Lesson 8 - Chapter 2: Windows Repair and Recovery Flashcards
What is Windows Recovery Environment?
a GUI-based utility that offers links to many different troubleshooting and repair tools
What are the 2 nicknames for Windows Recovery Environment?
- Windows RE
- WinRE
Is WinRE a GUI-based or command-line based?
GUI-based
When does the option to launch Windows Recovery Environment appear?
After the system fails to boot normally the first time (usually)
What dialog box appears that contains the option to launch Windows Recovery Environment? What 2 options does it give you? (3)
- Automatic Repair box
- Restart and Advanced Options
If you clicked Advanced Options in the Automatic Repair box, what 3 options do you get?
- Continue (to boot normally)
- Troubleshoot (opens page of options)
- Turn off your PC
How do you get to Windows RE from the GUI? (3 steps)
- Start
- Power
- Hold down SHIFT key as you click Restart
What choices do you get when you click “Troubleshoot” in the Advanced options of the Automatic Repair box? (2)
- Reset This PC
- Advanced Options
What happens when you select “Reset this PC”?
It wipes out (mostly) everything and reinstalls Windows from the original installation media or recovery media
Reset This PC is a ___ ___
last resort
What data can you keep when you use Reset This PC? What settings are wiped? (2)
You can choose whether to keep user data (but applications and settings are wiped)
What are the 6 options you’ll see when selecting Advanced Options in Windows RE?
- Startup Repair
- Startup Settings
- Command Prompt
- Uninstall Updates
- System Restore
- System Image Recovery
(can also include 7. UEFI Firmware settings for UEFI systems)
What does Startup Repair do in the Advanced Options of Windows RE?
initiates an automatic, in-depth diagnostic and repair process
(repair, restore, run, roll back)
What does Startup Settings do in the Advanced Options of Windows RE?
allow you to select from a variety of special startup modes so you can get into the system and make adjustments to settings
What are the 7 options you have when choosing Startup Repair in the Advanced Options of Windows RE?
Repair, Restore (2) , Roll (2) , Run (2)
- Repair a corrupted Registry by accessing the backup copy on your hard drive
- Restore critical boot files
- Restore critical system files and driver files
- Roll back any non-working drivers
- Roll back updates
- Run chkdsk
- Run a memory test to check your RAM
What is the “Enable debugging” Startup mode? (2)
- Does Windows start normally?
- What does this mode do?
- Windows starts normally
- Info about the boot process is sent via cable to a debugging application on another computer
(mostly obsolete)
What is the “Enable boot logging” Startup mode? (3)
- Does Windows start normally?
- What does this mode do?
- What modes is this enabled in?
- Windows starts normally
- Info about the boot process is sent to a log file ntbtlog.txt in C:\Windows
- Boot logging is enabled for each of the Safe Mode options
What is the “Enable low-resolution video” Startup mode? (3)
- Does it start normally?
- What does this mode do?
- When would you use this?
- Windows starts normally
- Current display driver changes to lowest resolution available (no VGA display though)
- Use this when you accidentally change the display resolution to a mode the display adapter doesn’t support
How does Windows start in “Safe Mode”? What loads?
It starts Windows with most non-essential drivers and services disabled (including network drivers)
Why would “Safe Mode” be useful?
- If malware is loading at startup
- A certain drive or service is preventing a normal boot
What does it mean you should do if a computer starts in Safe Mode but not normally? (2)
- You should check out the driver situation in the Device Manager
- Look at the list of startup apps in Task Manager
What does Enable Safe Mode with Networking disable?
It disables most non-essential drivers and services except it doesn’t disable network-related drivers and services
Why would you need to Enable Safe Mode with Networking?
To access the Internet or network while in Safe Mode (like to download a replacement driver)
What’s the problem if Windows won’t start up in Safe Mode with Networking but will start in regular Safe Mode?
the problem is the network hardware or driver
In troubleshooting a system that starts up in regular Safe Mode but not with Networking enabled, if you use Device Manager to disable the network adapter and reboot and Windows starts normally, what does that mean you should replace?
replace the network driver
What is “Enable Safe Mode with Command Prompt” look like?
it’s just like Safe Mode but with no GUI desktop (useful if the desktop doesn’t display when you start Windows)
What might be corrupted if the desktop does not display when starting Windows?
the explorer.exe file
How do you fix a corrupted explorer.exe file?
From the command prompt (in Safe Mode with Command Prompt), delete explorer.exe and copy an uncorrupted version from another PC in its place
Can you run a GUI application in “Safe Mode with Command Prompt”?
Yes, you just have to know the name of its executable and type it in the command prompt
(eventvwr.msc, compmgmt.msc, devmgmt.msc)
What is the “Disable driver signature enforcement” mode?
You use this option to allow a driver that is not digitally signed for one startup
(once you get in you’ll need to change to a signed driver or disable the component the driver supports)
When would you use the “Disable early launch anti-malware protection” Startup Mode?
To disable anti-malware from starting up too early if it’s preventing something important from loading for one startup
(after, you’ll need to figure out how to make anti-malware software allow that item)
Windows normally restarts automatically after a system crash (such as a STOP error or BSoD). T or F?
True
Why would you need to select the “Disable automatic restart after failure” Startup Setting?
To break out of an endless cycle of reboots from the same problem
How will Windows start in the “Disable automatic restart after failure” Startup Setting?
Windows will start normally just once and the system may be unstable but may keep running long enough to figure out the issue and fix it
What are the 9 special startup modes in Startup Setting in Windows RE?
1 - 6 = Enable
7 - 9 = Disable
- Enable debugging
- Enable boot logging
- Enable low-resolution video
- Enable Safe Mode
- Enable Safe Mode with Networking
- Enable Safe Mode with Command Prompt
- Disable driver signature enforcement
- Disable early launch anti-malware protection
- Disable automatic restart after failure
Why would some Windows Updates not be reversible when selecting the “Uninstall Updates” option in Advanced Options?
Because they made irrevocable system changes
What does the “System Restore” Advanced Option do?
Uses a restore point saved on the PC to restore system files to a previous state
Why would System Restore be useful?
If corrupted system files (or recent malware) are the root cause
When would you use “System Image Recovery” tool?
To restore a system (or a set of uniform systems) after a catastrophe
What kind of default image should you keep on hand in case you need to use the System Image Recovery tool? What 3 things should it include? (3)
Includes:
1. OS settings
2. Network settings
3. Applications
(can keep a simple image with just the OS reloading too)
How do you make a system image? (3 steps)
- Open the Control Panel in Large Icon view
- Backup and Restore (Windows 7)
- Create a system image
When using the Window RE, when would you see the UEFI Firmware settings option?
If your motherboard uses UEFI and aren’t running Windows in a VM
What does using the UEFI Firmware settings option in Windows RE enable you to do?
Boot into the motherboard’s setup utility to tweak settings like changing the boot order
What startup mode will prompt you for a user account and password (with admin priv)?
Command Prompt
To enter Windows RE when Windows is already running, hold down this key as you choose Power > Restart
Shift
This Windows RE feature initiates an automatic, in-depth diagnostic and repair process
Startup Repair
What are 2 ways to access System Restore?
- In Windows
- Windows RE
What’s the difference between a system restore point and a system image? (2)
a system restore point is an image of the system configuration and settings to restore it to an earlier working state
a system image is an exact copy of a drive (drivers, OS, user settings, programs, files)
Which System File Checker command syntax would you use to repair any incorrect system files?
sfc c: /f