Conceptual, architectural explainers — how a subsystem actually works underneath.
How DrvFs mount metadata and per-directory case sensitivity interact with Windows ACLs, permissions, and tools on /mnt/c.
Controlling WSL versions, mounts, networking, and nested virtualization through Intune and the WSL ADMX template without blocking real developer work.
A field guide to global WSL 2 VM settings versus per-distribution boot, automount, networking, and interop configuration.
How Windows firewall policy reaches WSL traffic under mirrored networking, and why Linux iptables rules alone cannot describe the real host exposure.
How Windows interop, mounted drives, networking, and enterprise policy actually shape WSL's threat model, and why it isn't a sandbox for untrusted code.
How the Microsoft Store WSL package decouples updates from full Windows releases, and why that affects available features, policy, and troubleshooting.
Why enabling systemd in WSL does not guarantee daemon permanence, and how services should actually handle WSL's own lifecycle events.
Why WSL cannot expose arbitrary USB devices directly, and how Windows binding, USB/IP transport, and Linux drivers fit together in usbipd-win.
How WSLENV selectively crosses environment variables between Windows and WSL and translates paths without corrupting separators or leaking secrets.
Two genuinely different DOS executable formats, with real structural differences in how each loads into memory and why COM files had a strict 64K limit.