Explain SAM in windows
SAM is generally called as Security account manager. The SAM subkey contains the user names, groups, passwords, and other account and security information needed for logging in. The SECURITY sub key contains general security policy information, such as minimum length for passwords, how many failed login attempts are tolerated, etc.
What is Winlogon.exe process
Winlogon.exe is also responsible for all user logins. The actual login dialog is handled by a separate program in msgina.dll to make it possible for third parties to replace the standard login with face print identification or something else other the name and password. After a successful login, winlogon.exe gets the user`s profile from the registry and from it determines which shell to run.
What is use of ntbootdd.sys file?
ntbootdd.sys are used for booting SCSI devices when no SCSI BIOS is available