[Topic] Window Stations and Desktops [Description] 
Windows provides three main categories of objects: user interface, graphics device interface (GDI), and kernel. Kernel objects are securable, while user objects and GDI objects are not. Therefore, to provide additional security, user interface objects are managed using window stations and desktops, which themselves are securable objects.