Description:This text discusses the undocumented Windows NT API calls the authors have investigated in two years of research and consulting on installations running Windows NT versions 5.51, 4 and 2000 betas. These undocumented APIs not only show how NT works, but also reveal the security risks inherent in NT.