R
- R handles, Locking
- race conditions, Hardware vs. Software Write Bits in Page Table Entries, Buffer Overruns, Memory Corruption, and Special Pool
- RADAR (Windows Resource Exhaustion Detection and Resolution), Process Reflection, Process Reflection
- RAID-5 volumes, Dynamic Disks, Data Redundancy and Fault Tolerance, NTFS Bad-Cluster Recovery
- RAM, I/O Priorities, Solid State Disks, Examining Memory Usage, Page Files, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and Page File Size, Commit Charge and Page File Size, Working Set Management, Why Does Windows Crash?, Buffer Overruns, Memory Corruption, and Special Pool
- commit charge, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit
- corruption, Why Does Windows Crash?
- DMA errors, Buffer Overruns, Memory Corruption, and Special Pool
- I/O priorities, I/O Priorities
- page files, Page Files, Commit Charge and Page File Size, Commit Charge and Page File Size
- usage, Examining Memory Usage
- viewing working sets, Working Set Management
- vs. flash memory, Solid State Disks
- ramdiskimagelength element, The BIOS Boot Sector and Bootmgr
- ramdiskimageoffset element, The BIOS Boot Sector and Bootmgr
- ramdisksdipath element, The BIOS Boot Sector and Bootmgr
- ramdisktftpblocksize element, The BIOS Boot Sector and Bootmgr
- ramdisktftpclientport element, The BIOS Boot Sector and Bootmgr
- ramdisktftpwindowsize element, The BIOS Boot Sector and Bootmgr
- RAMMap utility, Examining Memory Usage, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics
- random I/O, Opening Devices, ReadyBoost
- random number generation, Trusted Platform Module (TPM), The BIOS Boot Sector and Bootmgr
- randomization (block metadata), Heap Security Features
- RAW disks, The BIOS Boot Sector and Bootmgr
- RAW file system driver, Volume Mounting, Local FSDs
- raw traces and logs, Tracing and Logging
- RDBSS (Redirected Drive Buffering Subsystem), Remote FSDs
- Rdyboost.sys (ReadyBoost), ReadyBoost
- read operations, IRP Buffer Management, I/O Priority Boosts and Bumps, KMDF I/O Model, Mirrored Volumes–Mirrored Volumes, Mirrored Volumes, VSS Operation, In-Paging I/O, Clustered Page Faults–Page Files, Clustered Page Faults, Page Files, Section Objects, Unified Caching, File System Interfaces, Fast I/O, Fast I/O, File Record Numbers, Transactional APIs, Log File Service, Crash Dump Analysis
- buffered I/O, IRP Buffer Management
- cached and noncached versions, File System Interfaces
- copies of files in memory, Section Objects
- crashes, Crash Dump Analysis
- fast I/O, Fast I/O, Fast I/O
- file attributes, File Record Numbers
- file handles, Transactional APIs
- in-paging I/O, In-Paging I/O
- KMDF, KMDF I/O Model
- LFS log files, Log File Service
- mirrored volumes, Mirrored Volumes–Mirrored Volumes, Mirrored Volumes
- paging files, I/O Priority Boosts and Bumps
- prefetched pages, Clustered Page Faults–Page Files, Clustered Page Faults, Page Files
- ReadyBoost, Unified Caching
- shadow copies, VSS Operation
- read-ahead operations, Fast I/O, Intelligent Read-Ahead, Locking–Locking, Locking, Cache Manager’s Lazy Writer, Memory Manager’s Page Fault Handler, Compressing Nonsparse Data
- asynchronous with history, Intelligent Read-Ahead
- cache manager work requests, Cache Manager’s Lazy Writer, Memory Manager’s Page Fault Handler
- compressed files, Compressing Nonsparse Data
- fast I/O, Fast I/O
- oplocks, Locking–Locking, Locking
- read-commited isolation, Isolation–Isolation, Isolation, Isolation
- read-in-progress bits, Collided Page Faults
- read-in-progress PFN flag, PFN Data Structures
- read-isolation rules, Transactional APIs
- read-modify-write operations, Disk Sector Format
- read-only file attributes, File Records
- read-only memory, Page Frame Number Database, Why Does Windows Crash?, Code Overwrite and System Code Write Protection
- read-only status, Large and Small Pages, Address Windowing Extensions, Page Tables and Page Table Entries, Physical Address Extension (PAE), Page Fault Handling
- read/write access, Large and Small Pages, Address Windowing Extensions
- ReadDirectoryChanges API, Transactional APIs
- ReadDirectoryChangesW function, Process Monitor Basic vs. Advanced Modes
- ReadEncryptedFileRaw function, Backing Up Encrypted Files
- ReadFile function, Explicit File I/O, Transactional APIs
- ReadFileEx function, Completing an I/O Request
- ReadFileScatter function, Scatter/Gather I/O
- ReadProcessMemory function, Reserving and Committing Pages
- ReadyBoost, ReadyBoost, ReadyBoost, ReadyBoost, exFAT, ReadyBoot, ReadyBoot
- ReadyBoot, ReadyBoot–ReadyBoot, ReadyBoot, ReadyBoot
- ReadyDrive, ReadyBoost–Unified Caching, Unified Caching
- real boot mode, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr
- reason callbacks, The Blue Screen
- rebalancer, Components, Tracing and Logging, Page Priority and Rebalancing, Page Priority and Rebalancing
- reciprocals, Initializing the Kernel and Executive Subsystems
- recognizing volumes, File System Driver Architecture
- record offsets (LSNs), Log Sequence Numbers
- recording utility values, Performance Check
- records, NTFS file, File Record Numbers–File Names, File Records, File Records, File Names
- recoverable file systems, Key Features of the Cache Manager, Recoverable File System Support, Design, Design
- recovery, Striped Volumes, RAID-5 Volumes, Recoverable File System Support, NTFS Design Goals and Features, Recoverability, Master File Table, Logging Implementation, Recovery Implementation, NTFS Recovery Support, NTFS Recovery Support, Metadata Logging, Log File Service, Log Record Types, Log Record Types, Log Record Types, Recovery–NTFS Bad-Cluster Recovery, Recovery–NTFS Bad-Cluster Recovery, Recovery, Recovery, Analysis Pass–Undo Pass, Redo Pass, Redo Pass, Redo Pass, Redo Pass, Redo Pass, Undo Pass–NTFS Bad-Cluster Recovery, Undo Pass, Undo Pass, Undo Pass, Undo Pass, Undo Pass, Undo Pass, Undo Pass, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, Self-Healing, Self-Healing
- analysis pass, Analysis Pass–Undo Pass, Redo Pass, Undo Pass
- disk recovery, Recovery–NTFS Bad-Cluster Recovery, Recovery, Redo Pass, Undo Pass, Undo Pass, NTFS Bad-Cluster Recovery
- implementation, Recovery Implementation
- log file passes, Recovery–NTFS Bad-Cluster Recovery, Redo Pass, Undo Pass, Undo Pass, NTFS Bad-Cluster Recovery
- log files (, Recoverable File System Support, Master File Table
- NTFS recoverability, NTFS Design Goals and Features, Recoverability, NTFS Recovery Support, NTFS Recovery Support, Metadata Logging, Log File Service, Log Record Types, Log Record Types, Log Record Types, Recovery, Redo Pass, Undo Pass, Undo Pass, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, Self-Healing
- RAID-5 recoverability, RAID-5 Volumes
- redo pass, Redo Pass
- self-healing, Self-Healing
- striped volumes, Striped Volumes
- TxF process, Logging Implementation
- undo pass, Undo Pass–NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery
- recovery agents, Encrypting a File for the First Time, Encrypting a File for the First Time, Encrypting File Data
- recovery keys, Trusted Platform Module (TPM), BitLocker Key Recovery, BitLocker To Go
- recovery partitions, Windows Recovery Environment (WinRE)
- recovery sequence (BCD), The BIOS Boot Sector and Bootmgr
- recoveryenabled element, The BIOS Boot Sector and Bootmgr
- recoverysequence element, The BIOS Boot Sector and Bootmgr
- recursive callouts, Kernel Stacks
- recursive faults, When There Is No Crash Dump
- redirectors, Remote FSDs, NTFS File System Driver
- redo entries, Log Record Types, Log Record Types
- redo pass, Recovery Implementation, Log File Service, Analysis Pass
- redo records, Logging Implementation
- redundant volumes, NTFS Bad-Cluster Recovery
- reference counts, Modified Page Writer, PFN Data Structures, PFN Data Structures
- referenced directory traces, Logical Prefetcher
- referenced file traces, Logical Prefetcher
- Regedit utility, Post–Splash Screen Crash or Hang
- regions, FAT12, FAT16, and FAT32, Log Blocks
- CLFS, Log Blocks
- FAT, FAT12, FAT16, and FAT32
- registered device driver bugcheck callbacks, When There Is No Crash Dump
- registered drivers, Layered Drivers, Layered Drivers, Volume Mounting, Local FSDs, Locking
- registers, Synchronization
- registry, I/O System Components, KMDF Data Model, Driver Loading, Initialization, and Installation–The Start Value, The Start Value, The Start Value, Device Enumeration, Device Stacks, Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loading, Driver Installation, Thresholds and Policy Settings–Thresholds and Policy Settings, Thresholds and Policy Settings, Thresholds and Policy Settings, Winload, Partition Manager, The Mount Manager, Virtual Disk Service, Large and Small Pages, x86 Address Space Layouts, System Page Table Entries, System Virtual Address Space Quotas, Page Files–Page Files, Page Files, Page Files, Driver Verifier, Logical Prefetcher, Memory Notification Events, Cache Virtual Size, Troubleshooting File System Problems, Self-Healing, Smss, Csrss, and Wininit, Last Known Good, Last Known Good, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Driver Loading in Safe Mode, Troubleshooting Crashes, Crash Dump Files, Crash Dump Files, Code Overwrite and System Code Write Protection
- boot process, Winload
- cache virtual size, Cache Virtual Size
- complete crash dump enabling, Crash Dump Files
- deciphering driver names, Troubleshooting Crashes
- device driver identification and loading, Device Stacks, Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loading, Driver Installation, Last Known Good, Driver Loading in Safe Mode, Driver Loading in Safe Mode
- Driver Verifier values, Driver Verifier
- enumeration keys, Device Enumeration, Device Stack Driver Loading
- forcing high memory addresses, x86 Address Space Layouts
- high and low memory values, Memory Notification Events
- I/O system, I/O System Components
- initializing, Smss, Csrss, and Wininit
- KMDF object keys, KMDF Data Model
- large page size key, Large and Small Pages
- last known good settings, Last Known Good
- lists of page files, Page Files–Page Files, Page Files, Page Files
- loading drivers and services, Driver Loading, Initialization, and Installation–The Start Value, The Start Value, The Start Value
- Memory.dmp file options, Crash Dump Files
- mounted device letters, The Mount Manager
- partitions, Partition Manager
- per-user quotas, System Virtual Address Space Quotas
- prefetch settings, Logical Prefetcher
- processor thresholds and policy settings, Thresholds and Policy Settings–Thresholds and Policy Settings, Thresholds and Policy Settings, Thresholds and Policy Settings
- self-healing entries, Self-Healing
- service configuration keys, Driver Loading in Safe Mode
- system code write protection, Code Overwrite and System Code Write Protection
- tracking PTEs, System Page Table Entries
- troubleshooting issues, Troubleshooting File System Problems
- VDS information, Virtual Disk Service
- registry hive files, BitLocker Drive Encryption–BitLocker To Go, BitLocker To Go, Smss, Csrss, and Wininit, System Hive Corruption
- encryption, BitLocker Drive Encryption–BitLocker To Go, BitLocker To Go
- loading user set, Smss, Csrss, and Wininit
- SYSTEM hive, System Hive Corruption
- regular queues (cache management), System Threads
- relative paths, Symbolic (Soft) Links and Junctions
- releasing address space, Reserving and Committing Pages
- relocatephysical element, The BIOS Boot Sector and Bootmgr
- remapping bad sectors, NTFS Bad-Cluster Recovery
- remote boot debugging, The BIOS Boot Sector and Bootmgr
- remote disks, booting from, Booting from iSCSI
- remote file replication services, File System Filter Drivers
- remote FSDs, Remote FSDs–File System Operation, Remote FSDs, File System Operation
- removable devices, The Mount Manager, Volume Mounting
- removal requested PFN flag, PFN Data Structures
- remove command, Driver Support for Plug and Play–The Start Value, The Start Value
- remove/eject device utility, Driver Support for Plug and Play
- removememory element, The BIOS Boot Sector and Bootmgr
- RemoveUsersFromEncryptedFile function, Backing Up Encrypted Files
- rename APIs, Transactional APIs
- renaming files, Sparse Files, Smss, Csrss, and Wininit
- repair installations, System File Corruption
- repairing, Windows Recovery Environment (WinRE)–MBR Corruption, Windows Recovery Environment (WinRE), MBR Corruption
- installation, Windows Recovery Environment (WinRE)–MBR Corruption, Windows Recovery Environment (WinRE), MBR Corruption
- reparse data, Symbolic (Soft) Links and Junctions
- reparse point files (, Master File Table, Reparse Points
- reparse points, Mount Points, Symbolic (Soft) Links and Junctions, File Records, The Change Journal File, Reparse Points
- reparse tags, Symbolic (Soft) Links and Junctions, Reparse Points
- replacement policies, Placement Policy–Working Set Management, Placement Policy, Working Set Management
- replication agents, Common Log File System
- reporting errors, Windows Error Reporting, Windows Error Reporting
- repurpose counts, Page Priority
- reserve cache, Examining Memory Usage
- reserved pages, Reserving and Committing Pages, Reserving and Committing Pages, Reserving and Committing Pages, Allocation Granularity, Allocation Granularity, Pageheap
- reserving and committing pages, Reserving and Committing Pages–Reserving and Committing Pages, Reserving and Committing Pages, Reserving and Committing Pages, Reserving and Committing Pages
- resident pages, faults, Page Fault Handling
- resident shared pages, Reserving and Committing Pages
- resident size of paged pool, Pool Sizes
- resolution (BCD elements), The BIOS Boot Sector and Bootmgr
- resolution settings (video), Smss, Csrss, and Wininit
- resource allocation (PnP), The Plug and Play (PnP) Manager
- resource arbitration (PnP), The Plug and Play (PnP) Manager, Driver Support for Plug and Play
- resource lists (KMDF), KMDF Data Model
- resource manager objects, Initializing the Kernel and Executive Subsystems
- resource managers, Resource Managers, Resource Managers, Resource Managers, Recovery Implementation
- resource range lists (KMDF), KMDF Data Model
- resource requirements lists (KMDF), KMDF Data Model
- restart area (LFS), Log File Service, Log File Service
- restart LSNs, Log Sequence Numbers, Recovery Implementation
- restart records, Logging Implementation
- restore points, Previous Versions and System Restore, Windows Recovery Environment (WinRE), System File Corruption, System File Corruption, Post–Splash Screen Crash or Hang
- restoring previous versions, Previous Versions and System Restore–Previous Versions and System Restore, Previous Versions and System Restore, Previous Versions and System Restore, Previous Versions and System Restore
- restrictapiccluster element, The BIOS Boot Sector and Bootmgr
- resumeobject element, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr
- Retrieve API, KMDF Data Model
- RH (Read-Handle) handles, Locking
- Rivest-Shamir-Adleman (RSA), Encrypting File System Security
- RMs (resource managers), Resource Managers
- robust performance, Robust Performance–Robust Performance, Robust Performance, Robust Performance
- robusted pages, Robust Performance–Robust Performance, Robust Performance, Robust Performance
- rocket model (PPM), Increase/Decrease Actions, Performance Check
- rollback operations, Recoverability
- Rom PFN flag, PFN Data Structures
- Rom PFN state, Page Frame Number Database
- Root bus driver, Device Enumeration
- root directories, FAT12, FAT16, and FAT32, Encryption, Master File Table
- rotate VADs, Rotate VADs
- rotating magnetic disks, Disk Devices–NAND-Type Flash Memory, Solid State Disks, NAND-Type Flash Memory
- rotational latency, ReadyBoost
- RSA (Rivest-Shamir-Adleman), Encrypting File Data
- Rtl interfaces, Heap Manager
- RtlCloneUserProcess function, Process Reflection
- RtlCreateProcessReflection function, Process Reflection
- RtlGenerate8dot3Name function, File Names
- Run DLL Component (Rundll32.exe), Driver Installation, Logical Prefetcher
- run-time environments, User-Mode Driver Framework (UMDF), User-Mode Driver Framework (UMDF)
- runs, Master File Table, Master File Table, Resident and Nonresident Attributes, Resident and Nonresident Attributes, Resident and Nonresident Attributes, Compressing Sparse Data, Compressing Sparse Data, Compressing Nonsparse Data
- RW (Read-Write) handles, Locking
- RWH handles, Locking