MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

4-14 Chapter 4 Modifying and Troubleshooting the Startup Process
■ NTLDR uses information in the BOOT.INI file to display the boot loader screen,
from which you select the operating system to start. You can edit the BOOT.INI
file, including modifying ARC paths and using the optional BOOT.INI switches.
■ During the kernel load phase, the Windows XP Professional kernel (NTOSK-
RNL.EXE) loads and initializes. NTOSKRNL.EXE also loads and initializes device
drivers and loads services.
■ During the kernel initialization phase, the kernel initializes, and then NTLDR
passes control to the kernel. At this point, the system displays a graphical screen
with a status bar that indicates load status. Four tasks are accomplished during the
kernel initialization phase:
❑ The Hardware key is created.
❑ The Clone control set is created.
❑ Device drivers are loaded and initialized.
❑ Services are started.
■ During the logon phase, the Win32 subsystem automatically starts WIN-
LOGON.EXE, which in turn starts the Local Security Authority (LSASS.EXE) and
displays the Logon dialog box. You can log on at this time, even if Windows XP
Professional might still be initializing network device drivers.