professional and Windows Server 2003 Professional Edition rows read:



They should read:

Page 51: Incorrect figure referenced

On page 51, the second sentence of the final paragraph reads:

"Figure 2-3 is a more detailed and complete diagram of the core Windows system architecture and components than was shown earlier in the chapter (in Figure 2-2)."

It should read:
"Figure 2-3 is a more detailed and complete diagram of the core Windows system architecture and components than was shown earlier in the chapter (in Figure 2-1)."

Page 53: Incorrect statement regarding OS/2 support in Windows 2000

On page 53, the second sentence reads:

"As stated earlier, the OS/2 subsystem was removed in Windows 2000."

It should read:

"As stated earlier, the OS/2 subsystem last shipped with Windows 2000."

Page 72: Incorrect instructions for listing drivers

On page 72, the first two sentences read:

"You can list the installed drivers by running Computer Management. (From the Start menu, select Programs, Administrative Tools, and then Computer Management; or from Control Panel, open Administrative Tools and select Computer Management.) From within Computer Management, expand System Information and then Software Environment, and open Drivers."

They should read:

"You can list the installed drivers by running Msinfo32. (Click Start->Run, then type Msinfo32.) Then expand System Information and then Software Environment, and open Drivers."

Page 74: "Local Security Authority" referred to as "Local security authentication"

On page 74, the component cell on the ninth line of table 2-7 reads:

"Local security authentication "

It should read:

"Local Security Authority"

Page 88: Error in keyboard ISR interrupt number

On page 88, the last sentence in the EXPERIMENT box reads:

"On the system used to provide the output for this experiment, the keyboard device driver’s (I8042prt.sys) keyboard ISR is at interrupt number 0x3C and several devices— including the video adapter, PCMCIA bus, USB and IEEE 1394 ports, and network adapter—share interrupt 0x3B."

It should read:

"On the system used to provide the output for this experiment, the keyboard device driver’s (I8042prt.sys) keyboard ISR is at interrupt number 0x31 and several devices— including the video adapter, PCMCIA bus, USB and IEEE 1394 ports, and network adapter—share interrupt 0x3B."

Page 139: Byte and Second

On page 139, "8-bit aligned" should be "8-byte aligned", and "The secong flag" should be "The second flag"
Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

Page 148: Incorrect Folder Listed

On page 148, change:

"session's local \Devices directory"

To:
"session's local \DosDevices directory"

Pages 179 & 180: All Instances Of "\Windows\System32\Syswow64" Should Be "\Windows\Syswow64"

On pages 179 & 180, change all three instances of:
"\Windows\System32\Syswow64"

To:
"\Windows\Syswow64"
Note The above correction has been incorporated into the 2nd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

Page 181: 64 Should Be 32

On page 181,

Change:
"KEY_WOW64_32KEY - explicitly opens a 64-bit key from either a 32-bit or 64-bit application"

To:
"KEY_WOW64_32KEY - explicitly opens a 32-bit key from either a 32-bit or 64-bit application"
Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

Page 220: Correction to sentence describing table 4-9 regarding local service account

On page 220, in the section headed "The Local Service Account," the second sentence reads:

"Table 4-9 shows that it has the same privileges as the local service account, and Table 4-8 shows that it belongs to the same groups with the exception that it belongs to the Network Service group instead of the Local Service group."

It should read:

"Table 4-9 shows that it has the same privileges as the network service account, and Table 4-8 shows that it belongs to the same groups with the exception that it belongs to the Local Service group instead of the Network Service group."

Page 257: Add "Applies to 32-bit systems only"

On page 257: Add to the end of the text for the /3GB switch: "(applies to 32-bit systems only)", and Add to the end of the text for the /USERVA switch: "(applies to 32-bit systems only)."
Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

Page 520: SeBackup Should Be SeBackupPrivilege

On pages 520 and 521, in Table 8-5,

Change:
"SeBackup"

To:
"SeBackupPrivilege"
Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

Page 524: "saRegisterLogonProcess" Should Be "LsaRegisterLogonProcess"

On page 524, change:
"saRegisterLogonProcess"

To:
"LsaRegisterLogonProcess"
Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

Page 667: "System Working Sat" Should Be "System Working Set"

On page 667, in Figure 11-6, change:
"System Working Sat"

To:
"System Working Set"

Pages 680 and 682: Widows 32 should be Windows

On page 680, in the top paragraph, and on page 682, in the fourth paragraph, replace "Windows32" with "Windows".

Page 691: Corrections To Cluster Information

On page 691, change:

"...FAT12 limits a partition to storing a maximum of 212..."

To:
"...FAT12 limits a partition to storing a maximum of 2^12..."

Also change:
"...can address 216..."

To:
"...can address 2^16..."

Page 729: Correction To Figure 12-20

On page 729, please remove all "2000" references in Figure 12-20.
Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

Page 841: Error In Figure 13-24

Figure 13-24 on page 841 contains a typographical error.

Change:
"ese.dll"

To:
"esent.dll"

Page 787: "Internet Connection Firewall" Should Be "Windows Firewall"

In Chapter 13, change all instances of "Internet Connection Firewall" and ICF to "Windows Firewall".

Page 863: Correction To Operating System

On page 863, in the second paragraph under "Code Overwrite and System Code Write Protection,

Change:
"One of two things will happen at this point: if your system is running Windows XP and has 127 MB or less of physical memory or is running Windows Server 2003 and has 255 MB or less of physical memory, you'll get a crash for which an analysis points at Myfault.sys."

To:
"One of two things will happen at this point: if your system is running Windows 2000 and has 127 MB or less of physical memory or is running Windows Server 2003 or Windows XP and has 255 MB or less of physical memory, you'll get a crash for which an analysis points at Myfault.sys."

Microsoft Press is committed to providing informative and accurate books. All comments and corrections listed above are ready for inclusion in future printings of this book. If you have a later printing of this book, it may already contain most or all of the above corrections.

The print number of the book is located on the copyright page in the form of a string of numbers. For example: "2 3 4 5 6 7 8 0 QWT 9 8 76 5 4". The first number in the string is the the print number. In this example, the print number is 2.