Errata

URL for information on use of the symbol server incorrect On page 11, the last sentence of the second paragraph reads: "For more information on configuring use of the symbol server, see http://www.microsoft.com/whdc/ddk/debugging/symbols.mspx." It should read: "For more information on configuring use of the symbol server, see http://www.microsoft.com/whdc/devtools/debugging/debugstart.mspx."

User-Mode Time Should Be CPU Usage
On page 20, there is an incorrect reference to user-mode time.Change:"will show user-mode time in green"To:"will show total CPU usage in green"

Incorrect Windows Versions On page 21, there is an error regarding the list of Windows versions. Change:" Windows 2000 Server and Windows 2003 Standard Edition support two simultaneous remote connections. (This is to facilitate remote management-for example, use of management tools that require being logged in to the machine being managed.) Windows 2000 Advanced Server, Datacenter Server, Windows Server 2003 Enterprise Edition, and Datacenter Edition can support more than two sessions if appropriately licensed and configured as a terminal server." To: "The Windows 2000 Server and Windows Server 2003 editions support two simultaneous remote connections. (This is to facilitate remote management-for example, use of management tools that require being logged in to the machine being managed.) Windows 2000 Server, Advanced Server, Datacenter Server, Windows Server 2003 Standard Edition, Enterprise Edition, and Datacenter Edition can support more than two sessions if appropriately licensed and configured as a terminal server. "

URL for information on use of the symbol server incorrect
On page 29, the first sentence at the top of the page reads:



"For detailed instructions on how to use the symbol server, see the Debugging Tools help file or the Web page www.microsoft.com/whdc/ddk/debugging/symbols.mspx."



It should read:



"For detailed instructions on how to use the symbol server, see the Debugging Tools help file or the Web page http://www.microsoft.com/whdc/devtools/debugging/debugstart.mspx."

URL for Debugging Tools download incorrect On page 29, the second sentence under the "Windows Debugging Tools" heading reads: "You can find the latest version at www.microsoft.com/whdc/ddk/debugging." It should read: "You can find the latest 32-bit version at http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx and the latest 64-bit version at http://www.microsoft.com/whdc/devtools/debugging/install64bit.mspx."

Incorrect statement regarding OS/2 support in Windows 2000
On page 38, the third sentence of the final bullet point reads:"OS/2 was dropped as of Windows 2000."It should read:"However, OS/2 last shipped with Windows 2000."

Correction To Key On page 42,Change:"HKLM/SYSTEM/CurrentControlSetControlSessionManagerLicensesProcessors" To "HKLMSYSTEMCurrentControlSetControlSession ManagerLicensedProcessors "Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

Errors in the Windows XP Professional and Windows Server 2003 Datacenter Edition rows of Table 2-4
On page 48, the Windows XP Professional and Windows Server 2003 Professional Edition rows read:Windows XP

Professional24 GB216 GB16 GBWindows

Server 2003

Datacenter

Edition32128 GB on

x64; 64 GB on

x8664512 GB

(1024 GB in

SP1)Not availableThey should read:Windows XP

Professional24 GB2Not Available128 GBWindows

Server 2003

Datacenter

Edition3264 GB641024 GB1024 GB

Incorrect figure referenced On page 51, the second sentence of the final paragraph reads:"Figure 2-3 is a more detailed and complete diagram of the core Windows system architecture and components than was shown earlier in the chapter (in Figure 2-2)."It should read:"Figure 2-3 is a more detailed and complete diagram of the core Windows system architecture and components than was shown earlier in the chapter (in Figure 2-1)."

Incorrect statement regarding OS/2 support in Windows 2000
On page 53, the second sentence reads:"As stated earlier, the OS/2 subsystem was removed in Windows 2000."It should read:"As stated earlier, the OS/2 subsystem last shipped with Windows 2000."

Incorrect instructions for listing drivers On page 72, the first two sentences read:"You can list the installed drivers by running Computer Management. (From the Start menu, select Programs, Administrative Tools, and then Computer Management; or from Control Panel, open Administrative Tools and select Computer Management.) From within Computer Management, expand System Information and then Software Environment, and open Drivers."They should read:"You can list the installed drivers by running Msinfo32. (Click Start->Run, then type Msinfo32.) Then expand System Information and then Software Environment, and open Drivers."

"Local Security Authority" referred to as "Local security authentication"
On page 74, the component cell on the ninth line of table 2-7 reads:"Local security authentication "It should read:"Local Security Authority"

Error in keyboard ISR interrupt number On page 88, the last sentence in the EXPERIMENT box reads:"On the system used to provide the output for this experiment, the keyboard device driver’s (I8042prt.sys) keyboard ISR is at interrupt number 0x3C and several devices— including the video adapter, PCMCIA bus, USB and IEEE 1394 ports, and network adapter—share interrupt 0x3B."It should read:"On the system used to provide the output for this experiment, the keyboard device driver’s (I8042prt.sys) keyboard ISR is at interrupt number 0x31 and several devices— including the video adapter, PCMCIA bus, USB and IEEE 1394 ports, and network adapter—share interrupt 0x3B."

Byte and Second
On page 139, "8-bit aligned" should be "8-byte aligned", and "The secong flag" should be "The second flag"Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

Incorrect Folder Listed On page 148, change:"session's local Devices directory"To:"session's local DosDevices directory"

All Instances Of "WindowsSystem32Syswow64" Should Be "WindowsSyswow64"
On pages 179 & 180, change all three instances of:"WindowsSystem32Syswow64"To:"WindowsSyswow64"Note The above correction has been incorporated into the 2nd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

64 Should Be 32 On page 181,Change: "KEY_WOW64_32KEY - explicitly opens a 64-bit key from either a 32-bit or 64-bit application"To:"KEY_WOW64_32KEY - explicitly opens a 32-bit key from either a 32-bit or 64-bit application"Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

Correction to sentence describing table 4-9 regarding local service account




On page 220, in the section headed "The Local Service Account," the second sentence reads:



"Table 4-9 shows that it has the same privileges as the local service account, and Table 4-8 shows that it belongs to the same groups with the exception that it belongs to the Network Service group instead of the Local Service group."



It should read:



"Table 4-9 shows that it has the same privileges as the network service account, and Table 4-8 shows that it belongs to the same groups with the exception that it belongs to the Local Service group instead of the Network Service group."

Add "Applies to 32-bit systems only" On page 257: Add to the end of the text for the /3GB switch: "(applies to 32-bit systems only)", and Add to the end of the text for the /USERVA switch: "(applies to 32-bit systems only)." Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

SeBackup Should Be SeBackupPrivilege
On pages 520 and 521, in Table 8-5, Change: "SeBackup"To: "SeBackupPrivilege"Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

"saRegisterLogonProcess" Should Be "LsaRegisterLogonProcess" On page 524, change:"saRegisterLogonProcess"To:"LsaRegisterLogonProcess"Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

"System Working Sat" Should Be "System Working Set"
On page 667, in Figure 11-6, change:"System Working Sat"To:"System Working Set"

Widows 32 should be Windows On page 680, in the top paragraph, and on page 682, in the fourth paragraph, replace "Windows32" with "Windows".

Corrections To Cluster Information
On page 691, change:"...FAT12 limits a partition to storing a maximum of 212..."To:"...FAT12 limits a partition to storing a maximum of 2^12..."Also change:"...can address 216..."To:"...can address 2^16..."

Correction To Figure 12-20 On page 729, please remove all "2000" references in Figure 12-20.Note The above correction has been incorporated into the 3rd printing of the book. For information on how to locate the print number of the book, see the note at the end of the article.

"Internet Connection Firewall" Should Be "Windows Firewall" In Chapter 13, change all instances of "Internet Connection Firewall" and ICF to "Windows Firewall".

Error In Figure 13-24
Figure 13-24 on page 841 contains a typographical error.Change:"ese.dll"To:"esent.dll"

Correction To Operating System
On page 863, in the second paragraph under "Code Overwrite and System Code Write Protection, Change:"One of two things will happen at this point: if your system is running Windows XP and has 127 MB or less of physical memory or is running Windows Server 2003 and has 255 MB or less of physical memory, you'll get a crash for which an analysis points at Myfault.sys."To:"One of two things will happen at this point: if your system is running Windows 2000 and has 127 MB or less of physical memory or is running Windows Server 2003 or Windows XP and has 255 MB or less of physical memory, you'll get a crash for which an analysis points at Myfault.sys."

Microsoft Press is committed to providing informative and accurate

books. All comments and corrections listed above are ready for

inclusion in future printings of this book. If you have a later printing

of this book, it may already contain most or all of the above corrections.The print number of the book is located on the copyright page in the form of a string of numbers. For example: "2 3 4 5 6 7 8 0 QWT 9 8 76 5 4". The first number in the string is the the print number. In this example, the print number is 2.