# Windows Neptune build 5111.1

OS family Build of Windows Neptune x86 1999-12-10 +444 days after original install date Consumer Not required for the clean copy(W7XTC-2YWFB-K6BPT-GMHMV-B6FDY for others)

Windows Neptune build 5111.1 is a Milestone 2 build of Windows Neptune. As of 2020, it is the only leaked build of Windows Neptune. It's also known as "Microsoft Neptune Developer Release" and was sent to developers on 1999-12-27. Much of the branding (including Winver) still says "Windows 2000". Although many files have the version "5.50.5111.1", and this is even the true version in the kernel, the kernel actually reports "5.00.5111.1" to match the subsystem version in its own PE header.

This build cannot be upgraded from Windows 98. It includes the Activity Centers, a new login interface and user management application, an early version of Internet Explorer 5.5, as well as the new Help Center and AutoUpdate from Windows ME and several other improvements. It's configured to hibernate rather than shut down by default.

## Multiple different copies

There have been several different disc images available online over the years, and most have been modified in various ways, for example to disable the timebomb. The copy currently on BetaArchive was dumped from the original disc and doesn't feature any modifications. It doesn't require a product key, but has an active 444 day timebomb.

### Other disc

In 2011, a person with the nickname iapx432 revealed they have an original disc of a Neptune Developer Release.[1] The contents of the disc were reportedly the same as the leaked copy of 5111.1. The artwork printed on that disc differs greatly to the well known disc. Photos of the disc can be seen in the gallery below.

However, the disc label also says "Software Expires: 6/1/2001". The leaked copy of build 5111.1 has a 444-day timebomb since the date of installation, and an additional date check during setup, which will display a warning but allow the installation to continue. The date which is checked by setup is neither 2001-01-06 nor 2001-06-01, casting doubt on the common belief that the build on this disc is indeed exactly the same as the leaked copy.

## New features and interesting finds

### Activity Centers

Although this build includes the Activity Centers, they are largely broken and incomplete. Several members of the community have attempted to fix or recreate them over the years, with varying degrees of success.

The three main Activity Centers (Photo Center, Music Center and Game Center) and the Start Page are located primarily in ACCORE.DLL, which needs to be registered to install the Activity Centers. You do this by copying the file from the CD to C:\WINNT\System32 and running regsvr32 accore.dll. Once this is done, the Activity Center files are located in C:\WINNT\Activity. The Start Page can then be used as the Active desktop page.

The executables for the above mentioned centers are missing in this build, so the default links to them don't work. It's possible to open the individual centers with MSHTA.EXE instead.

Although the new login screen is functionally identical to the one introduced later in Windows XP, it's actually another HTML application. It's located in LOGONHTA.DLL, with some of the functionality in SHGINA.DLL. This same login screen was later used in Whistler build 2211, but then scrapped soon after in favour of a DirectUI-based one.

The power button in the bottom left corner will initiate a hibernation by default. To restart the computer, hold down the SHIFT key before clicking the button. To fully shutdown the computer, hold down the CTRL key before clicking the button.

The login screen is listed in the Add/Remove Programs control panel as "Microsoft Neptune Neptune Logon", but attempting to uninstall it fails.

### Windows Identities

This is the new user management control panel applet in NUSRMGR.CPL, also an HTML application. While the old user management control panel applet from Windows 2000 is still present initially, it will be removed by the login screen code after it's displayed for the first time. This feature is also functionally very similar to its successor in Windows XP.

Neptune defines four account types:

• Owner - This type of account is intended for people who can make system-wide changes to the computer. A person with an Owner account can make changes to all Windows accounts that have been created for this computer, such as changing account names, pictures, passwords, and account types.
• Adult - This type of account is intended for people who can make standard changes to the computer, such as installing applications and software.
• Child - This type of account is intended for children whose activity should be monitored and who should be safeguarded against corrupting computer settings and deleting important system files. Restricted accounts have limited access to internet content and can have limited computer time. A person with a child account can only change his or her own account name and picture.
• Guest - This type of account is intended for Guests to use the computer. Guest accounts have restricted access to this computer. Settings, Themes and web browsing history will be erased each time a person with a guest account turns off the computer. Only Documents created by a guest person will be saved.

Windows XP simplified these account types into Administrators (Owner), Standard users (Adult) and a single Guest account which can be enabled.

### Help and Support / PCHealth

Help and Support (previously called Help Center) has only loose ties to other Activity Centers, as it's actually stored separately from them in C:\WINNT\PCHealth\HelpCtr and is built on top of the PCHealth framework. It appears to have been ported directly from a build of Windows ME, because it still contains many references to Windows Millennium. Despite the presence of this new Help Center, the old Windows 2000 Help application can still be accessed from the Start menu's Help option, although a link to it has been commented out in the new Help Center homepage. There is a broken link to the System Restore executable, which is not present in this build; it's unclear whether Neptune was to include this feature eventually or not.

Available support topics are stored in a Microsoft Access database file called HCDATA.MDB in C:\WINNT\PCHealth\HelpCtr\Database. The whole program was designed so that the database can be updated, possibly from online sources, using the HCUPDATE.EXE program and DBUPDATE.CAB MS Cabinet archive.

PCHealth is set to run at every startup to monitor the minidump directory for new minidumps after system and application crashes. If it detects such an event, it will prompt the user to submit relevant information to Microsoft for analysis via the Bug Reporting page in the Help Center.

The Bug Reporting page can be accessed either through Help Center or its dedicated desktop shortcut. It's stored in BUGREPT.CAB before it's installed. Although it's from Windows ME, it was adapted for Neptune. The string at the bottom of the page is "Bug Reporting Page Version 5.00.00.5112", and bug reports are saved to C:\neptune_bugs by default. The Bug Reporting page contains two hidden sections with instructions for submitting additional files, one for DirectX and one for System Restore.

### Windows Update Auto Update

Another HTML application shared between Millennium and Neptune. It was meant to facilitate automatic updates via Windows Update, but doesn't seem to be working yet. The initial dialog will only be shown on the first run, allowing the user to read the license agreement and change AutoUpdate settings. Auto Update version in this build is 5.4.284.1, and is located in the C:\WINNT directory. The main executable is WUAUCLT.EXE, while the HTML UI components are in WUAUHTML.DLL.

### Mars

An executable named MARS.EXE can be found in every leaked Windows Millennium builds, as well as Neptune. In early Millennium builds, the icon is a blue lower-case "m" on white background. Later on, it was changed to a yellow square smiley (";)") with black borders. The ProductName description states "Microsoft(R) Mars (R) Communications System".

MARS.EXE interprets commands by forwarding user input to marscore.dll that loads .XML and .HTM/HTA into a windowed shell application, giving the web pages the appearance of an actual program.

### WIA

The new Windows Image Acquisition technology is present in this build. This includes the Still Image Service, new drivers for various scanner and camera models, and a new Control Panel folder for managing them. However, Still Image Service appears to be broken in this build, see the Known issues section for more information.

### Fast boot

Neptune booting with fast boot enabled

Fast boot is a new feature presumably designed to speed up system boot time. It's contained in FASTBIKE.DLL and installed as a service. It can be enabled in the Power options, but only if Neptune is installed on a FAT partition. On the next boot, Neptune will display a window saying "Optimizing boot". At some point it creates a roughly 2-2.5 MB large file named BOOTIMG.IMG in the C:\WINNT\boot folder. The image appears to contain the initial memory snapshot of boot drivers and the kernel. The specifics of how this helps speed up the boot process remain unclear.

Internal strings call this "Profile Assisted Boot Accelerator" or "PABA". DISKPERF.SYS, the Disk Performance Driver, has also been extended to support this feature. The boot screen is displayed with a lime progress bar instead of the usual blue if Neptune boots in fast boot mode.

A similar feature would later appear in Windows 8, 8.1 and 10 under the name of Fast Startup.

### Prefetcher

This build is the first to have the Prefetcher feature which was later introduced by Windows XP. It's meant to speed up system boot and application loading time by caching the required files. .PF files are stored in the C:\WINNT\System32\prefetch folder. Prefetcher is enabled by default; to disable it, create a new DWORD value named DisablePrefetcher in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management and set it to 1, then restart the system.

### Application Manager

Application Manager was envisioned as a new component for centralized management of games and other applications, providing functionality such as disk quotas and file clean-up. This is provided by APPMAN.DLL and APPMANDP.DLL, but the user interface for this feature, which was added to the Game Controllers control panel applet (JOY.CPL) in Windows ME, is not present in this build.

This feature appears to have also facilitated Game Activity Center's game discovery feature at some point, before the Game Center was dropped. Later it became part of DirectX 8.0, as it is present in the early beta build, but was subsequently removed before the final release.

### Resource Manager

This appears to be a new driver-related component, but its purpose is not yet understood. It's comprised of two files, a "WDM Resource Manager" driver RESMGR.SYS, and the "Resource Manager User Mode" RESMGRU.DLL. It was later added to Windows XP build 2202 as well, but was then removed again soon after.

### Net crawler

Net crawler was introduced in Windows ME and then ported to Neptune. It automatically searches the local network for shared folders and printers, and then creates shortcuts for them in the My Network Places folder. This feature is enabled by default in this build, but can be disabled by checking the "Disable auto browse for shared folders and printers" checkbox in the advanced folder view options.

### Firewall

There is a checkbox to "Enable Firewall mode for this connection" on every network connection's Sharing options page, which suggests a firewall feature of some sort may have been planned for Neptune. It doesn't appear to be functional, though. A built-in firewall was later included with Windows XP.

### Submit a comment

Also a first appearance in this build is the "Comments?" link in the title bar of most dialog windows. Clicking it brings up a feedback dialog from INSTCOLL.DLL with a brief form to explain the problem. This would then be sent anonymously, along with a screenshot of the offending window, to Microsoft.

The "Comments?" link in dialog title bars can be disabled by changing the DWORD registry value Enable in HKEY_LOCAL_MACHINE\Software\Microsoft\PCHealth\Clients\Dialog Comments from 1 to 0. This feature was also added to Windows XP build 2202, but the relevant registry key has changed and also allows for changing the link text itself as well.

### One-touch setup

One-touch setup

One-touch setup (ONETOUCH.EXE) is used to launch an automatic unattended upgrade, possibly intended to be launched from a network share with the build files.

Upon launching, it copies UNATTEND.TXT to temporary files and displays a user account name prompt. It then attempts to modify the file with the specified name and the current computer name. This is affected by Windows marking files copied from a CD-ROM as read-only, making the application silently fail unless one removes said attribute from the copied file when the initial window appears. Finally, it launches the regular setup executable (WINNT32.EXE) in unattended mode.

The executable has a file version of 5.00.1636.1, the same as the setup billboard library in Windows XP build 2250. It is unknown whether this is coincidental or the two features are related in some way.

Timestamps in the unattend file suggest that the feature was implemented around 1999-08-09:

;/  Revision History:
;/      990809  dane    Created.
;/      991104  nickl   Modified to facilitate an unattended clean install.


### Neptune Upgrade Service

New version dialog

WINNT32A.DLL and WINNT32U.DLL setup libraries also contain two extra dialogs, one of which has a placeholder string saying "Files for Neptune build 5XXX are now available.". This dialog actually stays hidden, but is needed to run the second dialog with the postpone options, which is then displayed to the user. HIVESFT.INF also contains a commented line which would add ntcselfh.exe /noui (this program is missing from the leaked copy) to the list of programs to be started on system startup; the program is labeled as "Neptune Self-Host Reporting Daemon".

It is believed these were all part of Neptune's new self-hosting update system. NTCSelfh would probably regularly check for new builds in the background and run WINNT32.EXE with the /SILENTCOPY and /UNATTEND parameters on a network share. Setup would then copy temporary files to the machine and display the mentioned dialogs to inform the user a new update is available, with the build number obtained from the copied SETUPDD.SYS.

This dialog can also be manually triggered by running winnt32 /silentcopy /unattend:C:\path\to\unattend.txt. Clicking Upgrade Now will begin the installation.

### Neptune Credential Manager

KEYRING.EXE appears to be the precursor to the Credentials Manager from later versions of Windows, meant for managing various user credentials in one place. It's described as an "internal Microsoft tool" in the UI, while the file description says "Neptune-to-Neptune Upgrade".

Trying to add a credential on a non-owner account will result in an error message saying you can only add credentials on accounts with administrator rights in this build.

### .NET Framework

The file FUSEWIN.DLL references various nonexistent files, one being MSCOREE.DLL. In the context of the .NET project, Fusion was the codename for the CLR Loader, a component that loads CLR assemblies into .NET AppDomains. In the .NET Framework 1.0 Beta 1 (the earliest version available as of 2020) MSCOREE.DLL is present and is a component of the Common Language Runtime. In addition, functions within FUSELOAD.dll reference .NET components such as ASSEMBLYINFO and assembly creation. This file, while non-functional due to missing imports, is a component of an extremely early version of the .NET Framework, several months before its PDC tech preview (from 2000-07) and potentially even before the .NET name.

Another component of the .NET framework found in Neptune is SYSXML.DLL. This is a .NET assembly using what appears to be an earlier header format and cannot be opened in .NET decompilation tools, although the Cor20 header does show in dnSpy. It is the System.Xml.dll component used in .NET apps for interfacing with XML files and refers to itself as such internally, although it refers to itself as "Microsoft(R) XML+", with the file description being "XML+ (MSXML for COM+)". COM+ is a codename/preliminary name for the .NET framework.[2]

### Joindom

JOINDOM.EXE is set to run at first login and is used to create the first user account. It's described as a "pre-release Microsoft utility" in the UI, several strings inside this file suggest it's part of the out-of-the-box experience (OOBE), while the file description says "Neptune-to-Neptune Upgrade".

### My Pictures Slideshow screensaver

This new screensaver first appeared in Windows ME build 2394, and was ported to Neptune sometime after that. It plays a slideshow of the pictures in the My Pictures folder as the screensaver.

### Neptune Server

This build includes the "Configure my server" wizard (SRVWIZ.DLL) from Windows 2000 Server editions, which is rather unusual for home and professional editions. An interesting fact about this particular component is that it's also an HTML application.

There are also several "Neptune Server" strings inside several setup files, though this could simply be the result of a mass rebranding effort. Although multiple SKUs are defined in the anti-trust documents, it's not entirely clear whether Neptune would also include a server edition.

### Driver signer

Drivers in this build are signed by "Microsoft Consumer Windows Publisher", which was also used in Windows ME, but not Windows 2000.

### Multiple desktops

The MULTIDSK.EXE program found on the disc enables the creation and use of multiple desktops. Although this was first introduced in the Resource Pack for Windows NT 4.0, this build is the first to include it with the base OS.

## Known issues

### VirtualBox IDE bug

Like many late builds of Windows 2000, this build also suffers from the IDE bug in VirtualBox during installation and requires the workaround to be applied before installation to prevent it. In your VirtualBox installation directory, open a CMD window and run the following command: VBoxManage setextradata "VM name" "VBoxInternal/Devices/piix3ide/0/Config/IRQDelay" 1, where you substitute VM name with the name of your virtual machine. After the installation completes, you can run the same command with a 0 at the end instead of 1 to disable the workaround as it's not longer needed.

Alternatively, you can also try clicking your mouse and pressing keys on the keyboard very fast, to force a slowdown that will prevent a reboot.

### Still Image Service

The Still Image Service (imgsvc) is broken in this build and will fail to start. Because it's set to start automatically by default, it causes a delay when Windows Explorer is loading. This can be prevented by setting the startup type to either "Manual" or "Disabled" to prevent the service from starting automatically.

Attempting to open the new "Scanners and Cameras" Control Panel folder will fail for the same reason, hanging the Explorer window in the process.

### Upgrading Internet Explorer

Upgrading Internet Explorer to version 6.0 is not recommended, as it tends to break the HTML applications, especially the new login screen, which renders the build unusable. Some members have supposedly managed to workaround this issue and get a working install of Neptune with Internet Explorer 6.0, but the details of how to achieve this are unknown.

### Hibernation and shutdown

As mentioned at the start, this build is configured to hibernate by default. If ACPI is not supported or properly implemented on the (virtual) machine, the system state will still be saved, but a non-ACPI shutdown dialog will be displayed, telling you it's now safe to turn off your computer.

Shutting down can in some cases also result in a restart instead.

## Earlier build reference

This build includes the file TOSDVD.SYS with version number 5.50.5095.1, but it is unknown whether build 5095.1 of Neptune ever existed. It's possible this could be a late Milestone 1 or an early Milestone 2 build. Judging by the file dates, it would have been compiled before 1999-12-11.