Difference between revisions of "Windows Vista"

From ForensicsWiki
Jump to: navigation, search
(External Links)
 
(2 intermediate revisions by the same user not shown)
Line 26: Line 26:
 
== Registry ==  
 
== Registry ==  
 
The [[Windows_Registry|Windows Registry]] remains a central component of the Windows Vista operating system.
 
The [[Windows_Registry|Windows Registry]] remains a central component of the Windows Vista operating system.
 +
 +
== User Interface Privilege Isolation (UIPI) ==
 +
As part of the secure initiative in Vista, applications with UI will run in three different levels of privilege. Application windows can interact with others windows of the same or lower levels, but cannot interact with applications at higher level/permission.
  
 
== See Also ==
 
== See Also ==
 +
* [[SuperFetch]]
 
* [[Windows]]
 
* [[Windows]]
 
* [[Windows 7]]
 
* [[Windows 7]]
Line 36: Line 40:
 
* [http://technet.microsoft.com/en-us/magazine/2007.02.vistakernel.aspx Inside the Windows Vista Kernel: Part 1], by [[Mark Russinovich]], February 2007
 
* [http://technet.microsoft.com/en-us/magazine/2007.02.vistakernel.aspx Inside the Windows Vista Kernel: Part 1], by [[Mark Russinovich]], February 2007
 
* [http://technet.microsoft.com/en-us/magazine/2007.03.vistakernel.aspx Inside the Windows Vista Kernel: Part 2], by [[Mark Russinovich]], March 2007
 
* [http://technet.microsoft.com/en-us/magazine/2007.03.vistakernel.aspx Inside the Windows Vista Kernel: Part 2], by [[Mark Russinovich]], March 2007
 +
* [http://technet.microsoft.com/en-us/magazine/2007.04.vistakernel.aspx Inside the Windows Vista Kernel: Part 3], by [[Mark Russinovich]], April 2007
 
* [http://whereismydata.files.wordpress.com/2009/09/forensic-implications-of-windows-vista.pdf Forensic Implications of Windows Vista], by Barrie Stewart, September 2007
 
* [http://whereismydata.files.wordpress.com/2009/09/forensic-implications-of-windows-vista.pdf Forensic Implications of Windows Vista], by Barrie Stewart, September 2007
 +
* [http://blogs.msdn.com/b/vishalsi/archive/2006/11/30/what-is-user-interface-privilege-isolation-uipi-on-vista.aspx What is User Interface Privilege Isolation (UIPI) on Vista], VishalSi, November 30, 2006
 +
  
 
[[Category:Operating systems]]
 
[[Category:Operating systems]]

Latest revision as of 07:28, 28 June 2014

New Features

File System

The file system used by Windows Vista is primarily NTFS.

In Windows Vista, NTFS no longer tracks the Last Access time of a file by default. This feature can be enabled by setting the NtfsDisableLastAccessUpdate value to '0' in the Registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem

Note that this feature has been around since as early as Windows 2000 [1].

Prefetch

Note that the prefetch hash function is different then that of Windows XP.

The Windows Prefetch File Format was changed to version 23.

Registry

The Windows Registry remains a central component of the Windows Vista operating system.

User Interface Privilege Isolation (UIPI)

As part of the secure initiative in Vista, applications with UI will run in three different levels of privilege. Application windows can interact with others windows of the same or lower levels, but cannot interact with applications at higher level/permission.

See Also

External Links