Transcript Slide 1

Course ILT
Monitoring and management
Unit objectives
 Identify the stages of the Windows
startup process
 Use Windows 2000 Professional and
Windows XP utilities to monitor the
operating system
 Troubleshoot operating system
problems
 Manage the operating system
Course ILT
Topic A




Topic A: The Windows boot process
Topic B: System monitoring
Topic C: System troubleshooting
Topic D: System management
Course ILT
Windows 2000/XP startup files









NTLDR
Boot.ini
Bootsect.dos
Ntdetect.com
Ntbootdd.sys
Ntoskrnl.exe
Hal.dll
System Registry hive
Smss.exe
continued
Course ILT
2000/XP startup files, continued
 Pagefile.sys
 Winlogon.exe
 Lsass.exe
Course ILT
The Registry
 A hierarchical database
 Created during Windows installation
 Binary files hold system configuration
information
–
–
–
–
–
Security settings
User profiles
Installed applications
Attached hardware
System properties
 Files are called hives
continued
The Registry, continued
Course ILT
 Stored in the folder
\%systemroot%\System32\Config
– Windows 2000 Professional — C:\Winnt
– Windows XP — C:\Windows
Course ILT
Registry keys
 Section of the Registry
 Contains subkeys and values
 Keys:
–
–
–
–
–
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_CURRENT_CONFIG
Course ILT
Startup process
1.
2.
3.
4.
5.
6.
7.
8.
ROM BIOS bootstrap process
Boot phase — using NTLDR
Load phase
Kernel-initialization phase
Services-load phase
Win32 subsystem start phase
User logon
Last Known Good control set created
Course ILT
Activity A-1
Identifying phases in the
startup process
Course ILT
Activity A-2
Observing the Windows XP
startup process
Course ILT
Topic B




Topic A: The Windows boot process
Topic B: System monitoring
Topic C: System troubleshooting
Topic D: System management
Course ILT
Windows Diagnostics
 MSINFO32
 System Information dialog box
–
–
–
–
Hardware Resources
Components
Software Environment
Internet Settings
 Can also use Start, Programs,
Accessories, System Tools menu
 Connect to a remote computer
1. Choose View, Remote Computer
2. Enter network name of the computer
Course ILT
Activity B-1
Running Windows Diagnostics
Course ILT
Task Manager
 Information on running processes
 Press Ctrl + Alt + Delete –or–
Right-click an empty space in the
taskbar and choose Task Manager
 Three tabs
– Application
– Processes
– Performance
 Windows XP – two additional tabs
– Networking
– Users
Course ILT
Task Manager in Windows XP
Course ILT
Activity B-2
Observing Task Manager data
Course ILT
Computer Management
 Use to manage a local or a remote
computer
 Administrative tasks:
– Monitor system events
– Create and manage shared resources
– Determine the users who are connected the
computer you are managing
– Start and stop system services
– Set properties for storage devices
– View device configurations
– Add or change device drivers
– Manage applications and services
Course ILT
Event Viewer
 Monitor events that occur on your
system
 Use to determine the cause of
problems
 Categories
– Application
– Security
– System
 Access through Administrative Tools or
Computer Management console
Course ILT
Event information








Type
Date
Time
Source
Category
Event
User
Computer
Course ILT
Event types





Error
Warning
Information
Success Audit (Security Log only)
Failure Audit (Security Log only)
Course ILT
Event properties
Course ILT
Activity B-3
Viewing the event logs
Course ILT
Error Reporting
 Report system and program errors to
Microsoft
 Track and address errors with:
– Operating system
– Windows component
– Programs
 Can configure error reporting to send
only specified information
Course ILT
Error Reporting choices







Disable error reporting
Notify me when critical errors occur
Enable error reporting
Windows operating system
Programs
Choose Programs
Clicking the Choose Program button
Course ILT
Activity B-4
Disabling Error Reporting
Course ILT
Activity B-5
Enabling error reporting for
specific programs
Course ILT
Topic C




Topic A: The Windows boot process
Topic B: System monitoring
Topic C: System troubleshooting
Topic D: System management
Course ILT
Startup messages
 Computer boots successfully but
reports an error message when
loading the operating system
 Messages:
–
–
–
–
Error in CONFIG.SYS line ##
Himem.sys not loaded
Missing or corrupt Himem.sys
Device/service has failed to start
Course ILT
Boot messages
 Computer doesn’t boot successfully;
never gets to the operating-system
load phase
 Messages:
–
–
–
–
Invalid boot or non-system disk error
Inaccessible boot device
Missing NTLDR or Couldn’t find NTLDR
Bad or missing Command interpreter
Course ILT
Operating-system load errors
 Computer successfully boots, but
operating system interface doesn’t
load properly
 Messages:
– Failure to start GUI
– Windows Protection Error—illegal
operation
– User-modified settings cause improper
operation at startup
Course ILT
Activity C-1
Interpreting boot and startup messages
Course ILT
Startup modes
 Use to diagnose and fix problems
 Press F8 after you hear your
computer’s startup beep
 Modes:
–
–
–
–
–
–
Safe mode
Safe mode with networking
Safe mode with command prompt
Enable boot logging
Enable VGA mode
Last Known Good Configuration
continued
Startup modes, continued
Course ILT
 Modes, continued:
– Debugging mode
– Start Windows normally
Course ILT
Activity C-2
Booting the computer in different
startup modes
Course ILT
Dr. Watson
 Use to log errors
 user.dmp and drwtsn32.log files
 \Documents and Settings\All
Users\Application Data\Microsoft\Dr
Watson folder
 Copy into the Windows Startup folder
Course ILT
Activity C-3
Managing general protection faults
Course ILT
System Configuration Utility
 Msconfig
 Use to view, disable, and enable
services and software that run at
startup
 Quickly test solutions to startup
problems
 Click Start, choose Run, type
msconfig, and click OK
Course ILT
Services page
Startup modes
Course ILT
 On the General tab:
– Normal Startup
– Diagnostic Startup
– Selective Startup
Course ILT
Activity C-4
Using the System Configuration Utility
Course ILT
System Restore
 Creates snapshots of your computer’s
configuration
 Three types of snapshots:
– System checkpoints
– Manual restore points
– Installation restore points
 Use to restore your computer to a
previous configuration
Course ILT
System Restore in Windows XP
Course ILT
Activity C-5
Creating a system restore point
Course ILT
Activity C-6
Booting to System Restore
Course ILT
Emergency Repair Disks
 Contains basic system configuration
files
 Use to restore your computer to a
bootable state if:
– Registry is damaged
– NTFS partition isn’t successfully booting
 %systemroot%\Repair folder
 Not bootable; use with the Windows
installation CD-ROM
continued
Emergency Repair Disks, continued
Course ILT
 Use to:
– Inspect and repair the boot sector
– Inspect and repair the startup
environment
– Verify Windows 2000/XP system files
and replace missing or damaged files
 Update ERD whenever you make
configuration changes to computer
 Not a substitute for a full Registry
backup
 ASR in Windows XP
Course ILT
Windows 2000 ERD




Autoexec.nt
Config.nt
Setup.log
No Registry information
Course ILT
Automated System Recovery
 Creates a backup of your system
partition and a floppy disk containing
critical system settings
 Recover from a system failure caused
by problems with the system/boot
volume
 Not available in Home Edition or
Media Center
Course ILT
ASR tasks
1. Restores the disk configurations
2. Formats your system and boot
volumes
3. Installs a bare-bones version of
Windows
4. Runs Backup to rebuild your system
and boot volumes from your ASR
backup set
Course ILT
Activity C-7
Creating an ASR recovery set
Course ILT
Recovery Console
 Use to recover when your computer
doesn’t start properly or at all
 Access FAT, FAT32, and NTFS
volumes from a command line
 Use to:
– Repair the boot sector
– Replace missing or corrupt operating
system files
– Create and format partitions
– Enable or disable services or devices
Course ILT
Folder access in Recovery Console
 The root folder
 The %systemroot% folder and the
subfolders of the Windows XP
Professional or Windows 2000
Professional installation you selected
when loading the Recovery Console
 The Cmdcons folder
 Removable media drives, such as CDROM and DVD drives
Course ILT
Activity C-8
Running the Recovery Console
Course ILT
Microsoft Knowledge Base
 Troubleshooting reference
 Contains problem and solution
references for:
–
–
–
–
Windows 2000 Professional
Windows XP Professional
Windows XP Home Edition
Many other Microsoft applications
 Explains many Microsoft error
messages
 support.microsoft.com
Course ILT
Activity C-9
Using Microsoft’s Knowledge Base
to research a problem
Course ILT
Topic D




Topic A: The Windows boot process
Topic B: System monitoring
Topic C: System troubleshooting
Topic D: System management
Course ILT
Temporary files
 Used to keep track of changes in your
files as you work on them
 Should be deleted automatically
 Not removed if:
– Application shuts down unexpectedly
– Application isn’t programmed correctly to
remove its temporary files
 File names:
– Begin with tilde (~)
– End with .tmp
Course ILT
Activity D-1
Managing temporary files
Course ILT
Registry editors
 regedit.exe or regedt32.exe
 regedit.exe — superior search
capabilities
 regedt32.exe — more powerful editing
tool
 Click Start, choose Run, type “regedit”
or “regedt32” and click OK
Course ILT
The regedt32 window
Course ILT
Activity D-2
Viewing Registry information
Course ILT
Services and Applications
 A Computer Management utility
 Use to manage the services and
applications running on
– Local computer
– Remote computer
 Three tools:
– Services
– WMI Control
– Indexing Services
Course ILT
Services
 Configure settings relating to how
services function and respond to
potential problems
 Four configuration tabs:
–
–
–
–
General
Log On
Recovery
Dependencies
Course ILT
Activity D-3
Managing services
Course ILT
Environment variables
 Tell applications where to find and put
files on your hard drive
 User variables
 System variables
 Temp/tmp variables — most common
 Access through Advanced tab of My
Computer properties
 Changes to variables written to
Registry
 System variables — changes must be
made by Administrator
Course ILT
Setting environment variables
Course ILT
Set command
 Configure environment variables at the
command prompt
 set variable=string
– variable is the name of the environment
variable
– string is the value you want to assign to
the variable
 Set command alone to view variables
Course ILT
Activity D-4
Configuring environment variables
Course ILT
Unit summary
 Identified the stages of the Windows
startup process
 Used Windows 2000 Professional and
Windows XP utilities to monitor the
operating system
 Resolved operating system problems
 Managed the operating system