Boot sequence for Windows NT, 2000, XP and 2003:

BIOS: performs Power On Self Test (POST)

BIOS: loads MBR (Master Boot Record) from the boot device

MBR: contains a small amount of code that reads the partition table and loads the boot sector from the system volume

BOOT SECTOR: reads the root directory of the system volume at loads NTLDR

NTLDR: reads BOOT.INI from the system volume to determine the boot drive.loads and executes NTDETECT.COM from the system volume to perform BIOS hardware detection

loads NTOSKRNL.EXE, HAL.DLL, BOOTVID.DLL from the boot (Windows) volume

NTLDR: loads WINDOWSSYSTEM32CONFIGSYSTEM which becomes the system hive HKEY_LOCAL_MACHINESystem

NTLDR: loads drivers flagged as "boot" defined in the system hive, then passes control to NTOSKRNL.EXE

NTOSKRNL.EXE: creates the Session Manager process (SMSS.EXE)

SMSS.EXE: starts WINLOGON.EXE

WINLOGON.EXE: starts the Local Security Authority (LSASS.EXE) and the services controller (SERVICES.EXE)

The SYSTEM volume is the partition from which the boot process starts, containing the MBR, boot sector, NTLDR, NTDETECT.COM & BOOT.INI