Accessing Kernel related files

Hi,

What restricts applications to access kernal related files in WinX. If their is this restriction how are those API's filtered out?