Chapter 15 - Troubleshooting and Maintaining Windows
Automated System Recovery (XP)
(ASR) Enables you to restore system state
To repair missing BOOTMGR file (Vista/7)
1. Boot to the System Recovery Options + select Startup Repair 2. Boot to the System Recovery Options + select Command Prompt - type command: bootrec/fixboot
Ways to access Windows Recovery Environment
1. Booting from 7/Vista DVD 2. Booting to 7/Vista SP2 System Repair CD 3. Booting to a special partition on the hard drive that has WinRE installed
System Restore
Can fix problems caused by a defective hardware or software installation by resetting computer's configuration to the way it was a specified earlier drive Configuration stored in a "restore point"
STOP errors / BSOD (blue screen of death)
Can occur during a startup or after system is running
MSConfig
Can selectively disable programs and services that run at startup
Causes for BSOD Miscellaneous causes
Check the Windows Event Viewer and check the System log / research
CHKDSK.EXE
Checks drives for errors - can be run from GUI or command line
Common Device Manger Codes
Code 1 - device not configured correctly Code 3 - driver may be corrupt / low memory Code 10 - device cannot start Code 12 - not enough free resources for device Code 22 - disabled device
Windows XP Recovery Console
Command line interface designed for copying files and performing disk reparis
SFC
System File Checker Checks protected system files and replaces incorrect versions or missing files with correct files
Windows Recovery Environment (Vista/7)
Takes place of Recovery Console in XP Purpose: recover Windows from errors that prevent booting
Compatibility Errors
Three choices: -Check for solutions online -Run program (probs wont work) -Cancel
Auto Restarts
To change: System properties - Advanced settings - Advanced - Settings
Device fails to start
Update drivers
Image Backup
Use 3rd party -Norton Ghost (Symantec) -Acronis True Image Home Edition
Reinstalling Ntoskrnl.exe File (XP)
Use Windows XP CD
Restore Missing NTDETECT.COM file (XP)
Use this command in Recovery Console Copy d:\i386\ntdetec.com c:\ **replace "d" with the drive letter + restart
Restore missing NTLDR File (XP)
Use this command in Recovery Console Copy d:\i386\ntdlr c:\ **replace "d" with the drive letter
*To restore a system with ASR*
You need: -The Windows XP Professional distribution CD -ASR backup -ASR floppy disk -Supported floppy drive
Registry
database for all hardware, software, and system settings in Windows
BCD
Boot Configuration Data Info that helps the system determine how to boot the syste,
Options to start Recovery Console (XP)
1. Boot system with XP CD and run as repair option 2. While system is working, install Recovery Console from XP CD ROM
*Major Reasons for Boot Errors*
-BOOTMGR is missing -The Windows Boot Configuration Data (BCD) file is missing required information
How to Maintain Windows
-Create scheduled backups -Perform schedule disk checks -Scheduling defragmentation -Scheduling Windows updates and patches -Creating system restore points on a regular basis -Checking for firmware updates on a regular basis -Updating antivirus and antimalware programs and scanning on a schedule basis
Issue with DLL
-File deletion or renaming -Damage from virus or malware *check for virus or malware before trying to fix
Reasons for Services failing to start
-Hardware used for service is not present -Other services used by service are not present -Service requires login info that has not been provided -Stooped to due to previous errors and is not configured to restart automatically
Causes for BSOD
-Incompatible or defective hardware or software -Registry problems -Viruses -Miscellaneous causes
Slow System Performance
-Not configured for maximum performance -Drive containing paging file and temporary files nearly full or badly fragmented -System overheating and CPU running at reduced speeds
Boot Failure Causes
-can be caused by incorrect boot configuration in BIOS -Corrupt/ missing boot files -missing driver files
To repair BCD (Vista/7)
1. Boot System Recovery Options - Startup Repair 2. If 1 doesnt work: Boot System Recovery Options - command prompt + type: bootrec/rebuildbcd 3. If no smissing installation, remove BCD store + recreate it type the following commands and click enter after each one: Bcdeit /export C:\BCD_Backup ren c:\boot\bcd bcd.old Bootrec /rebuildbcd
*Windows XP Boot Errors*
Any issue with: -NTDETECT failed -NTLDR missing -Invalid boot.ini (may boot anyway) -Ntoskrnl.exe missing
Advanced Boot Options Menu Options
Different editions of Windows offer different ones: Repair your computer Safe Mode Safe Mode with Networking Safe Mode with Command Prompt Enable Boot Logging Enable low0-resolution video (640 x 480) Last Known Good Configuration Directory Services Restore Mode Debugging Mode Disable automatic restart on system failure Disable driver signature enforcement Start Windows normally *table for when to use each pg 728
DLL
Dynamic Link Library Binary file used by Windows or a program
Safe Mode
F8
REGSVR32
Helps if a program stops working after another program was installed/removed (some program components may ave been replaced or disabled)
Event Viewer
Place to see system events/warnings/errors
*Back up Registry*
QSG pg. 724
Diagnostic tools in XP
Recovery Console Fixboot and Fixmbr Automated System Recovery (ASR) Explanations pg 718
To determine BSOD cause
Research
Causes for BSOD Viruses
Scan and try to remove
Causes for BSOD Registry problems
Select Last Known Good Configuration
Diagnostic tools in XP/Vista/7
Sfc* MSConfig Defrag REGSVR32* REGEDIT Event Viewer Safe Mode and other advanced boot options Device Manager * = command prompt Explanations pg 718
Causes for BSOD Incompatible or defective hardware or software
Start in Safe Mode -Unistall last hardware/software installed -Update before reinstalling
Clean boot
Starting windows without starting services or programs
Regedit
Usually dont need to edit/view Registry *may need to log off and restart for changes to come into effect
Diagnostic tools in Vista/7
Windows Recovery Environment (WinRE) Windows Repair Discs Explanations pg 718
Re-creating Boot.ini File with Bootcfg (XP)
pg 713
Commands for Recovery Console (XP)
pg 737