Prakash27

 Profile 

• May 30th, 2013

 

Boot sequence for Windows NT, 2000, XP and 2003:

BIOS: performs Power On Self Test (POST)
BIOS: loads MBR (Master Boot Record) from the boot device
MBR: contains a small amount of code that reads the partition table and loads the boot sector from the system volume
BOOT SECTOR: reads the root directory of the system volume at loads NTLDR
NTLDR: reads BOOT.INI from the system volume to determine the boot drive.loads and executes NTDETECT.COM from the system volume to perform BIOS hardware detection
loads NTOSKRNL.EXE, HAL.DLL, BOOTVID.DLL from the boot (Windows) volume
NTLDR: loads WINDOWSSYSTEM32CONFIGSYSTEM which becomes the system hive HKEY_LOCAL_MACHINESystem
NTLDR: loads drivers flagged as "boot" defined in the system hive, then passes control to NTOSKRNL.EXE
NTOSKRNL.EXE: creates the Session Manager process (SMSS.EXE)
SMSS.EXE: starts WINLOGON.EXE
WINLOGON.EXE: starts the Local Security Authority (LSASS.EXE) and the services controller (SERVICES.EXE)

The SYSTEM volume is the partition from which the boot process starts, containing the MBR, boot sector, NTLDR, NTDETECT.COM & BOOT.INI