The Big Picture: From Button to Desktop
You press the power button. About ten to thirty seconds later you see your desktop. In between, dozens of different programs run, one after another, each one starting the next. This is the boot process. The word comes from "bootstrap": the old saying about pulling yourself up by your own bootstraps. The computer starts with nothing and lifts itself, step by step, into a working system.
Think of it like opening a shop in the morning:
- Someone switches on the power (the power supply).
- A security guard walks the building and checks every room (the firmware and its self-test).
- The guard finds the shop keys (the boot disk) and hands them over.
- The manager (the boot manager) decides which shop to open.
- The crew carries in the stock (the loader brings in the kernel and key drivers).
- The staff take their places (the kernel, services).
- Finally the front door opens to customers (you sign in and see the desktop).
Every step depends on the one before it. If one step fails, the shop does not open. That is why knowing the order helps you fix a PC that won't start.
This chapter follows Windows on a modern PC from the first spark of power to your desktop. Where older PCs worked differently, we say so. Chapter 5 explained BIOS and UEFI, the first program that runs. Here we see the whole journey.
1.1 Power Button Pressed
What it is: The very start of the chain. Pressing the power button does not run any software. The button is just a switch that sends a tiny signal to the motherboard. The motherboard then asks the power supply (PSU) to turn on.
Why does the motherboard still react when the PC is "off"? Because the PSU always sends a small trickle of power (called standby power, +5 VSB) to the board. A small circuit on the board is awake all the time, waiting for the button.
| Moment | What happens |
|---|---|
| Cold boot | The PC was fully off. Everything starts from nothing. |
| Warm boot (restart) | The PC resets without cutting the power. Windows does an orderly shutdown first. |
| Wake from sleep | RAM was kept alive, so Windows continues where it stopped. This is not a full boot. |
| Wake from hibernate | RAM was saved to disk and is reloaded. Also not a full boot. |
Windows tip: Since Windows 8, Shutdown (with Fast Startup on) does not close the kernel completely. It saves the kernel's state to disk, like a mini-hibernate, so the next start is faster. Restart always does a full shutdown and a full boot. If you want to test the real boot, use Restart.
1.2 The Complete Chain to Desktop
What it is: A list of every big step, in order. Each box starts the next one:
┌──────────────────────────────────────────────────────────┐
│ 1. FIRMWARE (BIOS / UEFI) - about 5 to 20 seconds │
│ Power on, POST, find the boot disk │
└──────────────────────────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 2. BOOT MANAGER - under 1 second │
│ bootmgfw.efi / bootmgr reads the BCD │
└──────────────────────────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 3. WINDOWS LOADER - 1 to 3 seconds │
│ winload loads the kernel, drivers, SYSTEM hive │
└──────────────────────────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 4. KERNEL - roughly 5 to 15 seconds │
│ ntoskrnl.exe sets up memory, processes, drivers │
└──────────────────────────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 5. USER MODE - services and sign-in │
│ smss, wininit, services, winlogon, LogonUI │
└──────────────────────────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 6. DESKTOP │
│ explorer.exe, taskbar, startup apps │
└──────────────────────────────────────────────────────────┘
(The times are rough. They change a lot between PCs. A fast SSD with a modern board can finish all of this in well under 30 seconds. A very old PC with a hard drive can take several minutes.)
A few words you will meet on the way:
- Firmware: the program stored on a chip on the motherboard. It runs first.
- Boot manager: a small program that picks which operating system to start.
- Loader: a program that copies the operating system's core into RAM.
- Kernel: the heart of the operating system. It controls memory, programs and hardware.
- User mode: the normal "safe" area where ordinary programs run, away from the kernel.
1.3 Major Stages Overview
What it is: The six boxes above can be grouped into four big stages. Each stage has one job and hands over to the next.
| Stage | Who is in charge | The job | Chapter 6 section |
|---|---|---|---|
| Pre-boot | Hardware, then firmware | Power on, reset the CPU, set up RAM | Sections 2 and 3 |
| Find the OS | Firmware | Test hardware (POST), pick the boot disk, run the first program on it | Sections 3 and 4 |
| Windows boot | Boot manager, loader, kernel | Load Windows into RAM and start it | Sections 5, 6 and 7 |
| User space | Session manager, services, Winlogon | Start background services, ask for your password, show the desktop | Sections 8 and 9 |
Another way to see the same thing: who owns the computer at each moment?
Time ──────────────────────────────────────────────────────────►
[ Hardware ][ Firmware ][ Boot manager ][ Loader ][ Kernel ][ Windows services + you ]
power on BIOS / UEFI bootmgr winload ntoskrnl smss ... explorer
Early on, tiny simple programs run with no operating system at all. As the chain goes on, each program can use bigger and smarter tools. By the end, you have a full multitasking system.
1.4 Two Ways to Boot: Legacy BIOS and UEFI
What it is: Over the years, PCs used two firmware styles. Windows can boot on either, but the first steps differ.
| Legacy BIOS boot | UEFI boot | |
|---|---|---|
| Age | Since the 1980s | Common since around 2012 |
| Disk layout | MBR (Master Boot Record) | GPT (GUID Partition Table) |
| First program on disk | Code in the first 512 bytes of the disk | A file on the EFI System Partition, such as bootmgfw.efi |
| Windows boot manager | bootmgr | bootmgfw.efi |
| Windows loader | winload.exe | winload.efi |
| Extras | Few | Secure Boot, faster start, big disks |
Most PCs sold today use UEFI. Windows 11 requires it. Sections 4 and 5 show both paths side by side.
Check yours: Press
Win + R, typemsinfo32, press Enter. On the System Summary page, look at BIOS Mode. It says UEFI or Legacy.
Summary
| Term | Plain meaning |
|---|---|
| Boot / bootstrap | The chain of programs that starts a computer from nothing |
| Cold boot | Starting from fully off |
| Restart | A reset with a full Windows shutdown and boot |
| Fast Startup | Shutdown that saves the kernel to disk to start faster next time |
| Firmware | The first program, stored on the motherboard |
| Boot manager | Picks the operating system to start |
Loader (winload) | Copies the kernel and key drivers into RAM |
Kernel (ntoskrnl.exe) | The core of Windows |
| User mode | Where ordinary programs and services run |
| UEFI / Legacy BIOS | The modern and old styles of firmware boot |