Application accessing NTFS file system. What happens and when?

ok, have question haven't been able find readily available in searching i'm going ask gurus here.

when i'm opening file ntfs folder using application (microsoft word, example), happens underneath covers?

is winword.exe application requesting access file using access token, or there more complicated going on? i'd "windows internals-ish" breakdown on if willing provide it. feel free use technical jargon want if makes easier explain. should able pick of , i'll figure out rest.

 

thanks,

jason

from window interals 4th edition page 700.  ebook included in windows 2003 resource kit cd, or can purchase newer version of book amazon.com.

applications , system access files in 2 ways: directly, via file i/o functions (such as
readfile , writefile), , indirectly, reading or writing portion of address space
represents mapped file section. (see chapter 7 more information on mapped files.)
figure 12-8 simplified diagram shows components involved in these file system
operations , ways in interact. can see, fsd can invoked
through several paths:
■ user or system thread performing explicit file i/o
■ memory manager’s modified , mapped page writers
■ indirectly cache manager’s lazy writer
■ indirectly cache manager’s read-ahead thread
■ memory manager’s page fault handler

the book proceed explain each of methods in great detail.

Windows Server  >  Security