In Windows NT, a 16-bit MS-DOS application runs in the context of the VDM. Likewise, any TSRs or 16-bit drivers also run in the VDM layer, just as they would on a normal MS-DOS machine. Attempts to perform privileged hardware access from the VDM layer must be intercepted and routed to the kernel-mode device driver where those operations can occur without compromising system integrity.
There are two strategies for intercepting an application’s attempts to access its hardware:
These two strategies and the support routines provided by Windows NT are discussed in the following sections.