Check out

http://secinf.net/info/nt/wardoc.txt

Rhino9 have written a very good doc on it...