Window Stations and Desktops
Windows provides three main categories of objects: user interface, graphics device interface (GDI), and kernel. Kernel objects are securable, while user objects and GDI objects are not. Therefore, to provide additional security, user interface objects are managed using window stations and desktops, which themselves are securable objects.
For more information, see the following topics: