pfaffle
	windows
		users groups
		win filesystem
		registry
		windows internals
			drivers
			services
			syswow64
			windows event logs
		management with control panel and MMC


	mmc vs. control panel

	on the command line
		'set' lists environment variables

	User Account Control - UAC
		started with Vista
		principle of least privilege

	Access Contol List - ACL
		owner is different;
			can help you out of a catch-22
			with e.g. an administrator is added
			to a deny-permission type group
		groups
			auth. users
			SYSTEM
			Administrators
			Users
		allow
			not having it means you
				don't have the permission
		deny
			unix doesn't have it
			having it means you
				can't be given permission
			it trumps allow permission

		icacls , cacls
			command line permissions tool

		.cmd, .bat are batch files

		registry
			regedit
			hives
				registry keys/sub-keys
					values
			HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
			Security Authentication Manager - SAM
				HKEY_LOCAL_MACHINE\SAM
			HKEY_USERS
				entries are Security Identifiers - SID
			HKEY_CLASSES_ROOT
				handlers
				default applications for extension types

		Globally-Unique Identifier - GUID

		Windows on Windows(64-bit) - WOW64
			for backward compat. w/32-bit apps
			32-bit apps see sysWOW64 directory as System32 "magically"