List of Microsoft Windows components

The List of Microsoft Windows components comprises the diverse software modules, services, drivers, and tools that collectively form the architecture of the Microsoft Windows operating system, enabling core functionalities such as process management, input/output operations, memory allocation, and user interaction across consumer and server editions.^[1] This compilation typically categorizes components into kernel-mode elements, which operate at a privileged level to handle low-level system tasks, and user-mode elements, which provide higher-level interfaces for applications and end-users. Key kernel-mode managers include the Object Manager for handling system objects like files and processes, the Memory Manager for virtual memory allocation and protection, the Process and Thread Manager for scheduling and execution, the I/O Manager for device communication, the Power Manager for energy state transitions, and the Configuration Manager for registry and hardware settings, among others such as the Security Reference Monitor and Kernel Transaction Manager.^[1][2][3] In the user-mode layer, prominent components encompass the graphical user interface (GUI) features like the Desktop, Taskbar, and Start Menu for navigation and app launching; File Explorer for file management; built-in utilities such as Task Manager for monitoring performance, Control Panel for system configuration, and Event Viewer for logging; as well as security tools including Microsoft Defender Antivirus and Windows Firewall.^{[4][5][6][7][8]} These components evolve with each Windows release, incorporating enhancements for compatibility, performance, and security, and are documented to support developers, administrators, and users in understanding and customizing the OS.^[9]

Core System Components

Kernel

The Windows NT kernel forms the foundational core of modern Microsoft Windows operating systems, managing essential low-level operations such as hardware interaction, process execution, and resource allocation. Introduced with Windows NT 3.1 in 1993, it established a robust, portable architecture that powers all subsequent Windows client and server editions, emphasizing security, multitasking, and hardware independence.^[10] This kernel replaced the less secure, DOS-based foundations of earlier consumer Windows versions, enabling enterprise-grade reliability while supporting backward compatibility through subsystems like the Virtual DOS Machine (VDM) for MS-DOS applications in early NT releases.^[11] Key subsystems within the kernel include the Executive, which oversees object management for resources like files and devices, as well as process scheduling to allocate CPU time among threads based on priorities.^[12] Complementing this is the Hardware Abstraction Layer (HAL), a thin interface that conceals platform-specific hardware details from higher-level kernel components and drivers, facilitating portability across diverse processor architectures such as x86, ARM, and others.^[13] Windows enforces a dual-mode execution environment to balance functionality and security: user mode, where applications operate with restricted access to prevent direct hardware manipulation, and kernel mode, which grants privileged operations for system services. Transitions between modes occur primarily through system calls, interrupts, or exceptions, mediated by the kernel's dispatcher and protected via mechanisms like ring-level privilege separation in the processor, ensuring user-mode code cannot corrupt kernel structures.^[14] The primary executable for the kernel is ntoskrnl.exe, which loads the core NT Operating System (NTOS) components including the Executive, kernel proper, and device drivers into memory. On systems enabled for Physical Address Extension (PAE), the variant ntkrnlpa.exe extends support for addressing up to 64 GB of physical RAM, critical for server environments with large memory configurations.^[15] The kernel's design evolved as a hybrid architecture, integrating a modular executive layer with a compact kernel core for efficiency, while incorporating compatibility layers from MS-DOS eras to run legacy 16-bit applications without altering the core structure. This approach allowed seamless migration from DOS-dependent systems to the NT platform starting with Windows 2000 and XP.^[11] For performance, the kernel implements priority-based thread scheduling, where the scheduler selects threads for execution using a multilevel queue system, supporting preemptive multitasking across single- or multi-processor configurations.^[16] Memory management relies on virtual addressing and paging, with APIs like VirtualAlloc enabling processes to reserve and commit pages in virtual address space, backed by the pagefile for demand-paged swapping to disk when physical RAM is constrained.^[17][18]

Core Components

The core components of Microsoft Windows encompass essential user-mode processes and subsystems that operate after kernel initialization to establish and sustain the operating system environment. These components, including the Session Manager Subsystem (SMSS.exe), Winlogon.exe, Client/Server Runtime Subsystem (CSRSS.exe), and Local Security Authority Subsystem (LSASS.exe), form the foundational layer for session management, authentication, and runtime support in the Windows NT kernel-based architecture.^[19] They ensure secure user interactions and system stability by handling initialization tasks that bridge the kernel's hardware abstraction with higher-level operations. The boot sequence begins with the kernel loading SMSS.exe as the first user-mode process, which initializes the system session (Session 0), loads registry hives, and launches subsequent core processes before terminating.^[20] SMSS.exe then starts Wininit.exe, which in turn launches LSASS.exe and the Services Control Manager (services.exe) to manage security policies and background services.^[19] For user sessions, SMSS.exe initiates Winlogon.exe to handle logon, while CSRSS.exe supports GUI-related tasks across sessions. This dependency chain ensures orderly progression from kernel boot to a functional desktop environment, with each component marked as critical to prevent system crashes if terminated unexpectedly.^[19] Winlogon.exe serves as the interactive logon manager, responsible for user authentication, displaying the logon user interface (LogonUI), and processing the secure attention sequence (SAS) via Ctrl+Alt+Del to safeguard against password theft.^[21] It creates desktops for the window station, implements timeout policies for logon prompts, and coordinates profile loading upon successful authentication, operating independently of specific authentication mechanisms to maintain flexibility across Windows versions.^[22] CSRSS.exe, the Client/Server Runtime Subsystem, provides the user-mode implementation of the Win32 subsystem, managing console windows, process creation, and GUI thread handling essential for application execution.^[23] It acts as the intermediary between client applications and kernel services, supporting legacy 16-bit Windows compatibility and raw input device management, with multiple instances possible for isolated sessions in multi-user environments.^[19] LSASS.exe, introduced in Windows NT 3.1, functions as the Local Security Authority Subsystem Service, enforcing security policies, performing local authentication, and handling password hashing and storage through the Local Security Authority (LSA).^[24] It verifies user credentials during logon, manages access tokens, and integrates with domain controllers for Kerberos-based authentication in networked setups, storing sensitive data like NTLM hashes in protected memory.^[25] Historically, these components evolved from the MS-DOS-based core of Windows 95, which relied on separate 16-bit and 32-bit subsystems for compatibility, to a unified NT kernel architecture in Windows 2000.^[26] Windows 2000 marked the convergence of consumer (Windows 9x lineage) and enterprise (NT) editions under a single robust kernel, standardizing SMSS.exe, Winlogon.exe, CSRSS.exe, and LSASS.exe for improved security and stability across all user tiers.^[27] This unification eliminated the hybrid architecture of prior versions, enabling consistent handling of modern authentication and session isolation that persists in subsequent releases like Windows 10 and 11.^[26]

Storage and File Systems

File Systems

Microsoft Windows supports several file systems for data storage, each designed to meet different needs in terms of compatibility, performance, and reliability. The primary file systems have evolved from legacy formats rooted in early personal computing to modern ones optimized for large-scale and resilient storage. This progression reflects advancements in hardware capabilities and software requirements, with the kernel's I/O manager handling abstract file access across these systems.^[28] The File Allocation Table (FAT) file system, originating in MS-DOS in 1981, serves as a foundational format for broad compatibility.^[28] Its variants include FAT12, FAT16, and FAT32, with FAT32 introduced in Windows 95 OSR2 and becoming widely used in later versions like Windows 98 and 2000.^[28] FAT employs a simple table-based structure to track file clusters on disk, enabling easy cross-platform readability but with notable limitations such as a maximum file size of 4 GB and partition sizes capped at 2 TB theoretically, though Microsoft formatting tools historically limited volumes to 32 GB until recent Windows 11 updates expanded this to 2 TB.^[29][30] These constraints stem from 32-bit addressing in FAT32, making it unsuitable for modern large drives without fragmentation issues or performance degradation on volumes exceeding 200 MB.^[28] NTFS, or New Technology File System, was introduced with Windows NT 3.1 in 1993 as a robust replacement for FAT, emphasizing security and recoverability.^[31] It incorporates journaling through a log file that records metadata changes, allowing the system to recover from crashes or power failures by replaying transactions and minimizing data loss.^[31] Key features include the Encrypting File System (EFS) for per-file encryption using public-key cryptography to protect data at rest, disk quotas to limit user storage usage on volumes, and built-in compression to reduce file sizes transparently without application modifications.^[32][31] NTFS also supports access control lists for granular permissions, enhancing security beyond FAT's capabilities, and scales to volumes up to 2^64 bytes, making it the default for Windows installations since NT.^[31] ReFS, the Resilient File System, debuted in Windows Server 2012 to address demands for high-integrity storage in enterprise environments.^[33] It prioritizes data integrity over traditional performance trade-offs by using checksums for both metadata and optional file data, enabling automatic detection and repair of corruptions, often in conjunction with Storage Spaces for redundancy.^[33] ReFS supports massive scalability, handling volumes and files up to 35 petabytes with minimal performance impact even at millions of terabytes, and includes features like block cloning for efficient data duplication.^[33] While initially server-focused, it has been refined in subsequent Windows Server releases, including 2022 and 2025, for better compatibility with virtualized workloads.^[33] exFAT, or Extended File Allocation Table, was introduced in Windows Vista Service Pack 1 in 2007 as an optimized format for removable flash media.^[34] Building on FAT's simplicity, it overcomes FAT32's 4 GB file size limit by employing 64-bit descriptors, supporting files and partitions up to 128 petabytes theoretically, while maintaining low overhead suitable for solid-state drives.^[34] This makes exFAT ideal for cross-device portability, such as USB drives and SD cards, without the journaling or permission complexities of NTFS that could slow flash wear-leveling.^[34] Windows natively supports its core file systems but requires third-party drivers for non-native formats like Linux's ext4, as there is no built-in mounting capability for such Unix-derived structures.^[35] Tools from vendors like Paragon Software enable read/write access to ext4 partitions, allowing interoperability in dual-boot or mixed environments.^[36] Among deprecated systems, HPFS (High Performance File System) was integrated from OS/2 1.2 in 1992 and supported in early Windows NT versions (3.1, 3.5, 3.51) for its long filename support up to 254 characters and efficient sector allocation on large drives.^[28] However, lacking native hot-fixing and facing compatibility issues, it was removed starting with Windows NT 4.0 and is no longer accessible in Windows 2000 or later.^[28]

User Interface and Experience

User Interface

The Windows Shell serves as the primary user interface framework in Microsoft Windows, managing the desktop environment, file navigation, and core interactive elements. Explorer.exe functions as the central process for the Shell, acting as the desktop manager responsible for rendering the desktop background, handling folder views, and orchestrating system interfaces like the taskbar and Start menu.^[37] Introduced with Windows 95, the Start menu has evolved significantly to enhance user accessibility and personalization; early versions provided a hierarchical list of programs, while the Windows XP redesign incorporated a dual-pane layout with pinned items and search integration for quicker navigation.^[38] Windows 8 introduced a full-screen tile-based Start screen, while Windows 10 refined it into a resizable Start menu blending tiles with traditional elements, and Windows 11 shifted to a centered taskbar alignment by default, allowing users to reposition it to the left for familiarity with prior versions.^[39] The Desktop Window Manager (DWM), introduced in Windows Vista in 2007, revolutionized graphical rendering by enabling desktop composition, where windows are drawn to off-screen surfaces in video memory before final assembly into the desktop image. This shift supports advanced visual effects such as glass-like window frames, 3-D transition animations, and the Aero interface, which leverages GPU acceleration for smoother performance and higher resolutions.^[40] DWM runs as a system service, ensuring consistent composition across applications while allowing toggling for compatibility, and it integrates with DirectX for hardware-accelerated rendering of UI elements.^[40] Configuration interfaces in Windows balance legacy and modern paradigms, with the Control Panel providing a longstanding centralized hub for system adjustments like hardware and network settings since early versions, while the Settings app, introduced in Windows 10 in 2015, offers a streamlined, Universal Windows Platform (UWP)-based alternative focused on simplicity and accessibility.^[5] The Settings app organizes options into intuitive categories, supporting touch-friendly navigation and integration with newer features, whereas the Control Panel persists for advanced or legacy configurations to maintain compatibility.^[5] Input handling in Windows emphasizes natural interaction, with touch and gesture support debuting in Windows 7 in 2009 through the Windows Touch platform, enabling multi-contact gestures like pan, zoom, rotate, two-finger tap, and press-and-tap mapped to standard messages for broad application compatibility.^[41] Building on this, Windows 10 enhanced stylus integration via the Windows Ink platform, allowing pressure-sensitive input for drawing, note-taking, and annotations with customizable pen tips, colors, and low-latency rendering through components like InkCanvas and InkPresenter.^[42] Themes and personalization options define the visual identity of Windows interfaces, evolving from the Luna theme in Windows XP, which introduced rounded edges and vibrant colors, to the Aero theme in Windows Vista and 7, featuring translucent glass effects powered by DWM.^[43] Subsequent updates adopted Fluent Design starting in Windows 10, incorporating light, depth, motion, material, and scale principles for adaptive, cross-device experiences across apps and the Shell.^[44] Accessibility features are integral to the user interface, with Narrator providing built-in screen-reading capabilities since Windows 2000,^[45] using natural-sounding voices to describe on-screen elements, support Braille devices, and enable navigation modes like Scan for low-vision users.^[46] Complementing this, Magnifier enlarges screen content with views such as full-screen, docked, or lens modes, activated via keyboard shortcuts like Windows key + Plus, and customizable zoom increments for enhanced readability.^[47]

Applications and Utilities

Microsoft Windows includes a suite of pre-installed applications and utilities designed for basic productivity, text editing, image manipulation, calculations, and media playback, enabling users to perform everyday tasks without additional software installations. These tools are integrated into the operating system image and can be managed through the Settings app under Optional features, where users can add, remove, or update them as needed.^[48] Notepad serves as the default basic text editor in Windows, supporting plain text (.txt) files and offering minimal formatting options for quick note-taking and script editing. Introduced with Windows 1.0 in 1985, it originated from an MS-DOS version released in 1983 to demonstrate mouse functionality.^[49] Recent enhancements in the Windows 11 version, updated via the Microsoft Store, include dark mode support for better visibility in low-light environments, along with tabbed interfaces for multitasking.^[50] Paint functions as a simple raster graphics editor for creating and editing bitmap images, featuring tools like brushes, shapes, and color selection for basic digital artwork. Available since Windows 1.0 in 1985, it received significant updates in Windows 10 with the introduction of Paint 3D in 2017, which added 3D modeling capabilities, stickers, and text rendering for more advanced creations.^[51] Although Paint 3D was deprecated and removed from the Microsoft Store in November 2024, the classic 2D Paint remains a core utility.^[52] The Calculator app has evolved from a rudimentary arithmetic tool in early Windows versions to a versatile utility supporting multiple modes for diverse mathematical needs. Debuting in Windows 1.0 as a basic four-function calculator, it expanded in Windows 10 to include scientific mode for trigonometric and logarithmic operations, as well as graphing mode for visualizing equations and functions.^[53] These features integrate seamlessly with the user interface, allowing mode switching via a navigation menu, and the app is available through the Microsoft Store for updates.^[54] For media playback, Windows Media Player has been the longstanding default application since its initial release as part of Windows 95 in 1995, supporting audio, video, and streaming formats with features like playlist management and codec extensibility.^[55] In Windows 10, it was supplemented by Groove Music, a Universal Windows Platform (UWP) app introduced in 2015 as a modern replacement focused on music libraries, Xbox Music integration, and cloud syncing.^[56] Groove Music was later rebranded and evolved into the current Media Player app, preserving user libraries during transitions. Both leverage DirectX for enhanced rendering in media apps. File Explorer, while primarily a file management utility, incorporates enhancements that aid productivity tasks like navigation and organization. The ribbon interface, debuted in Windows 8 in 2012, provides contextual tabs for actions such as copying, sharing, and compressing files, streamlining common operations.^[57] Windows 10 further improved this with Quick Access, a default view that pins frequent folders and displays recent files for faster retrieval.^[58] Among legacy applications, WordPad offers rich text editing capabilities, supporting .rtf, .doc, and .txt formats with basic formatting like bold, italics, and images—features bridging simple text editing and word processing. Included since Windows 95 in 1995, it has not received major updates since Windows 8.^[59] Microsoft deprecated WordPad in 2023, removing it from Windows 11 version 24H2 and later, recommending alternatives like Microsoft Word or the enhanced Notepad for similar tasks.^[52] These applications are embedded in the Windows installation image for immediate availability post-setup, with optional components accessible via Settings > Apps > Optional features, allowing users to install language packs or related tools without full system reconfiguration.^[48] This modular approach ensures lightweight deployment while supporting user customization.

System Configuration and Management

Configuration and Maintenance

The Configuration and Maintenance section encompasses a suite of built-in utilities in Microsoft Windows designed to facilitate system setup, diagnostic troubleshooting, and performance optimization. These tools enable users and administrators to manage boot processes, monitor resource usage, handle storage configurations, analyze system events, edit configuration databases, apply updates, and perform data backups without requiring third-party software. Introduced across various Windows versions starting from the NT lineage, these components have evolved to support modern hardware and software ecosystems while maintaining compatibility with legacy systems. System Configuration, accessible via Msconfig.exe, is a utility for managing startup and boot options, including selective startup modes, service controls, and program launches at boot. It allows users to troubleshoot configuration errors by enabling or disabling drivers, services, and applications that load during initialization, thereby isolating issues affecting system stability. First introduced with Windows 98, Msconfig has been a staple since Windows XP for advanced diagnostics, such as modifying boot timeouts or safe mode entries.^[60][61] Task Manager provides real-time monitoring of processes, performance metrics, and system resources through tabs for processes, performance graphs (CPU, memory, disk, network), and startup applications. Users can end tasks, adjust priorities, and view detailed usage statistics to identify resource hogs or bottlenecks. Originally released with Windows NT 4.0 in 1996, it received a significant redesign in Windows 8 to incorporate a more modern interface with live tiles and enhanced telemetry.^[62][63] Disk Management, invoked through Diskmgmt.msc, offers graphical tools for partitioning, formatting, and volume management on local and removable drives. It supports operations like creating/extending/shrinking volumes, converting disk types (MBR to GPT), assigning drive letters, and initializing new disks, making it essential for storage reconfiguration during setup or maintenance. This snap-in has been integral to Windows since the NT family, providing a user-friendly alternative to command-line tools for handling dynamic and basic disks.^[64][65] Event Viewer serves as a centralized console for examining system, application, and security logs to diagnose errors, warnings, and informational events. It categorizes logs into channels like System, Application, and Security, allowing filtering by date, source, or event ID to trace issues such as hardware failures or software crashes. Available since Windows NT in 1993, it has expanded in later versions to include forwarded events and XML-based querying for advanced analysis.^[66][67] The Registry Editor, launched with Regedit.exe, enables direct interaction with the Windows Registry—a hierarchical database storing low-level settings for the operating system, hardware, and applications. Key hives include HKEY_LOCAL_MACHINE (system-wide configurations), HKEY_CURRENT_USER (user-specific settings), HKEY_CLASSES_ROOT (file associations), HKEY_USERS, and HKEY_LOCAL_MACHINE\SOFTWARE. Users can export/import keys, search entries, and modify values, though improper edits risk system instability; it has been a core tool since Windows 95 and NT 4.0. In Windows 11 version 24H2, Regedit received updates including better search capabilities, dark mode support, and improved address bar navigation.^[68][69][70] Windows Update integrates automated delivery of security patches, quality improvements, and feature updates via the Windows Update service, accessible through Settings or Control Panel. Since Windows 10's release in 2015, it has adopted a "Windows as a service" model with annual feature updates introducing new capabilities, such as UI enhancements or security overhauls, alongside monthly cumulative updates for stability. Devices receive updates based on compatibility checks, with options for deferral or pausing to minimize disruptions during maintenance.^[71][72] Backup and Restore features, found in Control Panel under System and Security, include File History for continuous versioning of personal files to external or network drives, and System Image for full disk backups capturing the entire OS state. However, as of Windows 11, File History (introduced in Windows 8) and Backup and Restore (including System Image, available since Windows 7) are deprecated legacy tools no longer receiving updates; Microsoft recommends using the modern Windows Backup app in Settings for file syncing and PC backup to Microsoft account or external drives.^[73][74][75]

Services

In Microsoft Windows, services are background processes that operate continuously or on demand to provide essential system functionality, such as managing hardware interactions, network operations, and automated tasks, without requiring direct user intervention.^[76] These services enhance system reliability and scalability by running in a protected environment, often isolated from the user session to prevent disruptions. Introduced in the Windows NT lineage, services have evolved to support enterprise-level operations, allowing modular extensions to core OS capabilities.^[77] The Service Control Manager (SCM), implemented by the services.exe process, serves as the central authority for overseeing all Windows services.^[78] It initializes at system boot and functions as a Remote Procedure Call (RPC) server, enabling remote configuration and control of services across networked environments.^[78] The SCM handles critical tasks like starting and stopping services, resolving dependencies between them to ensure proper sequencing during boot or manual invocation, and maintaining a database of installed services for secure management.^[76] Windows services are categorized into types based on their execution model. Win32 services running in their own process (SERVICE_WIN32_OWN_PROCESS) operate independently, each with a dedicated executable for isolation and easier debugging.^[79] In contrast, shared-process services (SERVICE_WIN32_SHARE_PROCESS) are hosted within a single generic process like svchost.exe, which loads multiple services from DLL files to optimize resource usage by reducing memory overhead and process count.^[79][80] Representative examples of key services illustrate their roles in core operations. The Print Spooler service, executed by spoolsv.exe, manages print jobs by queuing and routing them to printers, ensuring reliable output without interrupting user workflows.^[81] The Windows Audio service, implemented via audiosrv.dll and typically hosted in svchost.exe, handles audio device management, volume control, and sound playback across applications. The Remote Procedure Call (RPC) service, known as RpcSs and running under rpcss.dll in svchost.exe, facilitates inter-process communication essential for many system components, including dependency resolution for other services.^[82] Service startup types determine when and how they launch to balance performance and availability. Automatic services start immediately upon system boot to support critical functions. Manual services require explicit triggering by user action or another process. Disabled services are prevented from starting to minimize resource consumption or mitigate security risks. Introduced in Windows 7, the Automatic (Delayed Start) option postpones non-essential automatic services by a few minutes post-boot, reducing initial load times and improving startup speed.^[83] Management of services occurs through built-in tools for configuration and control. The Services console (services.msc) provides a graphical interface to view, start, stop, or modify service properties, including startup types and dependencies.^[77] Command-line utilities like net start and net stop allow scripted or remote administration, enabling batch operations such as initiating the Print Spooler with net start spooler.^[84] Historically, Windows services saw significant expansion with the release of Windows 2000, which built on the NT kernel to introduce enhanced enterprise scalability through features like Active Directory integration and Terminal Services, allowing more robust service deployment in networked, multi-user environments.^[85] Services can impact system resources, with shared processes like svchost.exe potentially consuming notable CPU or memory if hosting inefficient DLLs, leading to performance bottlenecks during high-load scenarios.^[86] Troubleshooting often involves analyzing dependencies to identify failures; tools like Dependency Walker (depends.exe) scan for missing modules, circular dependencies, or CPU architecture mismatches, helping isolate issues without disrupting running services.^[87]

Networking and Connectivity

Networking

The networking components in Microsoft Windows provide foundational support for local and remote connectivity, enabling protocols for data transmission, device interfacing, and resource sharing across wired and wireless networks. Central to this is the TCP/IP stack, which has been natively implemented since Windows 95 to handle Internet Protocol (IP) communications, including both IPv4 and subsequent enhancements for broader network compatibility.^[88] IPv6 support was added with Windows XP Service Pack 1 in 2003, allowing dual-stack operation for transition to the next-generation addressing scheme without disrupting existing IPv4 networks.^[89] This stack forms the core layer for routing packets, managing connections, and ensuring reliable delivery through protocols like Transmission Control Protocol (TCP) and User Datagram Protocol (UDP). The Network Driver Interface Specification (NDIS) abstracts hardware details for network adapters, facilitating driver development and interoperability. NDIS has evolved through multiple versions, with NDIS 6.30 introduced in Windows 8 and supported in subsequent releases, incorporating features like improved power management and support for single-root I/O virtualization (SR-IOV) to enhance virtualized environments.^[90] For application-level networking, the Windows Socket API (Winsock), implemented via Winsock2.dll, offers a standardized interface for developers to create TCP/IP-based applications, supporting functions such as socket creation, connection establishment, and data transmission over various transport providers.^[91] File and printer sharing in Windows relies on the Server Message Block (SMB) protocol, which has progressed from version 1.0 in early Windows releases to SMB 3.1.1, introduced in Windows 10 version 1607 and Windows Server 2016, supporting encryption of data in transit using AES-128-CCM or AES-128-GCM ciphers. Later enhancements include AES-256-GCM support in Windows 11 and Windows Server 2025.^[92][93] Remote access is enabled through the Remote Desktop Protocol (RDP), first introduced with Windows 2000 Terminal Services (version 5.0), allowing graphical remote control of systems over TCP port 3389.^[94] Wireless connectivity is managed by the WLAN AutoConfig service, debuted in Windows Vista, which automates profile management, authentication (including WPA2/WPA3), and seamless roaming between access points. As of Windows 11 updates in 2025, support for Wi-Fi 7 enables higher speeds and better efficiency.^[95][96] Integration with security features includes Windows Defender Firewall, which applies rules based on ports, protocols (e.g., TCP/UDP/ICMP), and applications to control inbound and outbound traffic, such as allowing RDP on port 3389 or SMB on port 445 while blocking unauthorized access.^[97] These components collectively ensure robust, scalable networking tailored for client environments, with backward compatibility for legacy protocols where needed.

Security and Protection

Security

Microsoft Windows includes several built-in security components that provide threat detection, access control, and data protection features to safeguard users and systems from malware, unauthorized access, and data breaches. These components integrate with the operating system to offer layered defenses, from real-time monitoring to encryption and policy enforcement. Windows Defender Antivirus is the primary antimalware solution integrated into Windows, offering real-time scanning to detect and block viruses, spyware, and other threats as they attempt to execute or install.^[7] It leverages cloud-delivered protection for rapid updates and behavioral analysis, a capability introduced with Windows 8 in 2012, enabling faster threat response through Microsoft's global threat intelligence network.^[7] Additionally, it integrates with Microsoft Defender for Endpoint, providing enterprise-grade endpoint detection and response for advanced threat hunting and automated remediation in organizational environments.^[7] BitLocker provides full-volume disk encryption to protect data at rest, preventing unauthorized access if a device is lost or stolen, and was first introduced in Windows Vista in 2007.^[98] It supports both fixed and removable drives, using Advanced Encryption Standard (AES) algorithms, and typically requires a Trusted Platform Module (TPM) chip for secure key storage and automatic unlocking during boot.^[98] Recovery options, such as personal identification numbers or recovery keys, ensure access in case of hardware changes or forgotten credentials.^[98] User Account Control (UAC) is a security mechanism that prompts users for consent or credentials before allowing applications to make changes to the system, thereby reducing the risk of malware elevating privileges without user awareness; it was introduced in Windows Vista in 2007.^[99] UAC operates in modes such as consent for administrators (prompting only for approval) and credentials for standard users (requiring admin login), helping to maintain a least-privilege environment by running most processes with limited rights.^[100] Windows Firewall, enhanced with an advanced security console in Windows XP Service Pack 2 in 2004, performs stateful inspection of inbound and outbound network traffic to prevent unauthorized access and limit the spread of malware. This feature filters network traffic using stateful packet inspection to allow or block connections based on predefined or custom rules.^[8] It supports per-profile rules for domain, private, and public networks, and includes integration with IPsec for encrypted communications, configurable via the Windows Security app or Group Policy.^[97] Credential Guard employs virtualization-based security (VBS) to isolate sensitive credentials like NTLM password hashes and Kerberos tickets in a protected environment, preventing theft by malware; it became available in Windows 10 Enterprise edition in 2015.^[101] By leveraging Hyper-V containers and secure memory enclaves, it ensures that only privileged system software can access these secrets, significantly mitigating pass-the-hash and credential-dumping attacks.^[25] AppLocker enables application whitelisting through policy-based rules that allow or deny execution of executables, scripts, and installers based on file attributes, publisher signatures, or paths, helping organizations enforce compliance and restrict unauthorized software.^[102] Introduced in Windows 7, it supports auditing modes for testing rules without enforcement and integrates with Group Policy for domain-wide deployment.^[103] SmartScreen is a reputation-based protection service that helps protect against phishing attacks, malware downloads, and potentially unwanted applications by checking files and websites against Microsoft's cloud-based intelligence before execution or access; it was introduced in Windows 8 in 2012.^[104] Windows Hello provides secure biometric or PIN-based authentication for user sign-in and app access, replacing passwords with hardware-bound keys stored in the TPM; introduced in Windows 10 in 2015, it enhances convenience and security through multi-factor authentication.^[105] Smart App Control uses cloud and local reputation checks to verify and block untrusted or unsigned applications from running, adding an additional layer of protection against malware; introduced in Windows 11 version 22H2 in 2022 and enabled by default in version 24H2 for new installations as of 2024.^[106] Windows security updates, delivered via Windows Update, enforce features like Secure Boot since Windows 8 in 2012, which verifies the digital signatures of boot loaders and kernels to prevent rootkits and boot-time malware from loading.^[107] This UEFI-based mechanism chains trust from firmware to the operating system, ensuring only trusted code executes during startup.^[108]

Development and Scripting

Scripting and Command-Line

The scripting and command-line facilities in Microsoft Windows provide essential tools for system administration, automation, and task execution through text-based interfaces. These components enable users to run commands, execute scripts, and manage resources without relying on graphical user interfaces, supporting both legacy and modern automation workflows.^[109] Command Prompt, known as Cmd.exe, serves as the primary command-line interpreter introduced with Windows NT in 1993, offering a text-based environment for executing commands and batch scripts. It supports batch files with the .bat extension, allowing sequences of commands to automate repetitive tasks such as file operations and system queries. For instance, environment variables like %USERNAME% enable dynamic scripting, while command separators (& for sequential execution, && for conditional success, and || for failure handling) facilitate complex batch logic. Cmd.exe inherits the environment from its parent process and can be configured via registry keys, such as AutoRun under HKEY_LOCAL_MACHINE\Software[Microsoft](/page/Microsoft)\Command Processor, to execute startup scripts automatically.^[110] Windows Script Host (WSH), comprising Wscript.exe for graphical script execution and Cscript.exe for console-based runs, was integrated starting with Windows 98 to host scripts in languages like VBScript and JScript. This component provides an environment for automation tasks using object models, enabling scripts to interact with the operating system for local and remote administration without compiling executables. WSH supports various scripting languages through Active Scripting interfaces, making it suitable for lightweight automation like file manipulation and registry access.^[111][112] PowerShell represents a more advanced, object-oriented shell and scripting language, introduced with Windows PowerShell 1.0 in November 2006 and later with version 2.0 integrated in Windows 7 in October 2009, designed for task automation and configuration management. Unlike text-stream-based tools like Command Prompt, PowerShell handles .NET objects directly, allowing structured data manipulation through cmdlets and pipelines for efficient scripting. Versions evolved to PowerShell 5.0 in February 2016 via Windows Management Framework 5.0, and subsequent releases like PowerShell 7.x (starting March 2020) introduced cross-platform support for Windows, macOS, and Linux while maintaining compatibility with Windows-specific features, with ongoing releases including PowerShell 7.4 (LTS, November 2023) and 7.5 (January 2025).^{[113][114][115][116]} Key commands exemplify the practical utility of these tools; for network diagnostics, Ipconfig displays TCP/IP configuration values and refreshes DHCP/DNS settings. Disk integrity checks use Chkdsk to scan volumes for logical and physical errors in the file system metadata. System file repair employs Sfc /scannow, which verifies protected operating system files and replaces corrupted versions from a cached source. These commands are accessible via Command Prompt or PowerShell, underscoring their role in troubleshooting and maintenance.^{[117][118][119]} Task Scheduler facilitates the automation of scripts and commands, supporting both GUI configuration and command-line management through Schtasks.exe, which allows creation, deletion, querying, modification, execution, and termination of scheduled tasks on local or remote systems. This tool integrates with Command Prompt, PowerShell, and WSH scripts to run them at specified times, triggers, or events, enhancing administrative efficiency.^[120][121] The evolution of Windows scripting reflects a transition from DOS-derived Command Prompt, rooted in 16-bit batch processing, toward PowerShell as the preferred environment starting with Windows 10 in 2017, where it replaced Command Prompt in default contexts like the Win+X menu for advanced object-based automation. This shift emphasizes structured scripting over plain text, with PowerShell 5.0 (2016) introducing native integration with the PowerShell Gallery—a repository for discovering, installing, updating, and publishing modules via cmdlets like Install-Module in the PowerShellGet module. The Gallery, launched publicly in 2016, supports community-contributed resources to extend PowerShell functionality for tasks like cloud integration and security management.^{[52][122][123]}

APIs

The application programming interfaces (APIs) in Microsoft Windows enable developers to build software that interacts with the operating system's kernel, user interface, hardware, and services, supporting both native and managed code environments. These APIs evolved from early graphical systems to modern asynchronous models, providing abstractions for tasks like window management, data querying, and multimedia rendering. Key APIs include foundational sets for desktop applications and specialized interfaces for system management and component integration. The Win32 API serves as the core set of functions for developing desktop and server applications on Windows, handling operations such as creating and managing windows, processing user input, and accessing file systems. It originated with Windows 1.0 in 1985 and includes the Graphics Device Interface (GDI) for rendering 2D graphics and text. The API is documented through headers and libraries in the Windows SDK, allowing C and C++ programmers to interface directly with the OS.^[124] The Windows Runtime (WinRT), introduced in Windows 8 in 2012, is a managed API platform tailored for Universal Windows Platform (UWP) apps, emphasizing security, touch input, and cross-device compatibility. It employs an asynchronous programming model based on promises and callbacks to handle operations like file I/O and network requests without blocking the UI thread. WinRT APIs are projected into languages like C++, C#, and JavaScript via metadata files (.winmd), promoting a consistent type system across projections.^[125] The Component Object Model (COM) provides a binary standard for building and interacting with reusable software components in a language-agnostic manner, enabling distributed objects across processes and machines, introduced in 1993 and integral to Windows since Windows 95. It supports Object Linking and Embedding (OLE) for embedding and linking documents, such as charts in word processors. COM uses interfaces defined by GUIDs and reference counting for object lifetime management, forming the basis for technologies like ActiveX controls.^[126] Windows Management Instrumentation (WMI), introduced in Windows 2000, implements the Web-Based Enterprise Management (WBEM) standard as a query-based infrastructure for accessing and manipulating system data. Developers use WMI's Common Information Model (CIM) classes and a SQL-like query language (WQL) to retrieve information on hardware, software, and network configurations. It supports scripting and API calls for automation tasks, such as monitoring performance counters.^[127] DirectX APIs deliver a layered architecture for high-performance graphics, audio, and input in multimedia applications, with subsets like Direct3D providing low-level access to 3D rendering pipelines and shaders. These APIs abstract hardware details through COM-based interfaces, supporting versions from DirectX 9 onward for evolving GPU capabilities; comprehensive details on implementation are covered in the DirectX section.^[128] Since Windows 10, API sets group related Win32 functions into stable, versioned contracts to enhance forward compatibility, allowing applications to link against a manifest-declared set without relying on specific DLL versions that might change across updates. This mechanism redirects calls at runtime to the appropriate implementation, reducing breakage in legacy code.^[129] Developers access Windows APIs via the Windows SDK, a downloadable package containing header files like windows.h, which declares fundamental types, macros, and function prototypes for inclusion in C/C++ projects. The SDK also provides tools for building, debugging, and testing API usage across Windows versions. .NET offers thin wrappers for select Win32 APIs to simplify integration in managed applications.^[130]

.NET Framework

The .NET Framework is a managed software platform developed by Microsoft for creating and executing applications on Windows operating systems. Initially released in February 2002 with version 1.0, it has progressed through successive updates, including version 1.1 in 2003, 2.0 in 2005, 3.0 and 3.5 in 2006 and 2007 respectively, and the 4.x series starting with 4.0 in 2010, culminating in version 4.8.1 released on August 9, 2022. Each iteration includes the Common Language Runtime (CLR) for code execution and the Base Class Library (BCL) for foundational services, with CLR versions evolving from 1.0/1.1 to 2.0 (for 2.0–3.5) and 4.0 (for 4.x).^[131][132] At its core, the CLR serves as the execution engine, providing automatic garbage collection to manage memory allocation and deallocation, just-in-time (JIT) compilation to convert intermediate language (IL) code to native machine code at runtime, and type safety via the Common Type System to prevent invalid operations and ensure cross-language compatibility. Additional CLR features include structured exception handling, secure code access, multithreading support, and debugging tools, enabling reliable and performant managed code execution. The BCL complements this by supplying a rich collection of reusable classes, primarily in the System namespace, for essential operations such as file input/output (System.IO), network communication (System.Net), and XML processing (System.Xml), along with data structures like collections in System.Collections.Generic.^[133][134] For web development, ASP.NET forms a specialized subset of the .NET Framework, offering tools and libraries to build dynamic websites and services using HTML, CSS, and JavaScript, with support for architectural patterns like Model-View-Controller (MVC) to separate concerns and enhance maintainability. Integration with native Windows components occurs through Platform Invocation Services (P/Invoke), which allows managed code to directly invoke Win32 API functions from dynamic-link libraries (DLLs) like user32.dll, facilitating interoperation for tasks requiring low-level system access. In Windows 10, .NET Framework applications can bridge to the Universal Windows Platform (UWP) via the Desktop Bridge, enabling traditional desktop apps—such as those using Windows Presentation Foundation (WPF)—to be packaged and distributed through the Microsoft Store while accessing modern APIs.^{[135][136][137]} Since Windows Vista, .NET Framework has been installable as an optional component through the Windows Features dialog in Control Panel or via the Add Roles and Features Wizard on Windows Server, allowing on-demand enabling of versions like 3.5 for legacy compatibility. Runtime versions can be deployed separately, with 4.x updates being in-place to avoid side-by-side installations, though multiple runtimes (e.g., CLR 2.0 and 4.0) coexist for application compatibility. The platform's evolution includes a transition to a unified .NET model starting with .NET 5 in November 2020, which merges .NET Framework and the open-source .NET Core into a single cross-platform runtime, progressing to .NET 9 in November 2024 as the current standard-term support (STS) release (supported until May 2026), with .NET 8 as long-term support (LTS) until November 2026 and .NET 10 planned for November 2025 as the next LTS; while this shift encourages new development on the modern stack, Windows-specific elements like WPF and Windows Forms remain supported for desktop scenarios.^{[138][139][140][141]}

Multimedia and Graphics

DirectX

DirectX is a collection of application programming interfaces (APIs) developed by Microsoft for handling multimedia tasks related to gaming, video, and audio on Windows platforms, enabling software to directly access hardware acceleration for improved performance.^[142] Introduced with Windows 95 in 1995 as DirectX 1.0, it evolved from efforts to support high-performance games transitioning from DOS environments to Windows, providing standardized access to graphics, sound, and input hardware that was previously fragmented.^[143] Over time, DirectX has become integral to Windows, with versions advancing alongside operating system releases to incorporate new hardware capabilities and developer needs.^[144] The suite has progressed through major versions: DirectX 2.0 in 1996, skipping version 4 to release DirectX 5 in 1997, DirectX 6.1 in 1999, DirectX 8.0 in 2000, DirectX 9 in 2002 (which remains widely used with over 2,500 games supporting it as of 2022), DirectX 10 in 2006 with Windows Vista, DirectX 11 in 2009 with Windows 7, DirectX 12 in 2015 with Windows 10, and DirectX 12 Ultimate in 2020 via a Windows 10 update.^{[145][146][147]} Since DirectX 12, updates occur annually through Windows Update, adding feature levels without full version increments to maintain compatibility.^[148] Subsequent advancements as of 2025 include DirectX Raytracing 1.2 (announced March 2025), providing up to 2.3x performance gains in ray tracing workloads; Neural Rendering for AI-driven graphics enhancements; and DirectStorage 1.3 for improved GPU decompression and asset streaming.^[149] DirectX 12 introduced lower-level hardware access for better CPU efficiency and multi-threading, requiring compatible GPUs with feature levels (e.g., 12_0 or higher) for full utilization, while older versions support downlevel hardware via compatibility modes.^[150] Core components include Direct3D for 3D graphics rendering, Direct2D for high-performance 2D graphics, DirectInput for handling input devices like keyboards, mice, and gamepads, and audio APIs such as DirectSound (legacy) and XAudio2 for spatial sound and mixing.^[128][151] The DirectX Graphics Infrastructure (DXGI), introduced with DirectX 10, manages low-level tasks like adapter enumeration, multi-monitor support, and resource sharing across adapters, serving as a foundation for subsequent graphics runtimes.^[152] Advanced features in later versions encompass DirectX Raytracing (DXR) for real-time ray tracing, announced in 2018 and requiring hardware acceleration on compatible GPUs, and Variable Rate Shading (VRS) for optimizing rendering performance by varying shading rates across screen areas.^[153][154] DirectX is pre-installed in Windows versions from XP onward, with modern editions (Windows 10 and 11) including the latest runtimes by default and receiving updates via Windows Update; older versions may require manual installation of end-user runtimes for legacy support.^[155] The DirectX Diagnostic Tool (DXDiag) provides system diagnostics, reporting installed version, driver details, and feature support to troubleshoot compatibility issues.^[142]

Server and Enterprise Features

Windows Server Components

Windows Server editions include specialized components that extend beyond client versions, enabling enterprise-scale management, high availability, and server-specific functionalities. These components are primarily installed and configured through role-based setup, allowing administrators to select and deploy only necessary roles and features via Server Manager, which streamlines deployment and reduces the attack surface.^[156] Introduced as a core installation option since Windows Server 2008, Server Core provides a GUI-less environment that supports essential server roles while minimizing resource usage and enhancing security by excluding graphical interfaces. In Windows Server 2025, Server Core supports hotpatching (preview) via Azure Arc for applying security updates without requiring a reboot.^[157][158] These components continue to evolve, with notable enhancements in Windows Server 2022 and the release of Windows Server 2025 in early 2025, focusing on security, performance, and hybrid cloud integration.^[159][157] Active Directory Domain Services (AD DS) is a directory service that stores and manages information about network resources, such as users, computers, and printers, making it available to administrators and users through a hierarchical structure of domains, trees, and forests.^[160] First introduced in Windows 2000 Server, AD DS integrates with Lightweight Directory Access Protocol (LDAP) for querying and modifying directory data, enabling secure authentication and authorization across networked environments.^[161] It supports domain controllers for replication and fault tolerance, forming the foundation for identity management in enterprise networks. Windows Server 2025 introduces a 32k database page size supporting up to ~3,200 multivalued attributes, new schema updates (sch89.ldf, sch90.ldf, sch91.ldf), object repair for missing attributes, channel binding audit support, new functional levels (DomainLevel 10 and ForestLevel 10), and enhanced security for confidential attributes and machine account passwords.^[157] Hyper-V serves as the virtualization platform in Windows Server, allowing the creation and management of virtual machines (VMs) on physical hosts to consolidate workloads and improve resource utilization.^[162] Launched with Windows Server 2008, Hyper-V supports features like live migration for seamless VM movement between hosts without downtime, high availability through integration with clustering, and shielded VMs for enhanced security against hypervisor-level attacks.^[162] It is optimized for enterprise deployments, including support for nested virtualization and storage quality of service to prioritize VM performance. Windows Server 2022 added nested virtualization support for AMD processors and improved the Hyper-V virtual switch with enhanced Receive Segment Coalescing (RSC). In Windows Server 2025, Hyper-V supports up to 4 PB of memory and 2,048 logical processors per host, GPU partitioning with high availability and live migration, dynamic processor compatibility, and Accelerated Networking (preview).^[159][157] Internet Information Services (IIS) is the extensible web server component for hosting websites, web applications, and services, supporting protocols like HTTP/HTTPS, FTP, and SMTP.^[163] Available since IIS 4.0 as part of the Windows NT 4.0 Option Pack and evolving through versions like IIS 5.0 in Windows 2000 Server, it features a modular architecture from IIS 7.0 onward, allowing selective enabling of components such as ASP.NET integration and URL rewriting for customized deployments.^[164] In server environments, IIS scales to handle high-traffic scenarios with application pools for process isolation and centralized configuration management. Remote Desktop Services (RDS) enables multi-session remote access to applications and desktops on a server, allowing multiple users to connect simultaneously from client devices.^[165] Formerly known as Terminal Services and renamed in Windows Server 2008 R2, RDS supports session-based hosting for virtual desktop infrastructure (VDI) and remote app delivery, with features like load balancing across session hosts and integration with Hyper-V for virtualized sessions.^[166] It facilitates secure remote work by providing centralized application management and policy enforcement for enterprise users. Windows Server 2022 introduced Remote Desktop IP Virtualization, enabling per-session or per-program IP address assignment for improved network isolation.^[159] Group Policy provides centralized management of user and computer configurations across a domain through Group Policy Objects (GPOs), which define settings for security, software deployment, and resource access.^[167] Introduced in Windows 2000 alongside Active Directory, it applies policies hierarchically from sites, domains, and organizational units, supporting inheritance and filtering for granular control.^[168] Administrators use the Group Policy Management Console (GPMC) to create, link, and troubleshoot GPOs, ensuring consistent enforcement of organizational standards like password policies and software restrictions. Starting with Windows Server 2022, Group Policy supports mandating SMB AES-256 encryption for enhanced security.^[159] Failover Clustering is a high-availability feature that groups multiple servers into a cluster to protect workloads against hardware or software failures by automatically failing over resources to healthy nodes.^[169] Available in Windows Server editions since early versions and significantly enhanced in Windows Server 2019 with capabilities like cluster sets for stretched environments and cross-domain migrations, and in 2022 with Storage Replica compression for efficient data transfer and granular control of encrypting/signing intra-node storage communications, it supports clustered roles such as file servers, SQL Server instances, and Hyper-V hosts.^[170][159] The feature uses shared storage or Storage Spaces Direct for data access, with quorum configurations to maintain cluster stability during outages.

Deprecated and Legacy

Deprecated Components and Apps

Microsoft Windows has deprecated several components and applications over time to enhance security, modernize interfaces, and align with evolving standards, often replacing them with more secure or efficient alternatives. These deprecations typically occur through updates or version transitions, ensuring backward compatibility where necessary during the phase-out period. This section outlines key examples, including web browsers, voice assistants, multimedia plugins, legacy file systems, user interface elements, authentication protocols, and broader removal timelines. Internet Explorer, Microsoft's proprietary web browser introduced in 1995, was the default in Windows from version 3.1 through Windows 8.1. In Windows 10, released in 2015, it was replaced as the default by Microsoft Edge, which offered improved performance and standards compliance using the new EdgeHTML engine. The Internet Explorer 11 desktop application was fully retired on June 15, 2022, with users directed to Edge's Internet Explorer mode for legacy site compatibility, supported through at least 2029. The Trident rendering engine underlying Internet Explorer was deprecated to address security vulnerabilities and encourage adoption of modern browsing technologies.^[171][172] Cortana, the virtual voice assistant integrated into Windows 10 in 2015, provided task assistance, reminders, and search integration powered by natural language processing. As consumer usage declined and Microsoft shifted focus to AI-driven tools like Copilot, the standalone Cortana app was retired in Windows in spring 2023, with its removal completed via updates in Windows 11 by late 2023. Enterprise features, such as Cortana in Microsoft Teams, were also phased out around the same time, though some integration remnants persisted briefly for business users before full discontinuation. This deprecation aimed to streamline the OS by removing underutilized features in favor of more advanced productivity integrations.^[173] Adobe Flash Player support, once embedded in Windows browsers for multimedia content, was blocked in Microsoft Edge and Internet Explorer starting July 2017 to mitigate widespread security risks from exploits. Full removal occurred through the KB4577586 update, which uninstalled Flash from Windows devices by January 2021, coinciding with Adobe's end-of-life announcement on December 31, 2020. This action eliminated a major vector for malware, as Flash had not received security updates since its retirement, prompting a shift to HTML5-based alternatives for web content.^[174][175] Legacy file systems like High Performance File System (HPFS) and FAT12 have been unsupported in modern Windows versions. HPFS, originally developed for OS/2 and supported natively in Windows NT 3.1 through 4.0 for its long filename and large volume capabilities, was dropped starting with Windows 2000 due to the superiority of NTFS in security and performance. Post-Windows XP, no native read/write support exists, requiring third-party tools for access. Similarly, FAT12, an early variant of the File Allocation Table system used for small volumes like floppies up to 32 MB, remains readable in Windows 10 and 11 for legacy media but lacks formatting support and is not recommended for new installations, as it imposes severe limitations on partition size and lacks modern features like encryption. These deprecations reflect the transition to NTFS and exFAT for better reliability and compatibility.^[28] Many Control Panel applets, the traditional interface for system configuration since Windows 95, have been migrated to the modern Settings app starting with Windows 10 in 2015 to provide a more responsive, touch-friendly experience. For instance, applets for display, network, and user accounts now redirect to Settings equivalents, with ongoing migrations reducing the Control Panel's role. In August 2024, Microsoft announced that the Control Panel was in the process of being deprecated in favor of the Settings app; however, this statement was later clarified, and as of November 2024, no deprecation or removal is scheduled to ensure feature parity.^[52][176] NTLM (NT LAN Manager) authentication, introduced in Windows NT 3.1 for network logons and resource access, has been phased out due to vulnerabilities like pass-the-hash attacks that enable unauthorized domain compromises. Beginning with Windows Vista in 2007, Microsoft recommended Kerberos as the preferred protocol for its ticket-based security and mutual authentication. In June 2024, NTLM was officially deprecated across Windows client and server editions, with developers urged to transition to Kerberos or Negotiate (which prioritizes Kerberos) to bolster enterprise security. Specifically, NTLMv1 support was removed in Windows 11, version 24H2, and Windows Server 2025. Extended auditing and blocking policies were introduced to facilitate this migration without immediate disruption.^[52][177] Windows 11, released in 2021, accelerated deprecations through hardware requirements and feature removals, such as ending support for 32-bit operating system builds to focus on 64-bit architectures. While 32-bit x86 applications remain supported via WoW64 emulation, support for 32-bit Arm applications was removed at the launch of Windows 11 in 2021, affecting a small subset of apps on Arm-based devices. These changes, part of broader timelines like the end of Windows 10 support in October 2025, emphasize security enhancements and performance optimizations by eliminating legacy dependencies.^[52][178]

Uncategorized Components

Miscellaneous Components

The Windows Subsystem for Linux (WSL) provides a compatibility layer that enables developers and users to run a native Linux environment directly on Windows without requiring a traditional virtual machine or dual-boot setup.^[179] Introduced as WSL 1 in the Windows 10 Anniversary Update in 2016, it initially translated Linux system calls to Windows equivalents for compatibility. WSL 2, released in May 2019 as part of Windows 10 version 1903, enhances performance and full Linux kernel support by leveraging Hyper-V for lightweight virtualization, allowing for better file system performance and Docker container integration., and on May 19, 2025, Microsoft open-sourced the WSL codebase on GitHub under the MIT license, allowing community contributions.^{[179][180][181]} Windows Sandbox serves as a disposable, isolated desktop environment designed for safely executing untrusted applications or files, such as during software testing or malware analysis, without risking the host system.^[182] Debuting in Windows 10 version 1903 in May 2019, it utilizes hardware-based virtualization and container technology to create a temporary instance that discards all changes upon closure, ensuring high security isolation.^[183][184] Available on Windows 10 and 11 Pro, Enterprise, and Education editions, it requires virtualization features like Hyper-V to be enabled and supports configuration via XML files for mapped folders or network access. As of January 2025, a newer version available via the Microsoft Store provides an improved WinUI 3-based interface, runtime features like clipboard and audio control, and command-line functionality, while requiring the base feature to be enabled.^[185][186] Microsoft Phone Link, formerly known as Your Phone and introduced in October 2018 with the Windows 10 October 2018 Update, facilitates seamless integration between Windows PCs and Android or iOS mobile devices.^[187] The companion Link to Windows app on mobile devices enables features like mirroring notifications, making and receiving calls, sending texts, accessing photos, and running mobile apps on the PC, all synced via a Microsoft account.^[188] Recent updates, including the rebranding to Phone Link in 2021, have expanded support for screen mirroring and cross-device file transfers, with enhanced iOS compatibility added in subsequent Windows 11 updates.^[189] The Xbox Game Bar, embedded in Windows 10 since its initial release in July 2015, offers an overlay interface for gamers to capture screenshots, record gameplay, monitor performance metrics, and access social features without exiting applications.^[190] Activated via the Win+G shortcut, it includes modular widgets for audio mixing, Spotify controls, and performance overlays, with developer tools via the Game Bar SDK allowing third-party widget creation using UWP XAML apps.^[191] Integrated with Xbox services, it supports cross-play chatting and achievements, evolving in Windows 11 to include more accessibility options like screen reader compatibility.^[192] Windows telemetry components, part of the Connected User Experiences and Telemetry service introduced in Windows 10 in 2015, collect diagnostic data to improve system reliability, security, and user experience.^[193] Users can configure levels from "Required" (basic functionality data) to "Full" (detailed optional telemetry) via Settings, with enterprise controls through Group Policy or MDM to limit data sent to Microsoft endpoints.^[194] This includes device health metrics, app crash reports, and usage patterns, all anonymized and compliant with privacy standards, connecting to services like vortex.data.microsoft.com for aggregation.^[195] Windows Copilot, an AI-powered assistant integrated into Windows 11 starting with the September 2023 update (version 22H2), provides contextual help for tasks like summarizing documents, generating ideas, or automating workflows directly from the taskbar.^[196] Built on large language models from Microsoft and OpenAI, it supports natural language queries, code suggestions in apps like Notepad, and vision-based analysis of screen content, with privacy controls to process data locally or via cloud.^[197] As of 2025 updates, it extends to enterprise scenarios with Microsoft 365 integration for secure, grounded responses.^[198]