Tweaks and Repairs

Alpha

Numeric

Page Nine ...back it up before you break it!

...select an «Item number» to view a topic, «Title number» to return.
«Item 211» Hard Links
«Item 212» Hlscan.exe: Hard Link Display Tool
«Item 213» Umdhtools.exe: How to Use Umdh.exe to Find Memory Leaks
«Item 214» Msizap.exe: Windows Installer Zapper
«Item 215» Msicuu.exe: Windows Installer Cleanup Utility
«Item 216» How to Multiple Boot Windows XP, 2000, NT, 95, 98, and MS-DOS
«Item 217» Safe-Mode Boot Switches for Windows Boot.ini File
«Item 218» FreeWare Utility «» Agent Ransack
«Item 219» Wntipcfg.exe: Windows NT IPConfig Utility
«Item 220» Possible Error When Attempting to Run a 16-bit Program
«Item 221» How To Disable NetBIOS Over TCP/IP By Using DHCP Server Options
«Item 222» How To Enable/Disable Windows 2000 Dynamic DNS Registrations
«Item 223» What is RPCSS.EXE?
«Item 224» Data Types in the Windows 2000 Registry
«Item 225» Using Regedt32.exe and Regedit.exe
«Item 226» Restoring the Registry
«Item 227» FreeWare Utility «» RegCleaner
«Item 228» Connecting To A Dial-Up Internet Service Provider
«Item 229» FreeWare Utility «» Drop to DOS
«Item 230» Eliminate The Need To Type The Full Path Of An Executable That Is Not In Your Path

«211» Hard Links

A hard link is an NTFS-based link to a given file. When you create a hard link to a file on an NTFS volume, NTFS adds a directory entry for the hard link without duplicating the original file. By creating hard links, you can:

» Create hard links that use the same file name as the original file but appear in different folders.
» Create hard links that use different file names from the original file but appear in the same folder.
» Create hard links that use different file names from the original file and appear in different folders.

Because a hard link is a directory entry for a file, an application can modify a file by using any of its hard links. Applications that use any other hard link can detect the changes. However, directory entries for hard links are updated only when a user accesses a file by using the hard link. For example, if a user opens and modifies a file by using its hard link, and the size of the original file changes, the hard link that is used to access the file also shows the new size.

Important: NTFS updates the properties of a hard link only when a user accesses the original file by using the hard link, not every time a user makes a change to the original file.

Hard links do not have security descriptors; instead, the security descriptor belongs to the original file to which the hard link points. Thus, if you change the security descriptor of any hard link, you actually change the underlying file's security descriptor. All hard links that point to the file allow the newly specified access. You cannot give a file different security descriptors on a per-hard-link basis.

When creating hard links, consider the following:

Ø You can create hard links only on NTFS volumes; not on FAT volumes.
Ø You cannot create a hard link on one volume that refers to a file on another volume.

To delete a file that has multiple hard links, you must delete the file and all its associated hard links.

For additional information on this subject see:

234727 - HowTo Create Hard Links in Windows NT and Windows 2000
286164 - How System Restore Functions When You Delete Hard Links
TechNet Article -Hard Links
MSDN Article - CreateHardLink

«212» Hlscan.exe: Hard Link Display Tool

Hlscan is a command-line tool that displays hard links on an NTFS volume or in specified files or directories of the volume. (Hard links are alternate logical names for a physical file.) The Hlscan display lists all files with more than one name and includes the NTFS file ID, the number of names established for the file, and all file names and paths.

Hlscan helps administrators to secure their volumes by listing all of the hard links that have been created for files, with and without authorization.

You can direct Hlscan to display its output in a command window or to save it to a log file. Hlscan also generates an error log, hlscan.err, in which it records conditions that prevent it from thoroughly scanning a volume for hard links. The error log is created in the local directory or in the directory where the output log is saved, if the output has been redirected. Administrators should examine the output and the error log when searching for hard links.

Note: Displays of hard links in specified directories (hlscan /dir) list only the link names in those directories. Hard links in other directories are included in the name count and listed as "Missing". For a complete list of names of a file, search the entire volume.

This tool is included in the Windows 2000 Resource Kit. It is also available as a free 1.35 MB Download File from Microsoft.

«213» Umdhtools.exe: How to Use Umdh.exe to Find Memory Leaks

The User-Mode Dump Heap (UMDH) utility works with the operating system to analyze Windows heap allocations for a specific process. This utility, and the other tools associated with it, are primarily targeted for Windows 2000. Microsoft Knowledge Base Article 268343 discusses how you can use UMDH to help locate memory leak problems.

«214» Msizap.exe: Windows Installer Zapper

Using this command-line tool, you can remove Windows Installer settings from your computer in the event of a problem. If you experience installation problems, you can use this tool to remove Registry entries before performing a reinstall.

Note: The Windows version of this tool is Msicuu.exe: The Windows Installer Cleanup Utility [see Item 215].

Only Registry entries are removed. Files installed during installation must be removed manually or they will be overwritten during the reinstallation process.

Although the Windows Installer is designed to be very robust, it can become damaged if:

» The registry is corrupted.
» Someone inadvertently changes a registry setting used by Windows Installer, which in turn results in a problem.
» The installation of a program that uses Windows Installer (for example, Microsoft® Office 2000) is interrupted.
» There are multiple instances of Setup running simultaneously, or an instance of Setup is blocked.

You must have Administrator access privileges to use this tool.

Caution: Products installed by Windows Installer may fail to function after using this tool.

MsiZap Syntax:

msizap [*] [F] [R] [P] [A] [T product code] [!] [?]

Parameters:

*	Removes all Windows Installer folders and Registry keys; adjusts shared dynamic-link library (DLL) counts; stops Windows Installer Service.
F	Removes all Windows Installer folders.
U	Removes %USERPROFILE%\msi, AppData\Microsoft\Installer folder.
R	Removes all Windows Installer Registry keys.
P	Removes In-Progress key.
N	Removes Windows Installer products from Uninstall key.
V	Stops Windows Installer Service.
T product code	Removes all information for the given product code.
A	For any specified removal, just changes ACLs to Admin Full Control.
!	Forces "yes" response to any prompt.
?	Displays verbose help.

This tool is available in the Windows 2000 Support Tools. See: Item 177 - Install the Windows 2000 Support Tools.

«215» Msicuu.exe: Windows Installer Cleanup Utility

The Windows Installer Cleanup Utility allows you to safely remove Windows Installer settings from your computer in the event of a problem. If you experience installation problems, you can use this tool to remove Registry entries before performing a re-install.

Note: The command-line version of this tool is Msizap.exe: Windows Installer Zapper [see Item 214].

Only Registry entries are removed. Files installed during installation must be removed manually or they will be overwritten during the re-installation process.

Although the Windows Installer is designed to be very robust, it can become damaged if:

» Your computer's Registry becomes corrupt
» Someone inadvertently changes a registry setting used by Windows Installer, which in turn causes a problem.
» The installation of a program that uses Windows Installer (for example, Microsoft® Office 2000) is interrupted
» There are multiple instances of Setup running simultaneously, or an instance of Setup is blocked

You must have Administrator access privileges to use this tool.

Each product removed by this tool is recorded in a log file. The msicu.log file is located in the <winnt_OS_drive>:\Documents and Settings\<local_user>\Local Settings\Temp\ folder. To reach this file, you must change your Windows Explorer folder view settings to show hidden files and folders.

This tool is available in the Windows 2000 Support Tools. See: Item 177 - Install the Windows 2000 Support Tools.

«216» How to Multiple Boot Windows XP, 2000, NT, 95, 98, and MS-DOS

Microsoft Knowledge Base Article 217210 describes how to configure an Intel-based computer to multiple boot MS-DOS, Microsoft Windows 95 or Microsoft Windows 98, Microsoft Windows NT, Windows 2000, or Windows XP.

«217» Safe-Mode Boot Switches for Windows Boot.ini File

Windows includes a Safe-mode boot feature. To use this feature, press F8 during boot, and then choose the Safe-mode boot mode you want to use. There are also switches that you can use to make any of these modes available in the Boot.ini file. You may want to do this if you frequently use one of these boot modes or you need to automate a process.

The Safe-mode boot modes and corresponding switches include:

» Mode: Safe Mode
Switch: /safeboot:minimal /sos /bootlog /noguiboot

» Mode: Safe Mode with Networking
Switch: /safeboot:network /sos /bootlog /noguiboot

» Mode: Safe Mode with Command Prompt
Switch: /safeboot:minimal(alternateshell) /sos /bootlog /noguiboot

» Mode: Enable Boot Logging
Switch: /bootlog

» Mode: Enable VGA Mode
Switch: /basevideo

» Mode: Directory Services Restore Mode (Domain Controllers Only)
Switch: /safeboot:dsrepair /sos

» Mode: Debugging Mode
Switch: /debug

Sample Boot.ini File with "Safe Mode with Command Prompt" Switch:

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINNT
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINNT="Microsoft Windows 2000 Advanced Server" /fastdetect /SAFEBOOT:MINIMAL(ALTERNATESHELL)

Note: The /sos /bootlog /noguiboot switches are not required with any of the above settings, but they are useful to help with troubleshooting. These switches are included if you press F8 and choose one of the modes.

[ Article ID: 239780 ]

«218» FreeWare Utility «» Agent Ransack

"Welcome to Agent Ransack the professional file searching utility.

Agent Ransack is a tool for finding files and information on your hard drive fast and efficiently. When searching the contents of files Agent Ransack displays the text found so you can quickly browse the results without having to separately open each file!

Agent Ransack provides compelling advantages over similar search tools:

Ø Regular expressions that allow complex rule based searches.
Ø Immediate contents results view.
Ø Various wizards to walk the user through the searching process.

Agent Ransack is provided FREE of charge for the benefit of the Windows community. If you find it useful please register it, free of charge.

Click here for a SCREEN SHOT of the basic interface half-way through a search. (Use your Backspace key or the browser's Back function to return here). Click this link to download Agent Ransack."

«219» Wntipcfg.exe: Windows NT IPConfig Utility

A Graphical IPConfig utility (the Wntipcfg.exe program) is included with the Microsoft Windows 2000 Resource Kit. This GUI tool gives you information about your IP configuration.

To use wntipcfg

» At the command prompt, type: wntipcfg

The resulting screen identifies your IP address and the IP address of your default gateway.
Note: When you make a PPTP connection, Dial-Up Networking changes your default gateway to be the IP address of the PPTP server.

» Click More info.

The resulting screen identifies your IP address, subnet mask, and default gateway for each of your network interfaces, including the interface for your network adapter, your Dial-Up Networking interface, and your PPTP interface.

This tool is included in the Windows 2000 Resource Kit. It is also available as a free 152 Knowledge Base Download File from Microsoft.

«220» Possible Error When Attempting to Run a 16-bit Program

When you attempt to run a 16-bit application under Windows 2000, you might receive the following message:

Application popup: 16 bit Windows Subsystem : An application has attempted to directly access the hard disk, which cannot be supported. This may cause the application to function incorrectly. Choose 'Close' to terminate the application.

This error is typically the result of an invalid entry in the Command.com, Autoexec.nt, or Config.nt files, which are maintained for compatibility with 16-bit applications. To resolve this error, restore the default versions of these files from the installation CD-ROM by performing the following steps:

1. Open a CMD prompt.
2. Navigate to the %systemroot%\system32 folder by typing

cd %systemroot%\system32

3. Rename the current Command.com, Autoexec.nt, and Config.nt files and append the word "old" to the filenames by typing

rename command.com command.comold
rename autoexec.nt autoexec.ntold
rename config.nt config.ntold

4. Navigate to the i386 structure of your Windows installation path (e.g., d:\i386) by typing

cd /d d:\i386

(the /d lets you change the drive and path at the same time).

5. Expand the original files from the installation CD-ROM by typing

expand command.co_ %systemroot%\system32\command.com
expand autoexec.nt_ %systemroot%\system32\autoexec.nt
expand config.nt_ %systemroot%\system32\config.nt

6. Restart your computer, and run the 16-bit application again.

«221» How To Disable NetBIOS Over TCP/IP By Using DHCP Server Options

The Windows 2000 DHCP server provides a Vendor Class option you can use to disable the NetBIOS over TCP/IP for DHCP client. The following describes how to do this.

To disable the NetBIOS over TCP/IP for DHCP client:

1. At the DHCP server:

a. Start the DHCP Manager tool, right-click Scope Option, click Configure Options, and then click the Advanced tab.
b. Under Vendor Class, click Microsoft Options. The user class should remain unchanged (as Default User Class).
c. Click to select the 001Microsoft Disable NetBIOS Option check box, and then set the date entry value to 0x2.

2. At the DHCP client:

a. In the Network and Dial-up Connections tool, right-click Local Area Connection, and then click Properties.
b. Double-click Internet Protocol (TCP/IP), click the Advanced tab, and then click the WINS tab.
c. Click Default: Use NetBIOS setting from the DHCP server. If static IP address is used or the DHCP server does not provide NetBIOS setting, enable NetBIOS over TCP/IP.

Note: To provide this option to the client, you might use the Ipconfig.exe tool to release the IP address on the client and then renew it on the client. For additional information how to configure Windows 2000 Server and TCP/IP networking without NetBIOS, click the article number below to view the article in the Microsoft Knowledge Base:

299977 - How To Configure Windows 2000 Server and TCP/IP Networking Without NetBIOS

[ Article ID: 313314 ]

«222» How To Enable/Disable Windows 2000 Dynamic DNS Registrations

Windows 2000 supports dynamic Domain Name System (DNS) updates (per RFC 2136). This behavior is enabled by default for Windows 2000 DNS clients.

Depending on the configuration and Services running on a particular computer, different components perform dynamic DNS updates. There is no centralized way (such as a tool or Registry keys) to manage the dynamic DNS update behavior of all components. The Microsoft Knowledge Base Article 246804 describes each component and how to modify that particular component's behavior.

«223» What is RPCSS.EXE?

An excellent article, written by: Patrick Chipman <pchipman@conceptsyndicate.com>, can be read at http://www.cexx.org/rpc.htm.

«224» Data Types in the Windows 2000 Registry

Data Types define what kind of data an entry can store. The following data types are used by entries in the Windows 2000 registry:

ø REG_BINARY

Raw binary data. Most hardware component information is stored as binary data. It can be displayed in an easy-to-read format by using Windows 2000 Diagnostics. REG_BINARY data can be displayed and entered in binary or hexadecimal format in a registry editor. For example, see PagingFiles.

ø REG_DWORD

Data represented by a number that is 4 bytes (32 bits) long. Boolean (0 or 1) values and many entries for device drivers and services take this data type. REG_DWORD data can be displayed in binary, hexadecimal, or decimal format in a registry editor. For example, see ActivityLogFlag.

ø REG_DWORD_LITTLE_ENDIAN

Same as REG_DWORD. A 32-bit number in which the most significant byte is displayed as the leftmost or high-order byte. This is the most common format for storing numbers in computers running Windows 2000 and Windows 98.

ø REG_DWORD_BIG_ENDIAN

A 32-bit number in which the most significant byte is displayed as the rightmost or low-order byte. This is opposite of the order in which bytes are stored in the REG_DWORD and REG_DWORD_LITTLE_ENDIAN data types.

ø REG_EXPAND_SZ

A variable-length text string. REG_EXPAND_SZ data can include variables that are resolved when an application or service uses the data. For example, the value of File includes the variable Systemroot. When the Event Log service references the File entry, this variable is replaced by the name of the directory containing the Windows 2000 system files.

ø REG_LINK

Indicates a symbolic link between system or application data and a registry value. You can use Unicode characters in a REG_LINK entry.

ø REG_MULTI_SZ

Multiple text strings formatted as an array of null-terminated strings, and terminated by two null characters. Values that contain lists or multiple values in a form that people can read usually take this data type. The values in a REG_MULTI_SZ entry can be separated by spaces, commas or other marks. For example, the value of Machine is a list of paths accessible by all remote users of Windows 2000.

ø REG_SZ

A fixed-length text string. Boolean ("True" or "False") values and other short text values usually have this data type. For example, see Wallpaper.

ø REG_FULL_RESOURCE_DESCRIPTOR

A series of nested arrays designed to store a resource list for a hardware component or driver. For example, in Regedt32, double-click ConfigurationData in:

HKLM\Hardware\Description\System\MultifunctionAdapter\0\ControllerName\0

To see a Glossary of Registry Terms (and probably more information about the System Registry than you ever wanted to know) go to: About the Technical Reference to the Windows 2000 Registry.

"The Technical Reference to the Windows 2000 Registry is an aid to understanding the contents of the Windows 2000 Registry. It includes descriptions of the some of the most useful subtrees, keys, subkeys, and entries in the registry."

«225» Using Regedt32.exe and Regedit.exe

Windows 2000 provides two versions of Registry Editor: Regedt32.exe (32-bit) and Regedit.exe (16-bit). Regedt32.exe is automatically installed in the <systemroot\system32> folder. Regedit.exe is automatically installed in the <systemroot> folder.

Regedit.exe is included with Windows 2000 primarily for its search capability. You can use Regedit.exe to make changes in the registry, but not all functions or data types can be viewed or edited properly. Regedit.exe does not provide the following functions or capabilities:

»You cannot set the security for registry keys. If you need this functionality, you must use Regedt32.exe.
»You cannot view or edit the value data types REG_EXPAND_SZ and REG_MULTI_SZ. If you attempt to view a REG_EXPAND_SZ value, Regedit.exe displays it as a binary data type. If you attempt to edit either of these data types, Regedit.exe saves it as REG_SZ and the data type no longer performs its intended function. To view or edit these data types, you must use Regedt32.exe.

Microsoft recommends that you use Regedit.exe solely for its search capabilities and that you use Regedt32.exe when it is necessary to edit the registry.

To start Regedt32.exe:

1. Click Start, and then click Run.
2. Type Regedt32 and then click OK.

To start Regedit.exe:

1. Click Start, and then click Run.
2. Type Regedit and then click OK.

Click here for a SCREEN SHOT of the registry of a typical computer, as seen by Regedit.exe. The figure shows the names used to refer to different parts of the Registry. (Use your Backspace key or the browser's Back function to return here).

«226» Restoring the Registry

If a problem has occurred and you wish to restore the Registry to its last known good condition:

1. First, Print these instructions. They will not be available after you shut down your computer in step 2.
2. Click Start, and then click Shut Down.
3. Click Restart, and then click OK.
4. When you see the message Please select the operating system to start, press F8.
5. Use the arrow keys to highlight Last Known Good Configuration, and then press ENTER.
NUM LOCK must be off before the arrow keys on the numeric keypad will function.
6. Use the arrow keys to highlight an operating system, and then press ENTER.

NOTES:

» Choosing Last Known Good Configuration provides a way to recover from problems such as a newly added driver that may be incorrect for your hardware. It does not solve problems caused by corrupted or missing drivers or files.
» When you choose Last Known Good Configuration, Windows 2000 restores information in registry key HKLM\System\CurrentControlSet only. Any changes you have made in other Registry keys remain.

«227» FreeWare Utility «» RegCleaner

RegCleaner is an easy to use program. With RegCleaner you can easily get rid of those old and obsolete registry entries created by software that you have destroyed ages ago. And by easily, I mean easily. You don't have to be any expert to use this program.

Key Features:

< Remove file types
< Remove entries of old software
< Uninstall and remove Software from the Add/Remove list
< Remove unused DLL files
< Remove unused Shared DLLs (Automatically detected)
< Automatic backup feature

Click here for a SCREEN SHOT of RegCleaner. (Use your Backspace key or the browser's Back function to return here). Click here to download Jouni Vuorio's newest trial software.

«228» Connecting To A Dial-Up Internet Service Provider

The following describes how to connect to a dial-up Internet Service Provider (ISP) in Microsoft Windows 2000 Professional.

1. Click Start, point to Settings, and then click Network and Dial-up Connections.
2. Double-click Make New Connection, and then click Next.
3. Click Dial-up to the Internet, click Next, and then follow the instructions in the Network Connection Wizard.

Before you create an Internet connection, check with your ISP to verify the required connection settings. A connection to your ISP may require one or more of the following settings:

« A specific Internet Protocol (IP) address
« IP header compression (for Point-to-Point Protocol [PPP])
« Domain Name Server (DNS) addresses and domain names
« Post Office Protocol version 3 (POP3) settings
« Simple Mail Transfer Protocol (SMTP) settings
« Optional settings, such as Internet Protocol security.

(Q244301)

«229» FreeWare Utility «» Drop to DOS

Visit the Terabyte Unlimited Home Page.

"With Drop to DOS, you can right click on any folder and choose the Drop to DOS option to take you to a Command prompt within that folder. Works with Win9x / WinME / WinNT/2K."

Click here to download Drop to DOS.

«230» Eliminate The Need To Type The Full Path Of An Executable That Is Not In Your Path

The standard solutions to the above problem are:

1. Create and execute a shortcut.
2. Write a script.
3. Place the folder in your path.
4. Use Drop to DOS (Item 229).

Here is an alternate solution:

1. Use the Registry Editor to navigate to:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths

2. Create a subkey with the name of the executable. For example: MyProgram.exe.
3. Create a Value Name with a null name ((Default) or <No Name>) and set the Data Type to Expandable String Value (REG_EXPAND_SZ).
4. Enter the full path to the executable as the data value.

NOTE: Look at...

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WRITE.EXE

...to see a similar example of:

Name: (Default)
Type: REG_EXPAND_SZ
Data: "%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE"

| | |

~ Includes previous work and rights from Ted Quantrill's Tip Quarry ~

TOP