Chapter 16 Troubleshooting operating systems. 1002

How to create a new user account and copy profile settings?

1) net user administrator /active:yes , unhide the secret administrator account 2) restart and create a new user account with settings|account|family and other people| add 3) copy files from corrupted folders 4) delete corrupted account and rename the new account with the old names

Three ways to open Win RE

1. boot from installation media and select repair 2. F8, Repair your computer options on the advanced boot options. For win8+, use usb system image. 3. System Image ( control panel | Backup and Restore and select create a system repair disk)

What is the default number of days for Windows to back up the registry?

10

What is the default Pass Count with Windows Memory Diagnostic Tool?

2

Failure to Boot: Linux

Access the Terminal and run the sudo grub-install command along with the location of the boot drive to repair

Windows 10, macOS and linux don't have image recovery tool, name some tools ?

AconiusTrue Image for windows and macOS clonezilla for linux.

what is syslog?

Applications use syslog to write about issues happening to or about the application. Syslog also works over networks, so you can imagine how useful that is! syslog is not a program, like Event Viewer. Programs use syslog to write events. You'll find the log files at /var/log in most Linux distros. Note that there is third-party support for syslog in Windows, so it's not limited to UNIX-based systems.

Blue screen of Death or system locks or continue reboots indicates RAM problem and can be detected by Window Memory Diagnostic Tool? what is better tool as compared WMDT?

Control panel-administrative tools mdsched search in window8+ Memtest86+

Which tool can you use to temporarily prevent programs from autoloading?

Correct answer: System Configuration Trap answer: Task Manager

If you run into a scenario where a device has failed and this created problems with Windows' startup, you would turn to the primary Windows tool for hardware issues:

Device Manager

Which setting in Windows 7's Compatibility tab disables all display features such as Aero?

Disable desktop composition

In Compatibility mode which setting turns off automatic resizing of a program's windows?

Disable display scaling on high DPI settings

Which automatic startup option should you choose when you require a default video driver to troubleshoot a video problem?

Enable Low-Resolution Mode

which files located in System ROOT shows the last entry may be driver the OS was initializing before it failed?

Enable boot logging. Ntbtlog.txt

------ is a powerful logging tool for troubleshooting and security. This tool in the Windows operating system is used to monitor various log files?

Event Viewer

What key is pressed during boot-up to boot directly into Safe Mode? What key is pressed during boot-up to access the Advanced Startup Options menu?

F5-window 7 it is equal to Advanced boot Options. F8

macOS offers a powerful tool for application problems called ---------. Press the option-command-esc keyboard combination to access the Force Quit menu. It'll show you every running application.

Force Quit

If you see black screen with the massage, "operating system not found", is it OS or hardware problem?

Hardware problem.

If the windows fails, what option you have to recover it?

Press F5 and go to safe mode and use device driver to fix the driver problem. b) you can system configuration utility, boot tab, check safe boot c) Advance startup option ( F8 key)

Each user account on windows has an associated records settings such as desktop preferences, background and color etc?

Profile

What is the easiest fix for a missing DLL error?

Reinstall the program

If OS is buggy, sluggish or plain wrong, you can use ----installation to recover the OS. you should disable secure boot and backup your data before you run this command

Repair installation.

Which option nukes your system—all apps, programs, user files, user settings—and presents a fresh installation of Windows?

Reset the PC trap: refresh the PC

The fact that Windows looks for the autorun.inf file by default when you insert a disc or USB drive creates a security issue? how to avoid that?

Someone could put a malicious program on some form of media and write an autorun. inf file to point to the malware. Insert the media and boom! There goes your clean PC. Nevertheless, you should know that to turn off this behavior in Windows requires opening the Registry Editor and changing up to six different settings

If you have trouble booting your computer, you should try ---------- This includes if you're in a scenario with a slow bootup,

Startup Repair first.

If window can not load critical DLL files and say that "Error loading a xxxx.dll", how can you fix that

System File Checker replace a number of critical files including DLL

What must be enabled for the Volume Shadow Copy Service (VSS) to function?

System Protection

if the clock settings in Windows don't match. This can cause the application not to run

This is both a hardware issue (failing battery) and an application issue. When the Windows clock resets, so do the BIOS time and settings

What is the single biggest problem with uninstalling software?

Trying to uninstall without administrator privileges

Security and Maintenance / Action Center applet provides direct links to some or all of the following tools:

UAC settings Backup and Restore Windows Update Troubleshooting Wizard System Restore Recovery

LILO is older than GRUB and doesn't support ---------

UEFI BIOS systems

---------- enables the operating system to make a backup of any file, even on e that is in in use. windows uses VSS for its system protection features.

Volume Shadow Copy Service

what is best option to access RE from installation media's

a) F8 options require local administrator account. b) hard drive can also be messed up. c) it avoids malware and other such things.

a) Enable Low Resolution Video can trouble what? b) Safe mode with networking?

a) If this command works, you have bad video driver. b) if this command do not work, you have bad network driver.

if the profile is corrupted , it can block the user from logging, describe ways to fix it.

a) Several direct registry edits b) create a new user account and copying the old profile settings to the new account.

you have a device problem that shows up

a) during startup is a freeze-up b) the Windows startup screen just stays there and you never get a chance to log on c) BSoD problems due to device drivers almost always occur immediately after you've installed a new device and rebooted

if an auto-load program behave badly, you need to shut of the program. how to disable auto load programs in windows?

a)msconfig b) disable startup programs from task manger or system configuration utility( control panel+administrative tools+system configuration utility

BCD store changes can be made by BCDedit by two switches?

bcdedit /export <filename> bcdedit /import <filename>

bootmgr and bcd can also be fixed using the tool called -----. it also shows boot options.

bcdedit in Windows Recovery Environment.

If window can not recover from an error , you will see which error screen? one of the example is bad device driver ( bad video driver shows black screen)

blue screen of death or kernal panic in linux or SPOD in mac. fix: install the updated driver from manufacturer website.

what command is a windows recovery environment troubleshooting and repair tool that repairs the master boot record, boot sector or BCD store?

bootrec /fixboot ( repair boot sector bootrec /fixmbr ( repair master boot record) bootrec /rebuildmbr (repair bcd)

kill command in linux or mac OS and windows

can kill a troubling process

clean diskpart format

clean: wipe all partition and volume information of the currently selected disk. diskpart: partition tool

if a service or application fails, how to disable it

control panel + administrative tools+ services

how to open troubleshooting wizard for printers and other such devices.

control panel-all control panel items-troubleshooting-hardware and sound-use a printer

mention some command which you can use safe mode with command prompt?

defrag a hardd disk drive is a common solution to windows OS problems. you can do that in Safe mode.

System Protection falls under the category of _______________ software.

file recovery trap: System Recovery or restore point.

Which command provides a detailed query about drives and volumes?

fsinfo

No boot device detected?

if you are using a USB, and it is listed first in CMOS setup, you will likely get this error.

Disable static restart on system failure

it is helpful to enable or disable this feature gives you time to see the error before the system fails.

If GRUB is corrupted or deleted, Linux won't start and you'll get a "Missing GRUB" error message. Boot to the OS Media disc and let it "install" into .

memory trap, harddisk

Last know Good Configuration boot option does what kind of troubleshooting

n earlier version of the registry can be can be restored by the command If any knew driver fails, you can use it to recover the old driver.

A Windows BSoD tells you the ------------ that caused the problem and usually suggests a recommended action

name of the file

kill command can be used in name four shells?

powershell cmd terminal mac os terminal linux

The first step in a scenario where Windows fails to start normally is to -------------

reboot the computer

System protection does not only recover the data files, it can also be used to -----------

recover the previous version of the files and load and restore points manually

startup Repair options in Win RE does what?

repairs a corrupted registry restore critical system files and drivers files. roll back to any non-working drivers roll back updates run chkdsk runs memory test.

if the system detects a boot problem, which tool runs automatically in windows?

startup repair.

Profile edit with registry

step 1: safe mode step 2: regedit step3: state field should set to 0 step4: create or modify RefCount and set it to 0 step : restart

Regular backup registry file can be found at the path? which tool can be used to copy the registry back up files?

system32\config\RegBack you can copy to one location up in the config folder by using "gep" tool

which tool is used to end programs that do not shut down normally?

task manager

power+shift key is good for -----

to go to safemode.

windows boot loader section tells the location of ------ whereas windows boot loader section describes the location of bootmgr with bcdedit.

winload.exe

If you have old device and its drive is not compatible with window 64 bit. what you can disable to make it work?

you can use Disable driver signature enforcement.