Course ILT Monitoring and management Unit objectives Identify the stages of the Windows startup process Use Windows 2000 Professional and Windows XP utilities to monitor the operating system Troubleshoot operating system problems Manage the operating system

Course ILT Topic A Topic A: The Windows boot process Topic B: System monitoring Topic C: System troubleshooting Topic D: System management

Course ILT Windows 2000/XP startup files NTLDR Boot.ini Bootsect.dos Ntdetect.com Ntbootdd.sys Ntoskrnl.exe Hal.dll System Registry hive Smss.exe continued

Course ILT 2000/XP startup files, continued Pagefile.sys Winlogon.exe Lsass.exe

Course ILT The Registry A hierarchical database Created during Windows installation Binary files hold system configuration information –Security settings –User profiles –Installed applications –Attached hardware –System properties Files are called hives continued

Course ILT The Registry, continued Stored in the folder \%systemroot%\System32\Config –Windows 2000 Professional — C:\Winnt –Windows XP — C:\Windows

Course ILT Registry keys Section of the Registry Contains subkeys and values Keys: –HKEY_CLASSES_ROOT –HKEY_CURRENT_USER –HKEY_LOCAL_MACHINE –HKEY_USERS –HKEY_CURRENT_CONFIG

Course ILT Startup process 1.ROM BIOS bootstrap process 2.Boot phase — using NTLDR 3.Load phase 4.Kernel-initialization phase 5.Services-load phase 6.Win32 subsystem start phase 7.User logon 8.Last Known Good control set created

Course ILT Activity A-1 Identifying phases in the startup process

Course ILT Activity A-2 Observing the Windows XP startup process

Course ILT Topic B Topic A: The Windows boot process Topic B: System monitoring Topic C: System troubleshooting Topic D: System management

Course ILT Windows Diagnostics MSINFO32 System Information dialog box –Hardware Resources –Components –Software Environment –Internet Settings Can also use Start, Programs, Accessories, System Tools menu Connect to a remote computer 1.Choose View, Remote Computer 2.Enter network name of the computer

Course ILT Activity B-1 Running Windows Diagnostics

Course ILT Task Manager Information on running processes Press Ctrl + Alt + Delete –or– Right-click an empty space in the taskbar and choose Task Manager Three tabs –Application –Processes –Performance Windows XP – two additional tabs –Networking –Users

Course ILT Task Manager in Windows XP

Course ILT Activity B-2 Observing Task Manager data

Course ILT Computer Management Use to manage a local or a remote computer Administrative tasks: –Monitor system events –Create and manage shared resources –Determine the users who are connected the computer you are managing –Start and stop system services –Set properties for storage devices –View device configurations –Add or change device drivers –Manage applications and services

Course ILT Event Viewer Monitor events that occur on your system Use to determine the cause of problems Categories –Application –Security –System Access through Administrative Tools or Computer Management console

Course ILT Event information Type Date Time Source Category Event User Computer

Course ILT Event types Error Warning Information Success Audit (Security Log only) Failure Audit (Security Log only)

Course ILT Event properties

Course ILT Activity B-3 Viewing the event logs

Course ILT Error Reporting Report system and program errors to Microsoft Track and address errors with: –Operating system –Windows component –Programs Can configure error reporting to send only specified information

Course ILT Error Reporting choices Disable error reporting Notify me when critical errors occur Enable error reporting Windows operating system Programs Choose Programs Clicking the Choose Program button

Course ILT Activity B-4 Disabling Error Reporting

Course ILT Activity B-5 Enabling error reporting for specific programs

Course ILT Topic C Topic A: The Windows boot process Topic B: System monitoring Topic C: System troubleshooting Topic D: System management

Course ILT Startup messages Computer boots successfully but reports an error message when loading the operating system Messages: –Error in CONFIG.SYS line ## –Himem.sys not loaded –Missing or corrupt Himem.sys –Device/service has failed to start

Course ILT Boot messages Computer doesn’t boot successfully; never gets to the operating-system load phase Messages: –Invalid boot or non-system disk error –Inaccessible boot device –Missing NTLDR or Couldn’t find NTLDR –Bad or missing Command interpreter

Course ILT Operating-system load errors Computer successfully boots, but operating system interface doesn’t load properly Messages: –Failure to start GUI –Windows Protection Error—illegal operation –User-modified settings cause improper operation at startup

Course ILT Activity C-1 Interpreting boot and startup messages

Course ILT Startup modes Use to diagnose and fix problems Press F8 after you hear your computer’s startup beep Modes: –Safe mode –Safe mode with networking –Safe mode with command prompt –Enable boot logging –Enable VGA mode –Last Known Good Configuration continued

Course ILT Startup modes, continued Modes, continued: –Debugging mode –Start Windows normally

Course ILT Activity C-2 Booting the computer in different startup modes

Course ILT Dr. Watson Use to log errors user.dmp and drwtsn32.log files \Documents and Settings\All Users\Application Data\Microsoft\Dr Watson folder Copy into the Windows Startup folder

Course ILT Activity C-3 Managing general protection faults

Course ILT System Configuration Utility Msconfig Use to view, disable, and enable services and software that run at startup Quickly test solutions to startup problems Click Start, choose Run, type msconfig, and click OK

Course ILT Services page

Course ILT Startup modes On the General tab: –Normal Startup –Diagnostic Startup –Selective Startup

Course ILT Activity C-4 Using the System Configuration Utility

Course ILT System Restore Creates snapshots of your computer’s configuration Three types of snapshots: –System checkpoints –Manual restore points –Installation restore points Use to restore your computer to a previous configuration

Course ILT System Restore in Windows XP

Course ILT Activity C-5 Creating a system restore point

Course ILT Activity C-6 Booting to System Restore

Course ILT Emergency Repair Disks Contains basic system configuration files Use to restore your computer to a bootable state if: –Registry is damaged –NTFS partition isn’t successfully booting %systemroot%\Repair folder Not bootable; use with the Windows installation CD-ROM continued

Course ILT Emergency Repair Disks, continued Use to: –Inspect and repair the boot sector –Inspect and repair the startup environment –Verify Windows 2000/XP system files and replace missing or damaged files Update ERD whenever you make configuration changes to computer Not a substitute for a full Registry backup ASR in Windows XP

Course ILT Windows 2000 ERD Autoexec.nt Config.nt Setup.log No Registry information

Course ILT Automated System Recovery Creates a backup of your system partition and a floppy disk containing critical system settings Recover from a system failure caused by problems with the system/boot volume Not available in Home Edition or Media Center

Course ILT ASR tasks 1.Restores the disk configurations 2.Formats your system and boot volumes 3.Installs a bare-bones version of Windows 4.Runs Backup to rebuild your system and boot volumes from your ASR backup set

Course ILT Activity C-7 Creating an ASR recovery set

Course ILT Recovery Console Use to recover when your computer doesn’t start properly or at all Access FAT, FAT32, and NTFS volumes from a command line Use to: –Repair the boot sector –Replace missing or corrupt operating system files –Create and format partitions –Enable or disable services or devices

Course ILT Folder access in Recovery Console The root folder The %systemroot% folder and the subfolders of the Windows XP Professional or Windows 2000 Professional installation you selected when loading the Recovery Console The Cmdcons folder Removable media drives, such as CD- ROM and DVD drives

Course ILT Activity C-8 Running the Recovery Console

Course ILT Microsoft Knowledge Base Troubleshooting reference Contains problem and solution references for: –Windows 2000 Professional –Windows XP Professional –Windows XP Home Edition –Many other Microsoft applications Explains many Microsoft error messages support.microsoft.com

Course ILT Activity C-9 Using Microsoft’s Knowledge Base to research a problem

Course ILT Topic D Topic A: The Windows boot process Topic B: System monitoring Topic C: System troubleshooting Topic D: System management

Course ILT Temporary files Used to keep track of changes in your files as you work on them Should be deleted automatically Not removed if: –Application shuts down unexpectedly –Application isn’t programmed correctly to remove its temporary files File names: –Begin with tilde (~) –End with.tmp

Course ILT Activity D-1 Managing temporary files

Course ILT Registry editors regedit.exe or regedt32.exe regedit.exe — superior search capabilities regedt32.exe — more powerful editing tool Click Start, choose Run, type “regedit” or “regedt32” and click OK

Course ILT The regedt32 window

Course ILT Activity D-2 Viewing Registry information

Course ILT Services and Applications A Computer Management utility Use to manage the services and applications running on –Local computer –Remote computer Three tools: –Services –WMI Control –Indexing Services

Course ILT Services Configure settings relating to how services function and respond to potential problems Four configuration tabs: –General –Log On –Recovery –Dependencies

Course ILT Activity D-3 Managing services

Course ILT Environment variables Tell applications where to find and put files on your hard drive User variables System variables Temp/tmp variables — most common Access through Advanced tab of My Computer properties Changes to variables written to Registry System variables — changes must be made by Administrator

Course ILT Setting environment variables

Course ILT Set command Configure environment variables at the command prompt set variable=string –variable is the name of the environment variable –string is the value you want to assign to the variable Set command alone to view variables

Course ILT Activity D-4 Configuring environment variables

Course ILT Unit summary Identified the stages of the Windows startup process Used Windows 2000 Professional and Windows XP utilities to monitor the operating system Resolved operating system problems Managed the operating system