The Big Picture: From Button to Desktop

You press the power button. About ten to thirty seconds later you see your desktop. In between, dozens of different programs run, one after another, each one starting the next. This is the boot process. The word comes from "bootstrap": the old saying about pulling yourself up by your own bootstraps. The computer starts with nothing and lifts itself, step by step, into a working system.

Think of it like opening a shop in the morning:

  1. Someone switches on the power (the power supply).
  2. A security guard walks the building and checks every room (the firmware and its self-test).
  3. The guard finds the shop keys (the boot disk) and hands them over.
  4. The manager (the boot manager) decides which shop to open.
  5. The crew carries in the stock (the loader brings in the kernel and key drivers).
  6. The staff take their places (the kernel, services).
  7. Finally the front door opens to customers (you sign in and see the desktop).

Every step depends on the one before it. If one step fails, the shop does not open. That is why knowing the order helps you fix a PC that won't start.

This chapter follows Windows on a modern PC from the first spark of power to your desktop. Where older PCs worked differently, we say so. Chapter 5 explained BIOS and UEFI, the first program that runs. Here we see the whole journey.

1.1 Power Button Pressed

What it is: The very start of the chain. Pressing the power button does not run any software. The button is just a switch that sends a tiny signal to the motherboard. The motherboard then asks the power supply (PSU) to turn on.

Why does the motherboard still react when the PC is "off"? Because the PSU always sends a small trickle of power (called standby power, +5 VSB) to the board. A small circuit on the board is awake all the time, waiting for the button.

MomentWhat happens
Cold bootThe PC was fully off. Everything starts from nothing.
Warm boot (restart)The PC resets without cutting the power. Windows does an orderly shutdown first.
Wake from sleepRAM was kept alive, so Windows continues where it stopped. This is not a full boot.
Wake from hibernateRAM was saved to disk and is reloaded. Also not a full boot.

Windows tip: Since Windows 8, Shutdown (with Fast Startup on) does not close the kernel completely. It saves the kernel's state to disk, like a mini-hibernate, so the next start is faster. Restart always does a full shutdown and a full boot. If you want to test the real boot, use Restart.

1.2 The Complete Chain to Desktop

What it is: A list of every big step, in order. Each box starts the next one:

┌──────────────────────────────────────────────────────────┐
│ 1. FIRMWARE (BIOS / UEFI)  - about 5 to 20 seconds       │
│ Power on, POST, find the boot disk                       │
└──────────────────────────────────────────────────────────┘
                              │
                              ▼
┌──────────────────────────────────────────────────────────┐
│ 2. BOOT MANAGER  - under 1 second                        │
│ bootmgfw.efi / bootmgr reads the BCD                     │
└──────────────────────────────────────────────────────────┘
                              │
                              ▼
┌──────────────────────────────────────────────────────────┐
│ 3. WINDOWS LOADER  - 1 to 3 seconds                      │
│ winload loads the kernel, drivers, SYSTEM hive           │
└──────────────────────────────────────────────────────────┘
                              │
                              ▼
┌──────────────────────────────────────────────────────────┐
│ 4. KERNEL  - roughly 5 to 15 seconds                     │
│ ntoskrnl.exe sets up memory, processes, drivers          │
└──────────────────────────────────────────────────────────┘
                              │
                              ▼
┌──────────────────────────────────────────────────────────┐
│ 5. USER MODE  - services and sign-in                     │
│ smss, wininit, services, winlogon, LogonUI               │
└──────────────────────────────────────────────────────────┘
                              │
                              ▼
┌──────────────────────────────────────────────────────────┐
│ 6. DESKTOP                                               │
│ explorer.exe, taskbar, startup apps                      │
└──────────────────────────────────────────────────────────┘

(The times are rough. They change a lot between PCs. A fast SSD with a modern board can finish all of this in well under 30 seconds. A very old PC with a hard drive can take several minutes.)

A few words you will meet on the way:

  • Firmware: the program stored on a chip on the motherboard. It runs first.
  • Boot manager: a small program that picks which operating system to start.
  • Loader: a program that copies the operating system's core into RAM.
  • Kernel: the heart of the operating system. It controls memory, programs and hardware.
  • User mode: the normal "safe" area where ordinary programs run, away from the kernel.

1.3 Major Stages Overview

What it is: The six boxes above can be grouped into four big stages. Each stage has one job and hands over to the next.

StageWho is in chargeThe jobChapter 6 section
Pre-bootHardware, then firmwarePower on, reset the CPU, set up RAMSections 2 and 3
Find the OSFirmwareTest hardware (POST), pick the boot disk, run the first program on itSections 3 and 4
Windows bootBoot manager, loader, kernelLoad Windows into RAM and start itSections 5, 6 and 7
User spaceSession manager, services, WinlogonStart background services, ask for your password, show the desktopSections 8 and 9

Another way to see the same thing: who owns the computer at each moment?

Time ──────────────────────────────────────────────────────────►

[ Hardware ][  Firmware  ][ Boot manager ][ Loader ][ Kernel ][ Windows services + you ]
  power on    BIOS / UEFI    bootmgr        winload   ntoskrnl      smss ... explorer

Early on, tiny simple programs run with no operating system at all. As the chain goes on, each program can use bigger and smarter tools. By the end, you have a full multitasking system.

1.4 Two Ways to Boot: Legacy BIOS and UEFI

What it is: Over the years, PCs used two firmware styles. Windows can boot on either, but the first steps differ.

Legacy BIOS bootUEFI boot
AgeSince the 1980sCommon since around 2012
Disk layoutMBR (Master Boot Record)GPT (GUID Partition Table)
First program on diskCode in the first 512 bytes of the diskA file on the EFI System Partition, such as bootmgfw.efi
Windows boot managerbootmgrbootmgfw.efi
Windows loaderwinload.exewinload.efi
ExtrasFewSecure Boot, faster start, big disks

Most PCs sold today use UEFI. Windows 11 requires it. Sections 4 and 5 show both paths side by side.

Check yours: Press Win + R, type msinfo32, press Enter. On the System Summary page, look at BIOS Mode. It says UEFI or Legacy.

Summary

TermPlain meaning
Boot / bootstrapThe chain of programs that starts a computer from nothing
Cold bootStarting from fully off
RestartA reset with a full Windows shutdown and boot
Fast StartupShutdown that saves the kernel to disk to start faster next time
FirmwareThe first program, stored on the motherboard
Boot managerPicks the operating system to start
Loader (winload)Copies the kernel and key drivers into RAM
Kernel (ntoskrnl.exe)The core of Windows
User modeWhere ordinary programs and services run
UEFI / Legacy BIOSThe modern and old styles of firmware boot