Windows NT 4.0 — windowsnt4.online
_
Windows NT 4.0
DeveloperMicrosoft
CodenameShell Update Release / Tukwila
RTMJuly 31, 1996
GAAugust 24, 1996
Final build4.0.1381.7097 (SP6a SRU)
KernelHybrid (NT 4.0)
Platformsx86, Alpha, MIPS, PowerPC
Succeeded byWindows 2000 (1999)
Support endJune 30, 2004 (Workstation)
Dec 31, 2004 (Server)

Windows NT 4.0

Windows NT 4.0 is a major release of the Windows NT operating system developed by Microsoft, targeting the data server and personal workstation markets. It was released to manufacturing on July 31, 1996, and to retail on August 24, 1996.

Its most prominent user-facing change was the adoption of the Windows 95 user interface — bringing the Start menu, taskbar, and Windows Explorer shell to the enterprise-grade NT kernel for the first time. Internally, Microsoft referred to it as the Shell Update Release (SUR).

NT 4.0 was the direct successor to Windows NT 3.51, and was itself succeeded by Windows 2000 in December 1999. It was also the last version of Windows NT to carry the "NT" branding in its product name — Windows 2000, while built on NT technology, dropped the moniker.

Despite Microsoft's push to migrate customers to Windows 2000, NT 4.0 remained widely deployed in enterprises well into the mid-2000s, testament to its stability and reliability.

History

Background

Windows NT 3.51, released in 1995, used the older Program Manager interface inherited from Windows 3.x. Meanwhile, Windows 95 had debuted to mass market success with its revolutionary new shell. Microsoft's goal with NT 4.0 was to bring that familiar, modern UI to the more powerful NT kernel — creating an OS suitable for both desktop users and corporate servers.

Development

The project was codenamed Shell Update Release (SUR), sometimes also referred to as Tukwila. A key and controversial architectural decision was made during development: the graphics subsystem (GDI) was moved from user mode into kernel mode. This dramatically improved graphics performance but meant that a buggy or malicious graphics driver could destabilise the entire system.

Release

NT 4.0 was released to manufacturing on July 31, 1996, followed by retail availability on August 24, 1996. Server editions followed in early September 1996. The release was well received, particularly in corporate environments where its stability over consumer Windows versions was valued.

Legacy

NT 4.0 became the longest-running version of Windows NT until Windows 2000's release four years later. Over its support lifecycle it received six official service packs, plus a Security Rollup Update. A planned seventh service pack was ultimately cancelled in April 2001, with Microsoft releasing Update Rollup 6a in its place.

On 12 February 2004, over 30,000 source files — partly for Windows NT 4.0 — were leaked onto the internet. The leak was later traced back to Mainsoft.

Features

Shell & UI

NT 4.0 brought the complete Windows 95 shell experience to the NT platform:

  • Start menu and taskbar
  • Windows NT Explorer (later known as File Explorer)
  • "My Computer", "My Documents", and "My" nomenclature for shell folders
  • Recycle Bin, shortcut icons, and the desktop as a folder
  • Per-user Start menu shortcuts, separated from shared shortcuts by a divider line

Extras from Microsoft Plus!

NT 4.0 also shipped with several features from Microsoft Plus! for Windows 95:

  • Space Cadet Pinball (3D Pinball)
  • Font smoothing (anti-aliasing)
  • Full window drag (show window contents while dragging)
  • High-colour icons
  • Wallpaper stretch-to-fit
  • Desktop Themes utility (via Resource Kit)

New Technical Components

  • CryptoAPI — Microsoft's cryptography API, introduced here
  • DCOM — Distributed Component Object Model
  • TAPI 2.0 — Telephony API, first TAPI release on Windows NT
  • Task Manager — the familiar Ctrl+Alt+Del task switcher
  • Winsock 2 and improved TCP/IP stack
  • DirectX support (limited)
  • NTFS defragmentation support
  • Internet Explorer 2 bundled
  • System Policy Editor
  • Partial Bluetooth 1.0 support (Service Pack 5+)

Architectural Change: GDI in Kernel Mode

One of the most significant under-the-hood changes was moving the GDI (Graphics Device Interface) and the graphics drivers from user mode into kernel mode. This yielded a major performance boost for graphical applications — particularly important as Windows NT competed with Windows 95 on the desktop — but at the cost of stability: a buggy display driver could now crash the entire OS.

Editions

Workstation

The standard desktop edition targeted at business users and power users. It offered the stability of the NT kernel with the familiar Windows 95 interface, supporting up to 2 processors and 4 GB of RAM.

Server

The server edition supported more processors and higher RAM limits, and included Internet Information Services (IIS) 2.0, Microsoft FrontPage 1.1, NetShow Services, and Remote Access Service.

Enterprise Edition

An enhanced server edition with support for up to 8 processors and clustering capabilities via the Microsoft Cluster Server (MSCS) add-on. Targeted at mission-critical enterprise deployments.

Terminal Server Edition

Released post-launch, this edition added multi-user remote desktop capabilities — an early precursor to what would become Remote Desktop Services in later Windows versions.

Embedded

A modular variant of NT 4.0 designed for embedded systems and appliances. It had the longest support lifecycle of all NT 4.0 editions, with extended support lasting until July 11, 2006.

Builds & Service Packs

Service Packs

NT 4.0 received six official service packs over its support lifecycle. Note that not all service packs were available for all CPU architectures:

Service PackNotes
SP1Available for x86 and MIPS
SP2Final release for PowerPC
SP3Required for Option Pack installation
SP4Option Pack install warns but proceeds
SP5Added partial Bluetooth 1.0 support
SP6Fixed CPUID >3 kernel crash; pulled due to severe bug
SP6aRevised SP6; final official service pack
Security Rollup (SRU)Released 2001; replaces cancelled SP7. Final build: 4.0.1381.7097

Option Pack (1997)

Microsoft released an Option Pack in 1997 that added server components including Personal Web Server, Transaction Server, Message Queue Client, FrontPage 98 Server Extensions, Internet Information Services 4.0, Windows Scripting Host, and more. It required SP3 or later. This was the only option pack ever released for a Windows version — its components were simply folded into Windows 2000.

Key Build Milestones

StageBuild
Beta 1Early pre-release
Beta 2Public beta
Release Candidate 1Near-final
Release Candidate 2Near-final
RTM4.0.1381 (July 31, 1996)
SP6a Security Rollup4.0.1381.7097 (final)

Hardware

Supported Architectures

NT 4.0 was one of the most architecturally diverse versions of Windows ever released, supporting four CPU families at launch:

  • x86 (IA-32) — PC/AT and PC-98 compatible systems
  • DEC Alpha — supported until August 1999 (SP6 dropped Alpha after SP4)
  • MIPS — only SP1 was released for MIPS
  • PowerPC — SP2 was the final service pack for PowerPC

NT 4.0 was the last version of Windows to support Alpha, MIPS, and PowerPC. Windows 2000 was x86-only, and non-x86 Windows would not return until Windows RT (ARM) with Windows 8.

x86 System Requirements

  • 486 processor or better (386 support dropped from NT 3.51)
  • Minimum 16 MB RAM
  • 110 MB hard drive space (varies by components)
  • VGA or better display
  • CD-ROM drive (floppy not required for installation, but needed for Emergency Repair Disk)

Known Compatibility Issue

Early builds of NT 4.0 would crash during setup or at boot if run on a processor with a CPUID value higher than 3 — meaning many modern (at the time) CPUs were affected. This kernel bug was fixed in Service Pack 6.

Trivia & Easter Eggs

The Hidden Credits Easter Egg

Windows NT 4.0 contains the Product Team credits Easter egg carried over from Windows 95. To trigger it, create a new folder on the desktop and rename it sequentially to each of the following names:

  1. and now, the moment you've all been waiting for
  2. we proudly present for your viewing pleasure
  3. The Microsoft Windows NT Product Team!

The egg is implemented in SHELL32.DLL, with references to "95" replaced by "NT". The Easter egg folder names are stored as custom hashes in the .text section of SHELL32.DLL, XOR'd with 0x95 as an obfuscation measure. Interestingly, early builds showed "SUR Shell Team" and "SUR Shell Test Team" — a reference to the Shell Update Release codename.

The Source Code Leak

On February 12, 2004 — years after NT 4.0's end of mainstream support — over 30,000 source files for Windows NT 4.0 (and Windows 2000) were leaked onto the internet. The leak was later traced back to Mainsoft, a company that had licensed the source code to port Windows APIs to Unix.

The Cancelled SP7

Microsoft originally planned a seventh service pack for NT 4.0. It was cancelled in April 2001, and the Security Rollup Update (also called SP6a SRU) was released instead. The cancellation signalled Microsoft's push to finally end NT 4.0 and move customers to Windows 2000 and XP.

Space Cadet Pinball

NT 4.0 was one of the first Windows versions to ship with 3D Pinball: Space Cadet, sourced from the Full Tilt! Pinball game by Maxis. The game would go on to become one of the most iconic included Windows apps, surviving through to Windows XP before being quietly dropped in Vista.

Overview windowsnt4.online