windows nt & 2000 robert horan, ccna-ccai erwin technical center school district of hillsborough...

Windows NT & 2000Windows NT & 2000

Robert HoranRobert Horan, CCNA-CCAI, CCNA-CCAI

Erwin Technical CenterErwin Technical CenterSchool District of Hillsborough County - Tampa, FloridaSchool District of Hillsborough County - Tampa, Florida

ITE1 - Module 6ITE1 - Module 6Part 2 of 2 - Managing and TroubleshootingPart 2 of 2 - Managing and Troubleshooting

Computer ManagementComputer Management

The Administrative Tools utility is a collection of predefined Snap-ins or tools The Administrative Tools utility is a collection of predefined Snap-ins or tools placed into one convenient console and is usually the first place you would placed into one convenient console and is usually the first place you would go to get work done. You can create your own customized console or modify go to get work done. You can create your own customized console or modify an existing console by adding or removing various snap-ins. an existing console by adding or removing various snap-ins.

The The Microsoft Management Console (MMC) Microsoft Management Console (MMC) is a feature that is unique is a feature that is unique to the Windows NT, 2000, and XP operating systems. An administrator can to the Windows NT, 2000, and XP operating systems. An administrator can control almost every aspect of the local computer using the MMC. It uses control almost every aspect of the local computer using the MMC. It uses management tools called Snap-ins. management tools called Snap-ins.


To Access the Administrative Tools utility you can either right To Access the Administrative Tools utility you can either right click on My Computer and select Manage, or you can select: click on My Computer and select Manage, or you can select: Start> Settings> Control Panel> Administrative Tools Start> Settings> Control Panel> Administrative Tools

Computer ManagementComputer ManagementThe A+ Folks like you to know The A+ Folks like you to know both basic ways of getting to both basic ways of getting to the Administrative Tools utility. the Administrative Tools utility.

Know the Path:Know the Path:Start> Settings> Control Panel> Start> Settings> Control Panel> Administrative ToolsAdministrative Tools


• The Microsoft Management Console (MMC) is a shell that holds The Microsoft Management Console (MMC) is a shell that holds individual utilities and tools called snap-ins.individual utilities and tools called snap-ins.• The MMC is customizable.The MMC is customizable.• A console can be locked, if desired, to prevent changes.A console can be locked, if desired, to prevent changes.


The five types of events displayed by the Event Viewer are:The five types of events displayed by the Event Viewer are:

Error, Warning, Information, Success Audit and Failure AuditError, Warning, Information, Success Audit and Failure Audit..•The System and Applications logs display Error, Warning, and The System and Applications logs display Error, Warning, and Information events. Information events.

•The Security log displays Success and Failure Audit events. The Security log displays Success and Failure Audit events.

•A log file can be archived by saving it to a different filename.A log file can be archived by saving it to a different filename.

The Event Viewer, found in Windows NT, 2000 and XP, is an The Event Viewer, found in Windows NT, 2000 and XP, is an important tool for maintaining and troubleshooting.important tool for maintaining and troubleshooting.


System Log File SettingsSystem Log File Settings


Event Viewer Filter SettingsEvent Viewer Filter Settings


A Help window can be brought up for any snap-in by pressing A Help window can be brought up for any snap-in by pressing F1F1 while the snap-in is while the snap-in is highlightedhighlighted..

Performance ConsolePerformance Console

• The Performance Console tool is used to measure system The Performance Console tool is used to measure system performance.performance.

Local Security PolicyLocal Security Policy

The Local Security Policy is a function of the Administrative The Local Security Policy is a function of the Administrative Tools utility that allows the administrator to select additional Tools utility that allows the administrator to select additional security options. There are over 40 security options that are security options. There are over 40 security options that are available to increase the effective security on a computer .available to increase the effective security on a computer .

Local Security PolicyLocal Security Policy

One option is to set the number of days before a user is prompt to One option is to set the number of days before a user is prompt to change their password. Double-click on Prompt User to change change their password. Double-click on Prompt User to change password before expiration. The administrator can increase or password before expiration. The administrator can increase or decrease the number of days that the system prompts a user to decrease the number of days that the system prompts a user to change a password. change a password. Note: Domain level policies override local security policies. Note: Domain level policies override local security policies.

Task ManagerTask Manager

• The Task Manager displays the applications and processes The Task Manager displays the applications and processes that are running and the computer resources used by them.that are running and the computer resources used by them.


To open the Task Manager you may use the To open the Task Manager you may use the CTRL-ALT-DELCTRL-ALT-DEL

key combination. key combination.

Task ManagerTask Manager• In Windows 2000 the In Windows 2000 the CTRL-ALT-DELCTRL-ALT-DEL key combination will key combination will

take you to the Windows Security Window where you take you to the Windows Security Window where you

choose the Task Manager box. choose the Task Manager box.

• In Windows 2000 the In Windows 2000 the CTRL-SHIFT-ESCCTRL-SHIFT-ESC key combination key combination

will take you directly to the Task Manager. will take you directly to the Task Manager.

• By default, the Task Manager Window sits on top of all By default, the Task Manager Window sits on top of all

other open Windows.other open Windows.

Note: In Windows XP CTRL-ALT-DEL will go directly into Note: In Windows XP CTRL-ALT-DEL will go directly into

the Task Manager.the Task Manager.


• The Task Manager allows to end or kill a program that is The Task Manager allows to end or kill a program that is not responding or does not shut down in the normally.not responding or does not shut down in the normally.

• The Task Manager in Windows 2000/XP enables a user to The Task Manager in Windows 2000/XP enables a user to close down applications as well as shut off processes.close down applications as well as shut off processes.


• The Task Manager tool can be used to provide basic information The Task Manager tool can be used to provide basic information on the system’s performance. Resource tracking is very on the system’s performance. Resource tracking is very important for solving performance problems.important for solving performance problems.

Disk CleanupDisk Cleanup

• Disk Cleanup helps free up space on your hard drive. From Disk Cleanup helps free up space on your hard drive. From within the MMC select within the MMC select Tools > Windows > Disk Cleanup.Tools > Windows > Disk Cleanup.

•The Disk Cleanup Tool is also available from:The Disk Cleanup Tool is also available from: Start > Programs > Accessories > System Tools > Disk Cleanup.Start > Programs > Accessories > System Tools > Disk Cleanup.

Disk CleanupDisk Cleanup

• Disk Cleanup searches your drive, and then shows you Disk Cleanup searches your drive, and then shows you temporary files, Internet cache files, and unnecessary program temporary files, Internet cache files, and unnecessary program files that you can safely delete. files that you can safely delete.

Disk DefragmenterDisk Defragmenter

• Disk Defragmenter rearranges files, programs, and unused space on your Disk Defragmenter rearranges files, programs, and unused space on your computer's hard disk, so that programs run faster and files open more quickly. computer's hard disk, so that programs run faster and files open more quickly. •The Disk Defragmenter Tool is also available from:The Disk Defragmenter Tool is also available from: Start > Programs > Accessories > System Tools > Disk Defragmenter.Start > Programs > Accessories > System Tools > Disk Defragmenter.

Disk DefragmenterDisk Defragmenter

• Volumes might become excessively fragmented when users delete Volumes might become excessively fragmented when users delete a large number of files or folders, so be sure to analyze volumes after a large number of files or folders, so be sure to analyze volumes after this happens. Generally, volumes on busy file servers should be this happens. Generally, volumes on busy file servers should be defragmented more often than those on single-user workstations. defragmented more often than those on single-user workstations.

Disk ManagementDisk Management

The Disk Management utility allows an administrator to control, format The Disk Management utility allows an administrator to control, format and manipulate computer hard drives from within the operating system.and manipulate computer hard drives from within the operating system.

Disk ManagementDisk ManagementA A basic diskbasic disk is a physical disk that is a physical disk that contains primary partitions, extended contains primary partitions, extended partitions, or logical drives. If a partitions, or logical drives. If a second disk is added to the system, second disk is added to the system, the computer recognizes it first as a the computer recognizes it first as a basic disk. basic disk.

Basic disk storage was the standard Basic disk storage was the standard for all of the Windows operating for all of the Windows operating systems that existed before Windows systems that existed before Windows NT, 2000, and XP. Basic disk is the NT, 2000, and XP. Basic disk is the default and works fine for most desk default and works fine for most desk top systems.top systems.

Note: All new disks that are added Note: All new disks that are added are considered basic disks until they are considered basic disks until they are converted to dynamic. are converted to dynamic.


The disk management tool allows us to be able to have multidisk volumes The disk management tool allows us to be able to have multidisk volumes using using dynamic diskdynamic disk storage. Dynamic disks do not use standard partition storage. Dynamic disks do not use standard partition tables as do Basic disks. They use a new organization method that allows tables as do Basic disks. They use a new organization method that allows different drives to act as one continuous volume by spanning across the different drives to act as one continuous volume by spanning across the disks. They can be created and expanded while the operating system is disks. They can be created and expanded while the operating system is running. running.


Dynamic disks allow us to setup the Dynamic disks allow us to setup the following partitions: following partitions:

•Spanned volumes, or volume sets Spanned volumes, or volume sets

•Striped volumes, or stripe setsStriped volumes, or stripe sets Redundant Array of Inexpensive Disks (RAID 0)Redundant Array of Inexpensive Disks (RAID 0)

•Mirrored volumes, or Mirror sets Mirrored volumes, or Mirror sets (RAID 1)(RAID 1)

•Volumes, or Stripe Sets with ParityVolumes, or Stripe Sets with Parity (RAID 5) (2000 Server Versions, Not 2K Pro)(RAID 5) (2000 Server Versions, Not 2K Pro)


To convert a basic disk to To convert a basic disk to dynamic from within the dynamic from within the Computer Management Computer Management Console, start by expanding the Console, start by expanding the Storage Folder and clicking on Storage Folder and clicking on Disk Management. Disk Management.

Note: Dynamic disks can only Note: Dynamic disks can only be created on fixed disks. You be created on fixed disks. You cannot convert removable cannot convert removable disks, such as 1394 or universal disks, such as 1394 or universal serial bus (USB) drives, to serial bus (USB) drives, to dynamic disks.dynamic disks.


1.1. Right-click on disk that needs to be upgraded. The above illustration Right-click on disk that needs to be upgraded. The above illustration shows the options that display. Be sure to right-click on the disk shows the options that display. Be sure to right-click on the disk and not the partition. Select the Upgrade to Dynamic Disk option.and not the partition. Select the Upgrade to Dynamic Disk option.


2.2. Select the disk that needs to be upgraded as shown and Select the disk that needs to be upgraded as shown and click OK. click OK.


3.3. The illustration shows the window that displays to confirm The illustration shows the window that displays to confirm the selection. Click on the Upgrade box.the selection. Click on the Upgrade box.


4.4. The illustration shows the window that warns you that versions The illustration shows the window that warns you that versions of Windows prior to 2000 will not function on a dynamic disk. If of Windows prior to 2000 will not function on a dynamic disk. If you are sure you want to upgrade, press Yes. you are sure you want to upgrade, press Yes.


5.5. Press OK to reboot and complete the dynamic disk upgrade. Press OK to reboot and complete the dynamic disk upgrade. Note: A dynamic disk cannot be returned to a basic disk once Note: A dynamic disk cannot be returned to a basic disk once an upgrade is complete without losing all of it’s information. an upgrade is complete without losing all of it’s information.

Disk ManagementDisk ManagementThe three types of volumes that can be created with The three types of volumes that can be created with

Windows 2000 Professional are:Windows 2000 Professional are: • Simple VolumeSimple Volume – This volume acts as a basic disk that contains disk – This volume acts as a basic disk that contains disk

space from a complete single disk. It is not fault-tolerant. space from a complete single disk. It is not fault-tolerant.

• Spanned VolumeSpanned Volume – This volume includes disk space from multiple – This volume includes disk space from multiple disks. There can be up to 32 disks in a spanned volume. In a spanned disks. There can be up to 32 disks in a spanned volume. In a spanned volume the operating systems write data to the first disk until it runs out volume the operating systems write data to the first disk until it runs out of space. Then it continues to write data to the proceeding disks for as of space. Then it continues to write data to the proceeding disks for as many disks as are included in the volume. A spanned volume is not many disks as are included in the volume. A spanned volume is not fault-tolerant. If one disk in a spanned volume fails, the data in the fault-tolerant. If one disk in a spanned volume fails, the data in the entire volume is lost. entire volume is lost.

• Striped VolumeStriped Volume – A striped volume, also known as RAID 0, combines – A striped volume, also known as RAID 0, combines areas of free space from up to 32 multiple hard disks into one logical areas of free space from up to 32 multiple hard disks into one logical volume. This volume optimizes performance by allowing data to be volume. This volume optimizes performance by allowing data to be written to all the disks at the same rate. This volume is not fault-tolerant written to all the disks at the same rate. This volume is not fault-tolerant as well so if one disk in the volume fails, then all the data is lost. as well so if one disk in the volume fails, then all the data is lost.

Disk ManagementDisk ManagementAdditional volumes that can only be created in Additional volumes that can only be created in Windows 2000 ServerWindows 2000 Server

are Mirrored and RAID 5 volumes: are Mirrored and RAID 5 volumes:

• Mirrored VolumeMirrored Volume – This volume contains two identical copies of a – This volume contains two identical copies of a simple volume that stores the same data on two separate hard drives. simple volume that stores the same data on two separate hard drives. Mirrored volumes provide fault tolerance in the event of hard disk Mirrored volumes provide fault tolerance in the event of hard disk failure. If one disk fails, a new one can replace it. All of the data is failure. If one disk fails, a new one can replace it. All of the data is backed up on the other disk. backed up on the other disk.

• RAID 5 VolumeRAID 5 Volume – A RAID 5 volume consists of three or more drives. – A RAID 5 volume consists of three or more drives. Users can have up to a total of 32 disks. Data is written to all the drives Users can have up to a total of 32 disks. Data is written to all the drives in this volume in equal amounts to improve performance. Each drive in this volume in equal amounts to improve performance. Each drive contains parity information, which holds copies of the data that is being contains parity information, which holds copies of the data that is being written to the other two disks. This enables fault tolerance because in written to the other two disks. This enables fault tolerance because in case one of the drives fails, the remaining two disks can recreate the case one of the drives fails, the remaining two disks can recreate the data automatically without shutting down the server. Through a data automatically without shutting down the server. Through a mathematical algorithm data is restored to the new drive when the failed mathematical algorithm data is restored to the new drive when the failed drive is replaced. This is known as drive is replaced. This is known as striping with paritystriping with parity. .

Users and GroupsUsers and Groups

Being able to create users and then organizing those users into groups is an essential Being able to create users and then organizing those users into groups is an essential task when working with Windows 2000. A user account enables a system task when working with Windows 2000. A user account enables a system administrator to log in and access the resources of the computer as well as have a administrator to log in and access the resources of the computer as well as have a custom environment to work in. A group is simply a collection of users that have been custom environment to work in. A group is simply a collection of users that have been assigned the same permissions. assigned the same permissions.

Note: Management of users and groups is done at the domain level if a Windows 2000 Note: Management of users and groups is done at the domain level if a Windows 2000 Professional computer is a member of a Windows NT or Active Directory domain.Professional computer is a member of a Windows NT or Active Directory domain.


1.1. To add a user, expand the Local Users and Groups window and To add a user, expand the Local Users and Groups window and select the Users folder in the left pane.select the Users folder in the left pane.


2.2. Select New User from the Action Menu, or right click on an Select New User from the Action Menu, or right click on an open area in the right pane for a pull down menu.open area in the right pane for a pull down menu.


3.3. This brings up the New User Information Box.This brings up the New User Information Box.


4.4. Enter the User Name which will be the Logon Name, Enter the User Name which will be the Logon Name, Description, Password and options. Press Create. Description, Password and options. Press Create.


5.5. The User will be added to the list.The User will be added to the list.


1.1. To add a new group, expand the Local Users and Groups To add a new group, expand the Local Users and Groups window and select the Groups folder in the left pane.window and select the Groups folder in the left pane.


2.2. Select New Group from the Action Menu, or right click on Select New Group from the Action Menu, or right click on an open area in the right pane for a pull down menu.an open area in the right pane for a pull down menu.


3.3. This brings up the New Group Information Box.This brings up the New Group Information Box.


4.4. Enter the Group Name and Description. Press Create. Enter the Group Name and Description. Press Create.


5.5. The new Group will be added to the list.The new Group will be added to the list.


6.6. To add a user to the new Group go to the properties Box To add a user to the new Group go to the properties Box of that group and press the ADD button.of that group and press the ADD button.


7.7. This is the Select Users Box.This is the Select Users Box.


8.8. Select a user from the list or type the user name in the box.Select a user from the list or type the user name in the box.


9.9. The name will be added to the list. Press OK when you are The name will be added to the list. Press OK when you are finished.finished.


10.10. To verify that the add was successful check the group To verify that the add was successful check the group properties box.properties box.

NTFS File Permissions

NTFS file and folder NTFS file and folder permissions apply permissions apply both to users working both to users working at the computer and at the computer and over the network from over the network from a shared folder. Share a shared folder. Share rights for folders rights for folders work in combination work in combination with file and folder with file and folder permissions. permissions. The FAT file systems The FAT file systems only support simple only support simple share rights. share rights.

NTFS Folder Permissions

File Sharing & PermissionsFile Sharing & Permissions

To Share a folder, right click on the folder and select either Sharing or To Share a folder, right click on the folder and select either Sharing or Properties. From the Sharing Tab click on Share this folder. To see what Properties. From the Sharing Tab click on Share this folder. To see what permissions are given for the folder click on the Permissions Button. permissions are given for the folder click on the Permissions Button.


Note:Note: File SharingFile Sharing in Windows systems running FAT do not have the in Windows systems running FAT do not have the advanced features and security available under NTFS. advanced features and security available under NTFS.

The folder share permission choices The folder share permission choices are limited to Full Control, Change and are limited to Full Control, Change and Read only. Read only. To add a user click on the Add button.To add a user click on the Add button.


To Add a user, select the user name you want to add by clicking on it then To Add a user, select the user name you want to add by clicking on it then click on the Add button. The name will appear in the list box below. Click OK click on the Add button. The name will appear in the list box below. Click OK to close the box.to close the box.


The new user name will appear on the share permissions list. The new user name will appear on the share permissions list. You can change the permissions for the user by clicking on the check boxes. You can change the permissions for the user by clicking on the check boxes. Click OK to close the box. Click OK to close the box.


When using NTFS a new Tab appears on the Properties Box. (When using NTFS a new Tab appears on the Properties Box. (The Security TabThe Security Tab))

FAT File System NTFS File System


The Security Tab is where the NTFS security options are applied and they The Security Tab is where the NTFS security options are applied and they override the Share Permissions under the FAT file system. Click on the override the Share Permissions under the FAT file system. Click on the Security Tab to display it’s contents.Security Tab to display it’s contents.


Under the Security Tab you have much tighter control over permissions than you Under the Security Tab you have much tighter control over permissions than you had before. You can even be more specific using the Advanced Button.had before. You can even be more specific using the Advanced Button.


NTFS permissions are very powerful.NTFS permissions are very powerful.

Converting FAT to NTFSConverting FAT to NTFS

Get to a command prompt. At the C:\> prompt enter the Get to a command prompt. At the C:\> prompt enter the convert command followed by the /? to view the help file. Type convert command followed by the /? to view the help file. Type the command the command CONVERT D: /FS:NTFS /VCONVERT D: /FS:NTFS /V This will start the This will start the NTFS conversion process and show its progress. NTFS conversion process and show its progress.

Note: If you are duel booting with Windows 9x, be certain Note: If you are duel booting with Windows 9x, be certain not to convertnot to convert the the 9x volume since 9x will not run on an NTFS partition or volume.9x volume since 9x will not run on an NTFS partition or volume.

Mapping a DriveMapping a Drive

Network resources such as drives or folders can be mapped to My Computer Network resources such as drives or folders can be mapped to My Computer making it easy to access them. Start by opening My Network Places. Locate making it easy to access them. Start by opening My Network Places. Locate the resourse you want to map. In this case a shared folder on the a server.the resourse you want to map. In this case a shared folder on the a server.


Right click on the shared folder Right click on the shared folder you wish to map. you wish to map. Select Select Map Network Drive…Map Network Drive…


The The Map Network Drive Map Network Drive window allows you to assign a drive letter to the drive. window allows you to assign a drive letter to the drive. Be sure the Be sure the Reconnect at loginReconnect at login box is checked. This will automatically box is checked. This will automatically reconnect you to the mapped resource each time you login. Click Finished.reconnect you to the mapped resource each time you login. Click Finished.


When you open My Computer the shared resource appears as a Network Drive.When you open My Computer the shared resource appears as a Network Drive.

The RegistryThe Registry Windows 2000 stores hardware and software settings in a Windows 2000 stores hardware and software settings in a

hierarchical databasehierarchical database called the called the RegistryRegistry. The Registry for Windows . The Registry for Windows 2000/XP replaces many of the .INI, .SYS, and .COM files used in 2000/XP replaces many of the .INI, .SYS, and .COM files used in earlier versions of Windows. earlier versions of Windows.

The Registry acts as a backbone to the operating system and The Registry acts as a backbone to the operating system and provides appropriate initialization information to start applications. It provides appropriate initialization information to start applications. It loads components such as device drivers and network protocols. The loads components such as device drivers and network protocols. The Registry Editor is used to access the Windows 2000 Registry. Registry Editor is used to access the Windows 2000 Registry.

The purpose of the Registry is to maintain a database of The purpose of the Registry is to maintain a database of configuration settings in Windows 95, 98, NT, 2000 and XP. The configuration settings in Windows 95, 98, NT, 2000 and XP. The main component of the Registry is the hardware installed on the main component of the Registry is the hardware installed on the computer. It also includes device drivers, installed applications, and computer. It also includes device drivers, installed applications, and network adapter card settings. The Registry contains a vast amount network adapter card settings. The Registry contains a vast amount of data and is critical to how a system operates. of data and is critical to how a system operates.

Registry EditorRegistry Editor The Registry Editor is used to The Registry Editor is used to

access the Windows 2000 access the Windows 2000 Registry.There are two versions Registry.There are two versions of the Editor that come with of the Editor that come with Windows 2000.Windows 2000.

1.1. REGEDT32.exeREGEDT32.exe is the new is the new

version of the Editor which should version of the Editor which should be used for making any changes be used for making any changes to the Registry. to the Registry.

2.2. REGEDIT.exeREGEDIT.exe which is the old which is the old editor used in Windows 9.x. It was editor used in Windows 9.x. It was kept because of its powerful kept because of its powerful search capabilities. So when search capabilities. So when looking for a file use Regedit and looking for a file use Regedit and then use Regedt32 to effect any then use Regedt32 to effect any changes.changes.

Registry EditorRegistry Editor

The The KeysKeys and and SubkeysSubkeys are are

displayed on the displayed on the Left side of the Left side of the Editor Window. Editor Window.

This is where This is where you select a you select a

subkey to subkey to modify.modify.

ValuesValues and and datadata are are displayed on displayed on Right the side Right the side of the Editor of the Editor Window. This is Window. This is the side where the side where changes are changes are made.made.

Registry EditorRegistry EditorAn example of a Registry subtree is An example of a Registry subtree is

displayed in the illustration. displayed in the illustration.

There are five subtrees in There are five subtrees in Windows 2000/XP. Windows 2000/XP.

1.1. HKEY_USERSHKEY_USERS

2.2. HKEY_CURRENT_CONFIGHKEY_CURRENT_CONFIG

3.3. HKEY_CLASSES_ROOTHKEY_CLASSES_ROOT

4.4. HKEY_CURRENT_USERHKEY_CURRENT_USER

5.5. HKEY_LOCAL_MACHINEHKEY_LOCAL_MACHINE

Note: Windows 9x had 6 keys Note: Windows 9x had 6 keys which included which included HKEY_DYN_DATA. That key HKEY_DYN_DATA. That key is not part of the Windows is not part of the Windows 2000/XP Registry.2000/XP Registry.


HKEY_USERSHKEY_USERS

• This subtree contains the system default settings used to control This subtree contains the system default settings used to control individual user profiles and environments, such as the desktop settings, individual user profiles and environments, such as the desktop settings, the windows environment, and the custom software settings. the windows environment, and the custom software settings.


HKEY_CURRENT_CONFIGHKEY_CURRENT_CONFIG

• This subtree contains data on the active hardware profile that is selected This subtree contains data on the active hardware profile that is selected during the boot process. This information is used to configure settings during the boot process. This information is used to configure settings such as which device drivers to load and which display resolution to use. such as which device drivers to load and which display resolution to use.


HKEY_CLASSES_ROOTHKEY_CLASSES_ROOT

• This subtree contains the configuration data of all the software that is This subtree contains the configuration data of all the software that is installed on the computer.installed on the computer.


HKEY_LOCAL_MACHINEHKEY_LOCAL_MACHINE

• This subtree contains all configuration data for the local computer, including This subtree contains all configuration data for the local computer, including hardware and operating system data such as bus type, system memory, hardware and operating system data such as bus type, system memory, device drivers, and startup control data. Applications, device drivers, and the device drivers, and startup control data. Applications, device drivers, and the operating system use this data to set the computer configuration. The data operating system use this data to set the computer configuration. The data in this subtree remains constant regardless of the user.in this subtree remains constant regardless of the user.


HKEY_CURRENT_USERHKEY_CURRENT_USER

• This subtree contains data about the current user that is logged into the This subtree contains data about the current user that is logged into the computer. This key retrieves a copy of each user account that can log on to computer. This key retrieves a copy of each user account that can log on to

the computer and stores it in the Registry.the computer and stores it in the Registry.

Registry BackupRegistry Backup

To back up the whole registry, use the To back up the whole registry, use the Backup utilityBackup utility to create an to create an Emergency Emergency Repair Disk (ERD),Repair Disk (ERD), or back up the System State (which includes the registry, or back up the System State (which includes the registry, the COM+ Class Registration database, and your boot files). Individual Keys the COM+ Class Registration database, and your boot files). Individual Keys can be backed up and restored from within the Registry Editor. You would can be backed up and restored from within the Registry Editor. You would use the Restore Wizard to restore the System State.use the Restore Wizard to restore the System State.

Note: The Scanreg command used in Windows 9x to scan the registry for errors Note: The Scanreg command used in Windows 9x to scan the registry for errors and create backups of the registry is not supported under Windows 2000.and create backups of the registry is not supported under Windows 2000.

System File CheckerSystem File Checker

System File Checker scans all protected system files and replaces System File Checker scans all protected system files and replaces incorrect versions with correct Microsoft versions. The command to incorrect versions with correct Microsoft versions. The command to run the the file checker is run the the file checker is SFC.EXESFC.EXE with the appropriate switch. The with the appropriate switch. The help file for the System File Checker (SFC.EXE /?) is shown above.help file for the System File Checker (SFC.EXE /?) is shown above.

System File CheckerSystem File Checker

You start the System File Checker from the Run box. The file is located in You start the System File Checker from the Run box. The file is located in the WINNT\system32 directory. The full path is shown above. Here the the WINNT\system32 directory. The full path is shown above. Here the SFC.EXESFC.EXE command is being used with the scannow switch. command is being used with the scannow switch.

Virtual MemoryVirtual Memory

Virtual Memory uses what is called a Page File on a hard drive to act as RAM. Virtual Memory uses what is called a Page File on a hard drive to act as RAM. Since it is on a hard drive it is much slower than real RAM. However, it is Since it is on a hard drive it is much slower than real RAM. However, it is better than having a program lockup do to insufficient memory. Windows does better than having a program lockup do to insufficient memory. Windows does a good job of assigning enough space for most things. You may have to do a good job of assigning enough space for most things. You may have to do some tweaking for certain programs. For better performance you can move the some tweaking for certain programs. For better performance you can move the swap file over to a separate physical drive other than the one your OS is on.swap file over to a separate physical drive other than the one your OS is on.


To access the Virtual Memory file settings, right click on To access the Virtual Memory file settings, right click on My ComputerMy Computer, select , select PropertiesProperties and then select and then select Performance OptionsPerformance Options from the from the Advanced TabAdvanced Tab. Then . Then click click ChangeChange..


Here is where you can adjust the size of the swap file. The “rule of thumb” is 1.5 Here is where you can adjust the size of the swap file. The “rule of thumb” is 1.5 times the amount of RAM for the initial size and 2 to 3 times the RAM for the times the amount of RAM for the initial size and 2 to 3 times the RAM for the maximum size. You can also more the page file to a different hard drive. maximum size. You can also more the page file to a different hard drive.


To more the page file to the D: drive from C:, select the D: in the top window To more the page file to the D: drive from C:, select the D: in the top window by clicking on it. Type in the Initial and Maximum sizes and click on Set.by clicking on it. Type in the Initial and Maximum sizes and click on Set.


Select the C: in the top window. Type in “0” for Initial and Maximum sizes and Select the C: in the top window. Type in “0” for Initial and Maximum sizes and click on Set. Finally click on OK to accept the changes. The swap file has been click on Set. Finally click on OK to accept the changes. The swap file has been moved to the D: drive. This setting change will require a restart.moved to the D: drive. This setting change will require a restart.

Win98 Startup Menu Win98 Startup Menu Safe ModeSafe Mode

In Windows 9x you would enter the Startup Menu by pressing F8 during the startup or boot phase. You could enter directly into Safe Mode by

pressing F5. Windows 2000 replaced the Startup Menu with the Advanced Options Menu. There is no direct path to Safe Mode in Windows 2000.

Advanced Options MenuAdvanced Options MenuSafe ModeSafe Mode

Enter the Advanced Options Menu by pressing the Enter the Advanced Options Menu by pressing the F8F8 key during the key during the operating system selection phase. You may select Safe Mode or other boot operating system selection phase. You may select Safe Mode or other boot options from here. Safe Mode loads a minimal set of drivers and allows you options from here. Safe Mode loads a minimal set of drivers and allows you to get into windows when you are having troubles to change your settings or to get into windows when you are having troubles to change your settings or disable a problem device driver. Safe Mode with Networking should be disable a problem device driver. Safe Mode with Networking should be selected if you need to access network drives.selected if you need to access network drives.

Enable Boot LoggingEnable Boot Logging

Boot Logging is a process in which a computer that is Boot Logging is a process in which a computer that is starting (booting) creates a log file that records the starting (booting) creates a log file that records the loading of each device and service. The log file is called loading of each device and service. The log file is called Ntbtlog.txtNtbtlog.txt, and it is saved in the system root directory. , and it is saved in the system root directory. The boot log is useful in determining the exact cause of The boot log is useful in determining the exact cause of system startup problems.system startup problems.

Last Known Good ConfigurationLast Known Good Configuration

From the Advanced Options Menu you can select the Last Known From the Advanced Options Menu you can select the Last Known Good Configuration option which will revert to the control set Good Configuration option which will revert to the control set used for the last good boot. Use this if the system hangs after a used for the last good boot. Use this if the system hangs after a new driver is installed. new driver is installed.

Note: If you have problems with the boot Note: If you have problems with the boot don’t log ondon’t log on doing so will cause the Last doing so will cause the Last Known Good to be replaced by the current control set that could have errors.Known Good to be replaced by the current control set that could have errors.

Recovery ConsoleRecovery Console

The Recovery Console is a command line tool that allows The Recovery Console is a command line tool that allows you to recover functionality, make repairs, manually you to recover functionality, make repairs, manually restore the registry, or stop and start services. restore the registry, or stop and start services.

Note: The administrator password is needed to enter the Recovery Console.Note: The administrator password is needed to enter the Recovery Console.

The Recovery Console is not installed by default. An administrator would install it The Recovery Console is not installed by default. An administrator would install it from the 2000 CD.from the 2000 CD.

The installation command is The installation command is D:\i386\winnt32 /cmdconsD:\i386\winnt32 /cmdcons.. The files that make up the Recovery Console reside on the system partition in a The files that make up the Recovery Console reside on the system partition in a

folder called CMDCONSfolder called CMDCONS After the Recovery Console is installed it will become a choice on the startup boot After the Recovery Console is installed it will become a choice on the startup boot

menu.menu. The Recovery Console allows the administrator to access the file system, and The Recovery Console allows the administrator to access the file system, and

has the security of NTFS.has the security of NTFS.



The Recovery Console supports many of the old familiar DOS commands such as ATTRIB, CHKDSK, COPY, and FORMAT.

Recovery ConsoleRecovery ConsoleHere are some of the new commands used in the Recovery Console.Here are some of the new commands used in the Recovery Console. DISKPARTDISKPART – The Win 2000 equivalent to FDISK – The Win 2000 equivalent to FDISK EXPANDEXPAND - Used to extract copies of compressed files from the - Used to extract copies of compressed files from the

installation CDinstallation CD EXITEXIT – Exits the Recovery Console and restarts the computer – Exits the Recovery Console and restarts the computer FIXBOOTFIXBOOT – Writes a new partition table from the backup MST – Writes a new partition table from the backup MST FIXMBRFIXMBR – The equivalent to FDISK /MBR – The equivalent to FDISK /MBR HELPHELP – Displays the help screen – Displays the help screen LISTSVCLISTSVC - Lists all services on the system - Lists all services on the system LOGONLOGON – Logs on to a Win 2000 system – Logs on to a Win 2000 system SYSTEMROOTSYSTEMROOT – Sets the current directory to the root of the system – Sets the current directory to the root of the system

directory – typically C:\directory – typically C:\

Check What You Have LearnedCheck What You Have LearnedQ: Q: What displays the applications and processes that are running and the What displays the applications and processes that are running and the computer resources used by them?computer resources used by them?

A: A: Task Manager Task Manager

Q: Q: Which log displays Success and Failure Audit events? Which log displays Success and Failure Audit events?

A: The A: The Security logSecurity log

Q: What utility allows an administrator to control, format and manipulate Q: What utility allows an administrator to control, format and manipulate computer hard drives from within the operating system?computer hard drives from within the operating system?

A: A: The Disk Management utility The Disk Management utility

Q: What is the main difference between basic and dynamic disks?Q: What is the main difference between basic and dynamic disks?

A: A: Basic disks use standard partition tables. Dynamic disk volumes do not use Basic disks use standard partition tables. Dynamic disk volumes do not use standard partitions and they can be created or expanded while the operating standard partitions and they can be created or expanded while the operating system is active.system is active.

Check What You Have LearnedCheck What You Have LearnedQ: What does RAID stand for?Q: What does RAID stand for?

A: A: Redundant Array of Inexpensive Disks Redundant Array of Inexpensive Disks

Q: Q: To convert a disk from basic to dynamic you would use what Windows To convert a disk from basic to dynamic you would use what Windows Computer Management tool?Computer Management tool?

A: A: Disk Management Disk Management

Q: Which dynamic disk type uses disk striping with parity and requires a Q: Which dynamic disk type uses disk striping with parity and requires a minimum of 3 drives? minimum of 3 drives?

A: A: RAID 5 RAID 5

Q: What term do we use to describe two drives that contain identical copies Q: What term do we use to describe two drives that contain identical copies of the same data? of the same data?

A: A: Mirrored or RAID 1Mirrored or RAID 1

Q: Which tool is used to rearrange files, programs, and unused space on your Q: Which tool is used to rearrange files, programs, and unused space on your computer's hard disk, so that programs run faster and files open more quickly? computer's hard disk, so that programs run faster and files open more quickly?

A: A: Disk Defragmenter Disk Defragmenter

Check What You Have LearnedCheck What You Have LearnedQ: The Microsoft Management Console holds individual utilities called __?__.Q: The Microsoft Management Console holds individual utilities called __?__.

A: A: Snap-insSnap-ins

Q: Q: Which Recovery Console command lists all services on the system.Which Recovery Console command lists all services on the system.

A: A: LISTSVCLISTSVC

Q: The Task Manager and the __?__ tools are used for resource tracking.Q: The Task Manager and the __?__ tools are used for resource tracking.

A: A: Performance Console Performance Console

Q: Management of users and groups is done at the __?__ level if a Windows 2000 Q: Management of users and groups is done at the __?__ level if a Windows 2000 Professional computer is a member of a Windows NT or Active Directory domain.Professional computer is a member of a Windows NT or Active Directory domain.

A: A: DomainDomain

Q: Network resources such as drives or folders can be __?__ to My Computer Q: Network resources such as drives or folders can be __?__ to My Computer making it easy to access them. making it easy to access them.

A: A: MappedMapped

Check What You Have LearnedCheck What You Have LearnedQ: Which tab in Windows 2000/XP has the settings for processor scheduling, Q: Which tab in Windows 2000/XP has the settings for processor scheduling, memory usage, and virtual memory?memory usage, and virtual memory?A: A: AdvancedAdvanced

Q: Q: The five types of events displayed by the Event Viewer are?The five types of events displayed by the Event Viewer are?A: A: Error, Warning, Information, Success Audit and Failure Audit.Error, Warning, Information, Success Audit and Failure Audit.

Q: Which command changes attributes of a selected file or folder?Q: Which command changes attributes of a selected file or folder?

A: A: The ATTRIB command The ATTRIB command

Q: What is the function of the Windows 2000 Emergency Repair Disk (ERD)?Q: What is the function of the Windows 2000 Emergency Repair Disk (ERD)?A: A: The Windows 2000 Emergency Repair Disk (ERD) saves critical boot files The Windows 2000 Emergency Repair Disk (ERD) saves critical boot files and partition information, and fixes boot problems.and partition information, and fixes boot problems.

Q: What log is useful in determining the exact cause of system startup problems?Q: What log is useful in determining the exact cause of system startup problems?

A: The A: The boot log which is named Ntbtlog.txt.boot log which is named Ntbtlog.txt.

Q: What command is used to convert a FAT32 volume or partition into NTFS?Q: What command is used to convert a FAT32 volume or partition into NTFS?

A: CONVERT D: /FS:NTFS (D: being the volume you wish to convert.)A: CONVERT D: /FS:NTFS (D: being the volume you wish to convert.) Note: To view the progress on the screen add the verbose switch /V. Note: To view the progress on the screen add the verbose switch /V.

Check What You Have LearnedCheck What You Have LearnedQ: What information does the Performance tab on the Task Manager display?Q: What information does the Performance tab on the Task Manager display?

A: A: The Performance tab displays information about the CPU usage, available The Performance tab displays information about the CPU usage, available physical memory, the size of the disk cache, commit charge, and kernel memory.physical memory, the size of the disk cache, commit charge, and kernel memory.

Q: Q: What function does the Disk Cleanup utility perform?What function does the Disk Cleanup utility perform?

A: A: The Disk Cleanup utility calculates the disk space that can be freed, The Disk Cleanup utility calculates the disk space that can be freed, compresses old files, and deletes temporary Internet files.compresses old files, and deletes temporary Internet files.

Q: What key combination is used in Windows NT/2000/XP to open the Task Q: What key combination is used in Windows NT/2000/XP to open the Task Manager?Manager?

A: A: The CTRL-SHIFT-ESC key combination is used in Windows NT/2000/XP to The CTRL-SHIFT-ESC key combination is used in Windows NT/2000/XP to open the Task Manager.open the Task Manager.

Q: Which folder, residing on the system partition, contains the files that make up Q: Which folder, residing on the system partition, contains the files that make up the Recovery Console?the Recovery Console?

A: A: CMDCONSCMDCONS

Q: If the system hangs after a new driver is installed in Windows 2000 what Q: If the system hangs after a new driver is installed in Windows 2000 what should you try to resolve the problem?should you try to resolve the problem?

A: A: Select “Last Known Good Configuration” from the Advanced Options Menu. Select “Last Known Good Configuration” from the Advanced Options Menu.

windows nt & 2000 robert horan, ccna-ccai erwin technical center school district of hillsborough...

Documents

local computer

management tools

windows security window

task manager window

local security policies

task manager box

computer resources

effective security