A+ Chapter 15

Ways to boot into XP Recovery Console

- Option 1 - boot system w/ XP CD, run Recovery Console as repair option. - Option 2 - while system is working properly, install Recovery Console from XP CD-ROM. Appears automatically as a startup option when you restart your comp.

Selecting files & drives to be backed up in Windows 7 Backup and Restore

There are two drop down menus: one of data files (libraries of different users that can further opened) and one of disks (which can also be further expanded). There are check boxes next to each file/drive you want to backup; check the ones you want to backup.

Device Manager Code 1

This device isn't configured properly. Update the driver

Repairing the BCD store

1. Select Startup Repair from the System Recovery Options. If this doesn't repair the system properly and automatically restart it, move on to the second step. 2. Select Command Prompt and type "bootrec /rebuildbcd" without the quotes. If it works, it should present you with an installation path of a Windows directory; to add the entry to the BCD store, type Yes. 2b. If bootrec.exe can't find the missing Windows installation, you have to remove the BDC store and re-create it. To do this: type: Bcdedit /export C:/BCD_Backup (hit Enter) ren C:/boot/bcd bcd.old (hit Enter) Bootrec /rebuildbcd (hit Enter)

NTBackup

A Windows XP backup program that can be run from the GUI or command line.

BCD

Boot Configuration Data. The configuration information used by Windows 7 & Vista at startup to determine how to boot the system.

Recovery Console Command Bootcfg

Boot file (boot.ini) config. and recovery. Can also rebuild lost boot.ini

Restoring missing NTLDR file

Boot from the XP CD into the Recovery Console; then type in this command and hit Enter: copy d:/i386/ntldr c:\ (replace d: with the drive letter used by the XP CD-ROM).

Start Windows normally

Can be used to boot regular Windows. Option listed in case user inadvertently presses F8, but doesn't want to use any Advanced Boot Options.

Recovery Console Command Attrib

Changes file/folder attributes.

Recovery Console Command Chkdsk

Checks disk and displays status report, use /r option to repair bad sectors.

Recovery Console Command Cls

Clears scren.

Recovery Console Command Net Use

Connects network share to drive letter.

Recovery Console Command Copy

Copies single file to other drive/folder, automatically uncompresses files from Windows CD during process, can't copy to removable media.

Recovery Console Command Mkdir

Creates directory.

Enable Boot Logging

Creates ntbtlog.txt file.

Registry

Database of all hardware, software, and system settings in Windows. You usually don't need to edit it, but sometimes, you might need to access it to: • View a system setting that can't be viewed normally • To add, modify, or remove a Registry key that can't be accessed normally; you might need to do this to remove traces of a program or hardware device that was uninstalled improperly. • Back up a Registry to a file.

Defrag

Defragments files to improve file access speed, especially on a frequently edited drive that is mostly used up. When you save a file, the bits of data are saved to different parts on the volume, rather than to the location of the original file; this happens over time, and is called "fragmentation". Defragging brings those bits back together into one, unified file, allowing it to be accessed faster and stuff like that.

Recovery Console Command Rd

Deletes directory.

Recovery Console Command Del

Deletes single file.

Device Manager Code 12

Device can't find enough free resources to use, if you want to use it, disable one of the other devices in the system. Use Troubleshooting Wizard in Device Manager to determine where conflict is, and disable conflicting device, or just disable the problem device.

Device Manager Code 10

Device can't start. Update driver, view Microsoft Help and Support article 943104 for more info.

Device Manager Code 22

Device is disabled, enable the device.

Properties Device Manager tab

Device-specific settings; applies to multimedia devices.

Creating a Restore Point (XP)

First, click Start, All Programs, Accessories, System Tools, and then System Restore; this opens the System Restore window. Click Create a Restore Point and click Next. Type a descriptive name for the restore point, like "before I installed etc.", then click Create. The current hardware and software configuration is stored as a Restore Point.

SFC

System File Checker. Used to check system files & replace damaged/invalid files with the correct versions. Run command "sfc /scannow" to scan the computer for corrupt files to be repaired/files to be replaced.

Image backup

System backup that stores all info on the system including the OS, programs, settings, and data. Most recent image backup programs also support restoration of individual files.

Details Device Manager tab

Tech. details about device (added in XP SP2); applies to all devices.

boot.ini

The configuration information used by XP to determine how to boot the system.

What to do before using System Restore

Try the Last Known Good Configuration; this can be accessed from the Windows Advanced Boot Options menu by pressing F8 while the comp. is booting up.

Fixboot and Fixmbr (XP)

Two utilities available from XP Recovery Console for fixing boot problems.

Using SFC

Type "sfc /scannow" to scan for corrupted files to be repaired/missing files to be replaced. "sfc /scanonce" scans all protected files at next boot. "/scanboot" scans all protected files every time system starts. "/revert" returns scan setting to default, "/purgecache" and "/cachesize=x" enables a suer to delete the file cache & modify it's size.

Directory Services Restore Mode

Used to restore domain controller's active directory (Windows Server). Even though it's listed, it's not used in 7 or Vista.

Windows 7/Vista boot errors

You use the bootmgr and BCD files at startup; if the files are corrupted or missing, you will see one of these errors at startup: • BOOTMGR is missing - displays if bootmgr file is missing or corrupt. There'll be a black screen that says Press Ctrl+Alt+Del to Restart, but it'll take you back to the same error. • The Windows Boot Configuration Data file is missing required information - bootmgr entry missing in the BCD or the Boot/BCD file on the active partition is broken or missing.

Selecting a restore point in XP

You are presented with a calendar; white dates have no restore point, while dates highlighted blue do have a restore point. On the right, a small box will tell you the date and description of the restore point you have selected.

Things you need to restore a system with ASR

You need an XP Professional distribution CD, the ASR backup, the ASR floppy disk, and a supported floppy drive.

Creating a System Repair CD

You open the Backup and Restore Center in Control Panel under System and Security, then click Create a System Repair disc link. Backup and Restore center is the successor to XP's NTBackup.

MSConfig

System Configuration is used to display & configure boot options and to troubleshoot other problems.

Recovery Console Command Fixboot

Writes new partition boot sector onto specified partition; often used w/ Fixmbr.

BSOD

Blue Screen of Death. Common name for STOP error.

Restore point

A file that stores the system configuration accessed when using System Restore to go back to a system configuration before certain changes were made.

Debugging Mode

Advanced diagnostic tool that enables use of debug program to examine system kernel for troubleshooting.

Disable driver signature enforcement (Vista & 7 only)

Allows drivers containing improper signatures to be installed.

Error formatting on a BSOD

At the top, in the second line, the text describing the error by name is shown; search this to find out what the error is. The last line lists the error: it's usually formatted as 0x followed by a long string of numbers; the final two digits and the beginning "0x" are the error code. Exa: error code for 0x0000000A is 0x0A.

ASR (XP)

Automated System Recovery. Special backup routine that can be used to restore an unbootable system; user must then reinstall apps and restore data files to complete recovery process.

Recovery Console Command Disable

Disables system service or device driver. Helpful if Ntbtlog.txt (bootlog) indicates service/device driver preventing system from starting.

Recovery Console Command Set

Displays & sets environment variables, can be used to enable copying files to removable media, use of wildcards, and other options within Recovery Console if system security settings are adjusted.

General Device Manager tab

Displays device type, manufacturer, location, status, troubleshoot button, and usage. Applies to all devices.

Recovery Console Command Map

Displays drive letter mappings. Useful if run before using Fixboot or Fixmbr to make sure you work w/ correct disk or drive letter.

Device Manager

Displays driver, resource, 7 version info for hardware devices.

Event Viewer

Displays event logs for troubleshooting & management.

Recovery Console Command Help

Displays list of commands to be used.

Recovery Console Command Dir

Displays list of files & subfolders in folder. Lists file/folder attributes for each item listed.

Recovery Console Command ChDir (CD)

Displays name of current folder or changes current folder; requires quotes around folder names with spaces.

Recovery Console Command More

Displays text file.

Recovery Console Command type

Displays text file.

Volumes Device Manager tab

Drive info like status, type, capacity, etc. Click Populate to retrieve info, applies to disk drives.

Driver Device Manager tab

Driver details & version info; applies to all devices.

Device Manager Code 3

Driver for device might be corrupted, or system might be running low on memory or other resources. Close some open apps, uninstall & reinstall river, install more RAM.

DLL

Dynamic Link Library. A binary file used by Windows or a program. A file necessary to run a program and do stuff with it.

Windows Repair Discs (7 & Vista)

Enables user to run WinRE from bootable CD/DVD. Can be created w/ Vista SP1 or higher and with any 7 version.

STOP error

Error that stops the system until it's resolved. Systems can be configured to restart automatically upon encountering a STOP error (default), or leave it onscreen (should be configured to do this).

Recovery Console Command Batch

Executes commands specified in text file.

Recovery Console Command Exit

Exits Recovery Console and restarts comp.

Recovery Console Command Expand

Extracts file from compressed (.cab) file, or file w/ underscore at end of extension (.DL_) from CD to disk.

Creating a Restore Point (Vista & 7)

First, right-click Computer and select Properties, which opens the System Properties window. Click the System Protection task, which opens the System Protection tab on the System Properties sheet. Click the Create button, which opens the System Protection window. Type the name for the restore point, then hit Create; the computer's current hardware & software configuration is stored as a restore point.

Backing up a Registry to a text file

First, start Regedit by opening the Windows Desktop Search window and typing "regedit." Next, to make a partial backup, highlight the section of the Registry you want to back up. Click File, select Export, selection a location to store the backup, name the backup, and click All to back up the entire Registry (or Selected Branch to only back up the part you selected previously). Click Save.

Steps in backing up from NTBackup Wizard

First, you select the backup as the task to run as opposed to restoring files. Next, you select the specific files to back up (i.e. my docs, everyone's docs, all info on comp., etc.). Then, you select a backup destination (drive) and name the backup. Finally, you review your configured options before starting backup.

Recovery Console Command Format

Formats disk with options for file system and quick format.

System Recovery Options window

From top to bottom: • Startup Repair - automatically fix problems that are preventing Windows from starting • System Restore - restore Windows to earlier point in time • Windows Complete PC Restore (Vista only) - Restore entire server or personal computer from backup image • Windows Memory Diagnostic Tool - Check comp. for memory hardware errors • Command Prompt - open Command Prompt window

GUI

Graphical User Interface. The interactive and visual way for users to navigate around the computer, rather than just plugging commands into a command-line window. GUI used by Vista & 7 is called Aero.

Resources Device Manager tab

Hardware resources like IRQ, DMA, Memory, and I/O port address; applies to I/O devices.

Recovery Console (XP)

Limited command-line environment that can be run from the XP CD or from the startup menu.

Recovery Console Command Listsvc

Lists services & drivers available on comp.

Recovery Console Command Logon

Logs on to Windows installation.

Recovery Console Command Diskpart

Manages partitions on drives, can be used in interactive mode or with optional switches to add/remove partitions.

Command Prompt (replaces XP's Recovery Console)

Opens a command prompt window.

Policies Device Manager tab

Optimizes external drivers for quick removal or performance; applies to USB, IEEE 1394, and eSATA drives.

Power Device Manager tab

Power available per port; applies to USB root & generic hubs.

Disable automatic restart on system failure (7 & Vista only)

Prevents Windows from automatically restart if BSOD occurs. Choose only if Windows is stuck in a loop of failure and restarting.

REGSVR32

Registers/unregisters DLL files and ActiveX components.

Recovery Console Command Ren

Renames single file.

Recovery Console Command Fixmbr

Repairs master boot record of specified disk; often used with Fixboot.

Windows Complete PC Restore (Vista)

Restores contents of disk from backup performed w/ Windows Complete PC Backup (image backup); only w/ Vista Business, Ultimate, Enterprise.

System Image Recovery (7 only)

Restores contents of disk from image backup performed w/ Windows 7 backup program.

System Restore

Restores system files to earlier point in time. Undoes system changes without affecting personal files. Basically, the files stay the same, but the Registry changes. Note: if you perform this operation in Safe Mode, you can't undo the restoration. You can, however, run it again with a different restore point.

Repair Your Computer (7 & Vista)

Runs WinRE.

Windows Memory Diagnostic Tool

Scans comp. memory for errors.

Startup Repair

Scans computer for problems at startup and then attempts to fix it. If it doesn't repair all the problems the first time, you can run it up to 4 times.

Recovery Console Command Systemroot

Sets current directory to systemroot directory of system you are currently logged on to.

Safe Mode & advanced boot options

Special boot options using a stripped down version of Windows without extraneous drivers & programs installed. Press F8 repeatedly at startup to access the Advanced Boot menu and select what mode you want to boot into.

Recovery Console

Special command-line interface used to copy files and perform disk repairs; used by XP.

Power Management Device Manager tab

Specifies drive-specific power management settings; applies to USB, network, keyboard, and mouse devices.

Clean boot

Starting Windows without startup services or programs. Perform a clean boot using the MSConfig utility.

Last Known Good Configuration

Starts system w/ last configuration known to work; useful for solving problems caused by newly installed hardware/software. Once you logon, the settings during that login will become the Last Known Good configuration.

Safe Mode with Networking

Starts system w/ minimal drivers & enables network support.

Safe Mode with Command Prompt

Starts system w/ minimal drivers but loads command prompt instead of Windows GUI.

Safe Mode

Starts system w/ minimal drivers, used to start System Restore or load GUI for diagnostics.

Recovery Console Command Enable

Starts/enables a system service or device driver.

Windows XP boot errors

Uses NTLDR, boot.ini, NTDETECT.COM and Ntoskrnl.exe during startup. • NTDETECT failed - displays if NTDETECT.COM is missing/corrupted • NTLDR missing - displays if NTLDR file is missing/corrupted • Invalid boot.ini - boot.ini is missing/corrupted. Can boot if only a disk partition on the first disk, but if you have a multiboot system or a first disk with no Windows installed, you'll need to re-create/recopy the file to boot the system. • Ntoskrnl.exe is missing - Displays if windows can't find the file. If boot.ini is invalid, fixing that may also fix this.

Enable low-resolution video (640x480)

Uses standard VGA driver in place of GPU-specific display, but uses all other drivers normally (called "Enable VGA Mode" in XP).

REGEDIT

Views & edits Windows Registry contents.

WinRE (7 & Vista)

Windows Recovery Environment. Provides access to Startup Repair, System Restore, full-featured command prompt and run-line utilities, Windows memory diagnostics, and Complete PC restore (restores image backup like ASR). Preinstallation environment. It takes the place of the Recovery Console in XP.

Ways to access WinRE

• Boot to Windows 7 or Vista DVD • Boot to Windows 7/Vista SP2 System Repair CD • Boot to special partition on drive that has WinRE installed If booting from a disc, make sure it's first in the boot order. Remember to select "Repair Your Computer" instead of "Install Now" (don't want to reinstall Windows).

Popular image backup utilities

• Norton Ghost (Symantec) - creates image and file-by-file backups • Acronis True Image Home Edition - Creates image and file-by-file backups. Also has options for restoring images to dissimilar hardware and integration w/ cloud-based backup.

Configuring BSOD reset options

• Open system Properties Window (right-click Computer in start menu); w/ 7 and Vista, click Advanced System Settings. • Click Advanced tab, then click Settings under the Startup and Recovery section. • To enable auto restart, check the box next to "Automatically Restart."