Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
Users Guide
Winternals Software LP
3101 Bee Caves Road, Suite 150
Austin, Texas 78746
(512) 330-9130
(512) 330-9131 Fax
www.winternals.com
Table of Contents
1
Introduction................................................................................... 1
Overview of Use............................................................................ 2
Booting Up ...................................................................................16
Sample Screen ............................................................................16
Requirements ................................................................................4
Setup Overview..............................................................................5
Installation Media ...........................................................................5
Installation Files .............................................................................7
FAT32 Support ..............................................................................8
Service Pack Upgrade ...................................................................9
OEM Drivers ................................................................................10
Password Protection ....................................................................11
File Installation.............................................................................12
Overview......................................................................................17
Command-line Editing..................................................................18
ACCESS ......................................................................................22
ATTRIB........................................................................................23
BATCH ........................................................................................23
CD/CHDIR ...................................................................................24
CHKDSK......................................................................................24
CLS..............................................................................................24
COMPRESS ................................................................................25
COPY ..........................................................................................26
DEL/ERASE.................................................................................27
DEVICE .......................................................................................28
DIR ..............................................................................................29
EDIT.............................................................................................30
EXIT/QUIT ...................................................................................30
EXPAND ......................................................................................31
FTDISK ........................................................................................31
HELP ...........................................................................................31
KEYBOARD .................................................................................32
LOGFILE......................................................................................32
MAP .............................................................................................33
Winternals Software LP
Page i
6.20
6.21
6.22
6.23
6.24
6.25
6.26
6.27
6.28
6.29
6.30
6.31
6.32
MKDIR/MD...................................................................................34
MORE ..........................................................................................34
MOVE ..........................................................................................34
PASSWORD ................................................................................35
REG/REGEDIT ............................................................................36
REGISTRY/REGLOAD ................................................................37
RENAME/REN .............................................................................37
RESTORE....................................................................................38
RMDIR/RD ...................................................................................39
SERVICE .....................................................................................39
TYPE ...........................................................................................40
VERSION/VER ............................................................................40
XCOPY ........................................................................................41
Troubleshooting ......................................................................... 42
Winternals Software LP
Page ii
Introduction
When problems arise in Windows 3.1 or Windows 95 that render a system
unbootable, there is always the possibility of booting off of a DOS floppy disk
so that the drives of the machine can be accessed for repair and salvage.
This boot-floppy approach to system recovery is often the only way to correct
problems that even "automatic" system repair utilities fail to correct.
Previously, Windows NT/2000 administrators went without this recovery
option. Now, ERD Commander 2000 brings boot functionality to unbootable
Windows NT and Windows 2000 systems.
ERD Commander 2000 enables you to boot Windows NT/2000 not only from
a set of floppy disks, but also from a CD-ROM or from the systems hard disk
in order to access and repair a damaged or dead NT/2000 installation. It is a
command-line shell that provides you with full access to non-bootable
systems with a set of familiar command-line file manipulation tools. Any
Windows NT/2000 system is accessible with ERD Commander 2000, and all
file systems including FAT, NTFS, and CDFS are visible. Note that ERD
Commander 2000 does not rely on data located on a systems hard disk for it
to boot and run Windows NT/2000 can actually be booted from floppies or
CD-ROM. The operating system does not even have to be present on the
computer in order to use ERD Commander 2000 to access the machine's
drives.
Winternals Software LP
Page 1
Overview of Use
ERD Commander 2000 can be used as a tool in solving problems such as:
Enabling and Disabling Services and Drivers
You can list and modify the start types of a systems drivers and services with
ERD Commander 2000. This makes it easy to disable a driver or service that,
because of a bug or misconfiguration, is preventing a system from booting.
Editing Registry Keys
A number of Windows NT/2000 boot problems are the result of misconfigured
Registry values. ERD Commander 2000 will let you search and edit the entire
HKEY_LOCAL_MACHINE\SYSTEM registry tree.
Updating Out-of-Date System Files
Incorrectly applying service packs or system software updates can cause
system DLLs to become out of sync with each other. In many cases this can
prevent Windows NT/2000 from booting successfully. ERD Commander 2000
can copy up-to-date versions of old files from floppy disks or CD-ROMs onto
a system.
Correcting Misconfigured NTFS Security
If security attributes that are too restrictive are applied to certain system files
or directories on NTFS boot drives, Windows NT/2000 will become
unbootable. ERD Commander 2000 includes a special command, ACCESS,
which unlocks otherwise inaccessible files or directories so that Windows
NT/2000 can access them.
Updating Locked Files
Once Windows NT/2000 is up-and-running many system files cannot be
replaced because the system keeps them locked. ERD Commander 2000
makes it possible to update such files because it runs when Windows
NT/2000 is off-line and the files are not open.
Winternals Software LP
Page 2
Winternals Software LP
Page 3
Requirements
ERD Commander 2000 can be configured to boot from a set of floppy disks,
from a CD-ROM (which you burn yourself), or from the systems hard disk.
All three types of ERD Commander 2000 installations require the Microsoft
Windows NT 4.0/2000 installation CD-ROM (Server or Workstation). A
Windows NT/2000 system with a diskette drive and approximately 1MB of
hard disk space are also required. Additionally, you must have local
administrator access to the machine on which you are installing ERD
Commander 2000.
If you choose to create a set of boot diskettes, you will need four blank
formatted 1.44MB floppy diskettes if you are creating an installation for
Windows NT 4.0. If you are creating an installation for Windows 2000, you
will need five blank formatted 1.44MB floppy diskettes.
If you choose to create a bootable CD-ROM you will need a CD-Writer and
appropriate CD-ROM burning software. The software must support the
creation of bootable CD-ROMs that use a Custom boot record. (One choice is
Golden Hawk's CRDWIN: www.goldenhawk.com).
Winternals Software LP
Page 4
3.2
Setup Overview
Figure 3-1
3.3
Installation Media
The ERD Commander 2000 Setup Wizard will prompt you for your preferred
installation method.
If you elect to boot from floppy disks you will require four blank diskettes if
you are creating an installation for Windows NT 4.0, and five blank diskettes if
you are creating an installation for Windows 2000.
You can also elect to create a bootable CD-ROM. In order to use this option
you must have a CD-Writer and appropriate CD-ROM burning software. The
software must support the creation of bootable CD-ROMs that use a Custom
boot
record.
Winternals Software LP
(One
choice
is
Golden
Hawk's
CRDWIN:
Page 5
Figure 3-2
Winternals Software LP
Page 6
3.4
Installation Files
ERD Commander 2000 requires files that are shipped as part of the Windows
NT 4.0 or Windows 2000 installation CD-ROM. You must provide the path to
the \I386 directory of the installation CD-ROM, or a directory containing these
files. (See Figure 3-3)
If you intend to use ERD Commander 2000 to repair systems running
Windows NT 4.0 you should use a Windows NT 4.0 installation CD-ROM. If
you intend to use ERD Commander 2000 to repair systems running Windows
2000 you should use a Windows 2000 installation CD-ROM. However, you
can also use a Windows NT 4.0 installation to access Windows 2000 systems
if you update the installation to use Service Pack 4 or higher.
Figure 3-3
Winternals Software LP
Page 7
3.5
FAT32 Support
If you are creating a Windows NT 4.0 installation and installing onto floppy
diskettes, you have the option of including support for accessing FAT32
volumes. FAT32 volumes are used by Windows 95/98 and Windows 2000,
but are not normally accessible from Windows NT 4.0. (See Figure 3-4)
If you are creating a CD-ROM or hard disk installation then support for FAT32
is always enabled automatically.
When you are installing onto a set of floppy disks the additional driver
required for FAT32 support will require you to insert two of the boot diskettes
an extra time, prolonging the boot process.
Figure 3-4
Winternals Software LP
Page 8
3.6
Using Service Pack 4 or higher will enable ERD Commander 2000 to access
IDE drives that are 8GB and larger (see Q197667). Service Pack 4 also
includes an updated NTFS driver that allows ERD Commander 2000 to
access NTFS volumes on Windows 2000 systems.
If you have the Service Pack on CD-ROM you can simply browse to the I386
directory of the CD-ROM. If you downloaded the Service Pack and have it in
compressed format, select the Extract Service Pack to Folder button and
the service pack files will be extracted for you. Then select the folder to which
you extracted the files. (See Figure 3-5.) If you are performing a Windows
2000 installation you will not see this screen.
Figure 3-5
Winternals Software LP
Page 9
3.7
OEM Drivers
If you work with systems that use SCSI adapters that Windows NT/2000 does
not natively support (i.e., hardware that requires additional drivers to be
added for Windows NT/2000 to use it) then you can add those OEM drivers
to ERD Commander 2000 .To add an OEM driver, simply enter the path the
driver (the driver file should end in. SYS) or browse to it, and press the Add
button. (See Figure 3-6)
If you are installing ERD Commander 2000 onto floppy disks then adding
additional drivers may cause ERD Commander 2000 to request you to insert
the floppy disks additional times during the boot process.
Figure 3-6
Winternals Software LP
Page 10
3.8
Password Protection
Because ERD Commander 2000 gives its user so much power in accessing
systems, you have the option of requiring a password before ERD
Commander 2000 will run. Using a password is especially important when
you have ERD Commander 2000 installed on your hard disk, since otherwise
anyone will be able to access files on your system. (See Figure 3-7)
When an ERD Commander 2000 installation requires a password, the user is
given five attempts to enter it correctly. After the 5th failed attempt the system
will reboot.
Figure 3-7
Winternals Software LP
Page 11
3.9
File Installation
The final phase of installation is copying the ERD Commander 2000 files to
the installation point: floppy disk, CD-ROM image directory, or hard disk.
3.9.1
If you are creating a floppy disk installation you will be prompted for each
floppy disk in turn. Four blank diskettes are required if you are creating an
installation for Windows NT 4.0, and five blank diskettes are required if you
are creating an installation for Windows 2000. Label the disks ERD
Commander 2000 Disk #1, #2, etc. When the diskettes have been created
you can boot a system from them by inserting diskette #1 into the floppy drive
and resetting the system. (See Figure 3-8)
Figure 3-8
Winternals Software LP
Page 12
3.9.2
CD-ROM Installation
[If you are using Golden Hawks CDRWIN and would like additional
instructions, please refer to the Appendix on page 44 of this document.]
Winternals Software LP
Page 13
Figure 3-9
Winternals Software LP
Page 14
3.9.3
You can also choose to install ERD Commander 2000 directly on the hard
disk of a system. When installed on the hard disk, you will have the option to
run ERD Commander 2000 each time your system boots (an entry for it is
added to your BOOT.INI file). If you are creating a hard disk installation then
the ERD Commander 2000 files will be copied to the \ERDCBOOT directory
of your boot partition (the partition containing your BOOT.INI file), and your
BOOT.INI file will be modified to include ERD Commander 2000 as a boot
option. (See Figure 3-10)
Figure 3-10
Winternals Software LP
Page 15
Booting Up
After the disks are loaded, a strippeddown version of Windows NT/2000 will
start, displaying the familiar boottime Blue Screen that presents the NT/2000
version number, system memory size, and number of processors present.
ERD Commander 2000 then starts automatically and enters a commandline
environment nearly identical to the one Windows NT/2000 implements in
Command-Prompt.
4.2
Sample Screen
Figure 4-1 is a presentation of what a typical display looks like after ERD
NTFS
FAT
NTFS
CDFS
115744 KB
256 KB
8764 KB
C:\>
Figure 4-1
Winternals Software LP
Page 16
Overview
Winternals Software LP
Page 17
RENAME
DELETE
COPY and XCOPY
5.2
Command-line Editing
HOME
END
LEFT, RIGHT
DEL
BACKSPACE
UP, DOWN
INSERT
Winternals Software LP
Page 18
ATTRIB
BATCH
CD
CHDIR
CHKDSK
CLS
COMPRESS
COPY
DEL
DEVICE
DIR
EDIT
Winternals Software LP
Page 19
ERASE
EXIT
EXPAND
FTDISK
HELP
KEYBOARD
LOGFILE
MAP
MD
Creates a directory.
MKDIR
Creates a directory.
MORE
MOVE
PASSWORD
QUIT
RD
Removes a directory.
REG
REGEDIT
REGISTRY
REGLOAD
Winternals Software LP
Page 20
REN
RENAME
RESTORE
RMDIR
Removes a directory.
SERVICE
TYPE
VER
VERSION
XCOPY
Winternals Software LP
Page 21
6.1
ACCESS
Switches
/S
Winternals Software LP
Page 22
6.2
ATTRIB
Switches
Sets an attribute
Clears an attribute
/S
6.3
BATCH
Winternals Software LP
Page 23
6.4
CD/CHDIR
CHDIR [drive:][path]
CHDIR[..]
CD [drive:][path]
CD[..]
Notes
..
Type CD drive: to display the current directory in the specified drive. Type CD
without parameters to display the current drive and directory.
6.5
CHKDSK
CHKDSK [Drive]
Omitting Drive will result in the drive of the current directory being checked.
You may not run an NT 4.0 version of CHKDSK on a Windows 2000 volume,
or a Windows 2000 version of CHKDSK on an NT 4.0 volume.
6.6
CLS
CLS
Winternals Software LP
Page 24
6.7
COMPRESS
Switches
/P
/S
Recurse subdirectories
/F
Source
Destination
Files are compressed producing a CAB format output file. The output file will
always end in .CAB.
Wildcards are accepted in source file names.
If the /F option is used the resultant CAB file will be split into multiple pieces,
small enough to be copied onto floppy disks. COMPRESS will automatically
split output files if the destination resides on a floppy drive.
Winternals Software LP
Page 25
6.8
COPY
Notes
source
destination
Wildcards can be used in both the source and destination file name
specifications.
Winternals Software LP
Page 26
6.9
DEL/ERASE
Notes
[drive:][path]filename
Switches
/P
/F
/S
/Q
/A
Attributes
Read-only files
System files
Hidden files
The display semantics of the /S switch are reversed in that it shows you only
the files that are deleted, not the ones it could not find.
Winternals Software LP
Page 27
6.10
DEVICE
DEVICE
DEVICE[device]
DEVICE[device] [start]
Notes
device
start
system
auto
manual
Manually start
disabled
Do not start
Winternals Software LP
Page 28
6.11
DIR
Notes
[drive:][path]filename
Switches
/P
/A
Attributes
Read-only files
System files
Hidden files
/O
Sort order
By name (alphabetical)
/S
/X
Use the /P switch to cause DIR to pause after each screen of information.
Use CTRL-C to exit from DIR output back to the command prompt. If you
inadvertently omit this switch you can pause DIRs output with CTRL-S or
terminate it with CTRL-C.
Winternals Software LP
Page 29
6.12 EDIT
Starts the file editor. Edits the specified file. If file does not exit, it is created.
Syntax
EDIT [drive:][path]filename.
Use the arrow keys and page-up/page-down to move around the file. Press
the shift key while moving the cursor to mark text. In addition, the following
commands are available:
CTRL+H
Show help
CTRL+C
Copy
CTRL+X
Cut
CTRL+V
Paste
CTRL+S
Save file
CTRL+F
Find string
CTRL+G
Find again
CTRL+I
Insert file
CTRL+Q
Quit
6.13
EXIT/QUIT
EXIT
QUIT
Be sure to remove the boot floppy from the floppy disk drive before the
system reboots.
Winternals Software LP
Page 30
6.14
EXPAND
Notes
Source
Target
If no Target is specified the source file will be expanded into the current
directory and will have its name reflect the original un-compressed files
name. For example, if you decompress a file called UFAT.DL_ from the NT
distribution CD its expanded name will be UFAT.DLL.
6.15
FTDISK
FTDISK
This command results in the fault tolerant disk information for the Windows
NT/2000 installation whose Registry is currently loaded via the REGISTRY
command to be actively configured. This makes it possible to access mirrors,
stripe sets, stripe sets with parity, and volume sets that are defined for that
installation.
6.16
HELP
HELP [command]
Notes
Command
Winternals Software LP
Page 31
6.17
KEYBOARD
KEYBOARD [country]
6.18
LOGFILE
LOGFILE [filename]
A log file contains a transcript of all commands and output produced while the
log file is open. Type LOGFILE filename to open a new log file. If a log file is
already open it will be closed. Log files can be used in conjunction with the
BATCH command to record the output of automated tasks.
Winternals Software LP
Page 32
6.19
MAP
MAP
WINDOWS
WINNT
SRC
TEST
FAT
FAT
NTFS
FAT
NTFS
CDFS
115744
256
8764
2128
KB
KB
KB
KB
C:\>
Figure 6-1
Winternals Software LP
Page 33
6.20
MKDIR/MD
Creates a directory.
Syntax
MKDIR [drive:]path
MD [drive:]path
6.21
MKDIR a\b\c
is the same as
MKDIR \a
mkdir \a\b
mkdir \a\b\c
MORE
MORE filename
The MORE command automatically pauses after each screen of data. If you
wish to terminate the output of MORE before the entire contents of a file are
displayed, enter CTRL-C at the pause prompt.
Also see the TYPE command.
6.22
MOVE
Notes
Source
Target
Winternals Software LP
Page 34
6.23
PASSWORD
PASSWORD
PASSWORD [account] [password]
Notes
Account
Password
The REGISTRY command must be used to load the Registry for a Windows
NT/2000 installation on a hard drive before PASSWORD will work. Typing
PASSWORD with no parameters results in the list of local accounts present
on the system to be printed. A changed password will be effective the next
time you boot into the modified configuration.
You can only change the password for one account for each installation
before rebooting the target installation and letting the password change take
effect.
Winternals Software LP
Page 35
6.24
REG/REGEDIT
Notes
key
value
data
One of the
following:
A text string:
(REG_SZ, REG_EXPAND_SZ)
A decimal number:
(REG_DWORD)
A list of hexidecimal numbers:
(REG_SZ, REG_EXPAND_SZ)
Switches
type
class
string
/S
Traverse subdirectories
/F
/D
The REGEDIT command is used to edit values stored under the SYSTEM
key of the registry. The REGISTRY command must be used to load the
Registry for a Windows NT/2000 installation from the hard drive before
REGEDIT will operate.
Winternals Software LP
Page 36
6.25
REGISTRY/REGLOAD
REGISTRY
REGISTRY [systemroot]
REGLOAD
REGLOAD [systemroot]
Notes
systemroot
Omitting systemroot will result in a scan of all hard drives for Windows
NT/2000 installations. If more than one installation is found you will be
prompted to make a selection.
This command is required before other ERD Commander 2000 commands
will be functional, including FTDISK, PASSWORD, REGEDIT, and SERVICE.
6.26
RENAME/REN
Note that you cannot specify a new drive for your destination.
Winternals Software LP
Page 37
6.27
RESTORE
Notes
erd-path
system-path
The existing registry files are renamed before being replaced. For example,
the command:
RESTORE a:\c:\winnt
c:\winnt\system32\config\system.old
move c:\winnt\system32\config\sam
c:\winnt\system32\config\sam.old
move c:\winnt\system32\config\software
c:\winnt\system32\config\software.old
move c:\winnt\system32\config\default
c:\winnt\system32\config\default.old
move c:\winnt\system32\config\security
c:\winnt\system32\config\security.old
expand a:\system._
c:\winnt\system32\config\system
Expand a:\sam._
c:\winnt\system32\config\sam
Expand a:\software._
c:\winnt\system32\config\software
Expand a:\default._
c:\winnt\system32\config\default
Expand a:\security._
c:\winnt\system32\config\security
Winternals Software LP
Page 38
6.28
RMDIR/RD
Switches
6.29
/S
/Q
SERVICE
SERVICE
SERVICE [service]
SERVICE [service] [start]
Notes
Service
Start
manual
Manually start
Disabled
Do not start
Winternals Software LP
Page 39
6.30
TYPE
6.31
VERSION/VER
VERSION
VER
Winternals Software LP
Page 40
6.32
XCOPY
XCOPY source [destination] [/A | /M] [/P] [/S] [/W] [/C] [/I] [/Q] [/F] [/H]
[/R] [/T] [/U] [/K]
Notes
source
destination
Switches
/A
Copies files with the archive attribute set, doesn't change the
attribute
/M
Copies files with the archive attribute set, turns off the archive
attribute
/P
/S
/W
/C
/I
If destination does not exist and copying more than one file,
assumes that destination must be a directory
/Q
/F
/H
/R
/T
/U
/K
Winternals Software LP
Page 41
Troubleshooting
Can I run external programs or commands once I've booted with ERD
Commander 2000?
Because ERD Commander 2000 runs before the Win32 subsystem
begins executing, it is not possible to run any programs other than those
built into ERD Commander 2000.
XCOPY doesn't seem to work correctly for me.
You must specify the /H switch to copy system and hidden files, and the
/R switch if you wish to overwrite read-only files.
Why do I get a FAT32.SYS error when booting with boot disks created with
Terminal Server (TS)?
Terminal Server files take up more space than Workstation or Server
files. In order to use boot disks created in TS, you must move the
FAT32.sys file to Disk 3, then change the entry under [SourceDisksFiles]
in the txtsetup.sif file on disk one, from fat32.sys=1,,,,,,_2,4,1 to
fat32.sys=1,,,,,,_3,4,1. ERD disks created from a Workstation or Server
CD will also work on TS systems.
Why isn't my parallel port device mounted by ERD Commander 2000?
There is no parallel or serial port support for ERD Commander 2000.
Winternals Software LP
Page 42
Technical Support
If you encounter a problem while using ERD Commander 2000 that
requires technical support, please e-mail us at:
support@winternals.com
You can also view our Frequently Asked Questions and download
free updates from our web site at:
http://www.winternals.com/support
For urgent matters, please call the following number and request
Technical Support:
512-330-9861
Before contacting support, please determine if the problem is reproducible
and record the steps necessary to reproduce it. In addition, please have the
following information about your system ready:
Version of Windows NT or Windows 2000
Version of ERD Commander 2000
Memory size, disk types, and file system types
Winternals Software LP
Page 43
Figure A-1
If you have downloaded the free version of CDRWIN a dialog will appear that
informs you that CD-burning operations proceed at 1x speed. The
configuration dialog (FigureA-2), will then appear.
Winternals Software LP
Page 44
Figure A-2
First, enter the path to the directory in which you stored ERD Commander
2000s CD-ROM files, either by typing it in or by dragging the folder from
Explorer, into the File Backup List.
Next, enter the name of the CD image file you will create in the Image
Filename entry in the ISO9660 Image File area. Note that the name you
assign is not important and that you will need approximately 10 MB of free
space on the drive where you store the image file. You can delete the file
after you have burned a CD. Click on the Advanced Options button and
ensure that Use ISO9660 text for Joliet volume descriptor is unchecked
(Figure A-3).
Winternals Software LP
Page 45
Figure A-3
Click on the Bootable Disc tab and configure the dialog box as shown in
Figure A-4:
Check Make Bootable Disc
Set Media Emulation Type to Custom
In the Image File Name field enter the path to the BOOTSECT.BIN file
in the Disk Commander CD-ROM image directory
Set the Load Segment field to 07C0
Set the Load Sector Count to 4
Winternals Software LP
Page 46
Figure A-4
Dismiss the dialog by clicking OK, insert a blank CD-R disk into your CD
burner, and then press Start on the right side of the File Backup and Tools
dialog. Once your ERD Commander 2000 CD is created and you use it to run
ERD Commander 2000 from CD on unbootable systems that support booting
from CD-ROMs.
Winternals Software LP
Page 47