"In the kernel" is a bit of a misnomer in Windows. The graphics subsystem is not in the NT kernel (which is a pretty-minimal microkernel), though it is within the same Win32 process as the one containing NT kernel services.
In other words: "within the kernel" from a userland perspective; in a separate security domain from NT's own perspective.
In other words: "within the kernel" from a userland perspective; in a separate security domain from NT's own perspective.