TreeWalk DNS
...select an «Item number» to view a topic, «Title number» to return.
«Item 391» 'NTDETECTd' Error Message When You Start Windows
«Item 392» How To Change the Location of the Windows 2000 Installation Files
«Item 393» FreeWare Utility «» Restoration
«Item 394» Error During the Conversion From FATnn To NTFS
«Item 395» How To Remove the Outlook Express Splash Screen
«Item 396» How To Change the Title Of the Outlook Express Window
«Item 397» How To Disable the Recycle Bin
«Item 398» Remove the Read-Only Attribute While You Copy Files From a CD-ROM
«Item 399» How To Recover a Deleted Dynamic NTFS or FAT32 Volume
«Item 400» Pci.sys Error When Starting Windows
«Item 401» How To Disable the Persistent Connections Registry Parameter
«Item 402» How To Control the NumLock Key At Startup
«Item 403» Show Encryption Commands on the Context Menu
«Item 404» How To Create A Shortcut To Device Manager
«Item 405» Show All Hidden Devices in Device Manager
«Item 406» Network Connectivity Tester (Netdiag.exe)
«Item 407» Re-Initialize Your Registry Without Rebooting
«Item 408» Manage Windows Short File Extensions
«Item 409» Restrict Anonymous User Access
«Item 410» Show Super Hidden File Extensions
«Item 411» Has Your Taskbar Disappeared?
«Item 412» Disable the New Menu Item
«Item 413» Control the System Crash Dump File
«391» 'NTDETECTd' Error Message When You Start Windows
When you try to start a Windows 2000-based computer, you may receive the following error message on a blank screen:
NTDETECTd
-or-
Ntdetect d
This behavior may occur if Windows startup files are damaged or missing. To resolve this issue, run a fast repair from the Windows 2000 CD-ROM. To do this, follow these steps:
1. Insert the Windows 2000 CD-ROM into your computer's CD-ROM or DVD-ROM drive.
2. Restart your computer. You may have to change the BIOS settings to start (boot) from the CD-ROM or DVD-ROM drive, and then restart your computer again.
NOTE: If you cannot start from the Windows 2000 CD-ROM, insert the Setup Disk One floppy disk in the floppy disk drive, and then restart your computer. For more information about how to create setup disks, search Windows Help for makeboot.
3. When the "Welcome to Setup" screen appears, press R to repair the installation of Windows 2000.
4. On the "Repair Options" screen, press R to start the Emergency Repair process.
5. Press F to perform Fast Repair.
6. Follow the on-screen instructions to complete the repair process.
For additional information about differences between the manual and fast repair processes in Windows 2000, click on the Item number below.
Item 201 Differences Between Manual and Fast Repair In Windows
«392» How To Change the Location of the Windows 2000 Installation Files
This Item describes how to edit the Registry to specify a new location for the installation files for Windows 2000. You may want to do this, for example, if you want to copy the Windows 2000 installation files to your hard disk and then configure Windows to find the files on the hard disk, instead of prompting you to insert the Windows 2000 CD-ROM.
To change the location of the installation files to the hard disk:
1. Copy the I386 folder structure from the Windows 2000 CD-ROM to the hard disk.
2. Start Registry Editor (Regedt32.exe).
3. Locate and then click the Installation Sources value in the following Registry key:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup
4. On the Edit menu, click Modify.
5. In the Value Data box, type the path to the Windows 2000 installation files on your hard disk. For example, type C:\I386.
6. Click OK.
7. Locate and then click the SourcePath value in the following Registry key:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup
8. On the Edit menu, click Modify.
9. In the Value Data box, type the drive letter for the Windows 2000 installation files on your hard disk. For example, if the files are in the C:\I386 folder, type C:\ .
10. Click OK.
11. Quit Registry Editor.
IMPORTANT: Note that you cannot edit the Installation Sources value by using Regedit.exe (instead of Regedt32.exe). If you try to view the Installation Sources value, Regedit.exe displays the value as a binary data type. This issue occurs because Regedit.exe does not support the REG_MULTI_SZ data type. To view or edit these data types, you must use Regedt32.exe.
«393» FreeWare Utility «» Restoration
by Brian Kato (Currently unavailable). Restore files which are deleted from the recycle bin or deleted while holding down the Shift key by mistake. Conversely, this program has another function that makes it almost impossible to restore all deleted files. You can use it after deletion of confidential documents, embarrassing files and so on.
» You don't have to install it, so it doesn't leave any garbage in the PC. (You can also run it from a floppy disk.)
» Even if a file seems to be restored, there is no guarantee that the contents are correct. After you run the program, please check the files.
» You can probably restore it correctly if the drive has enough free space and if it's just after deletion.
» If you restore a folder, there is no guarantee that all files or folders which used to belong to the folder will be in it. If you can't find them in it, please search and restore them one by one. If you still can't find them, it's impossible to restore them.
» It will be almost impossible to restore any deleted files if you run the complete deletion function. To be exact, fragments of deleted files can be in last clusters of existing files or allocated and unwritten files. (Note that this function is not suitable for TOP SECRET information.) Even if you find the information of completely deleted files, their contents must be erased. If you want to erase the information too, please run the function
again.
When you use the restoration function, I don't think you will encounter any damage due to bugs, since the function doesn't write anything to physical sectors. However, the complete deletion function replaces physical sectors. Therefore, I confirmed that it worked without any problems by testing many times. As there is a rare possibility of damage or loss, please run the function at your own risk.
[OS] Windows 95/ 98/ Me/ NT/ 2000/ XP. [Platform] IBM-PC/AT Compatible PC. Although the author doesn't explicitly so state, I have successfully used this utility on files in an NTFS partition on Windows 2000.
«394» Error During the Conversion From FATnn To NTFS
When you use Convert.exe to convert a file system from FAT, or FAT32, to NTFS, Windows may issue:
The type of the file system is FAT[32].
Determining disk space required for file system conversion...
Insufficient disk space for conversion
The conversion failed.
<Drive:> was not converted to ntfs.
But you know that you have enough available freespace!
If you have bad sectors at the end of the partition, this error will occur. To determine if this is the cause, perform a chkdsk <drive:> /f /r on the partition. If one of the lines contains the message nn KB in bad sectors, bad sectors is the likely cause.
To workaround this issue, backup or copy your data on this bad partition, reformat as NTFS, and restore your data.
«395» How To Remove the Outlook Express Splash Screen
When you open Outlook Express, a splash screen is displayed before the Outlook Express Window is displayed. To remove the splash screen use the Registry Editor to locate:
HKCU\Identities\{GUID}\Software\Microsoft\Outlook Express\<OE Version>
Add or modify the Data Name: "NoSplash", Data Type: REG_DWORD, and set the Data Value to 1 to eliminate display of the spash screen.
Click here for a SCREEN SHOT of an example. (Use your Backspace key or the browser's Back function to return here).
«396» How To Change the Title Of the Outlook Express Window
To change the caption in the title bar of Outlook Express 5.0 or greater, open the Registry and navigate to:
HKCU\Identities\{GUID}\Software\Microsoft\Outlook Express\<OE Version>
Add or modify the Data Name: "WindowTitle", with a Data Type of REG_SZ, and set the Data Value to the title you desire.
«397» How To Disable the Recycle Bin
To disable the Recycle Bin in Windows 2000 or Windows XP, navigate to this key in the Registry:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BitBucket
Add or modify the Data Name: "NukeOnDelete", a REG_DWORD, Data Type, and set the Data Value to: 00000001
«398» Remove the Read-Only Attribute While You Copy Files From a CD-ROM
When you copy files to a recordable CD-ROM, the read-only attribute is typically set for the files on the CD-ROM. When you use Windows Explorer to restore the files from the CD-ROM to the hard disk, the read-only attribute remains set for the files. Therefore, you cannot edit the files unless you manually clear the read-only attribute for the files.
Additionally, if certain types of files remain read-only, the programs that are associated with those files may not start. For example, if you restore a Microsoft Outlook personal folders (.pst) file from a CD-ROM and you do not clear the read-only attribute, Outlook may not start, and you may receive the following error message:
Cannot start Microsoft Outlook. File access is denied. You do not have the permission required to access the file.
You can either manually clear the read-only attribute from the restored files, or you can remove the read-only attribute while you copy the files from a CD-ROM.
Remove the Read-Only Attribute While Copying Files
You can use the xcopy command to remove the read-only attribute while you are copying files from a CD-ROM. Xcopy.exe resets the read-only attributes unless you specify otherwise by using the /k switch (this switch copies attributes). To use this method:
1. Click Start , and then click Run.
2. In the Open box, type cmd , and then click OK.
3. Type xcopy drive letter :\*.* destination /e /h , where drive letter is the CD-ROM drive letter and destination is the path to the destination for the files, and then press ENTER.
For more information about command-line switches for Xcopy.exe, type xcopy /? at a command prompt.
Manually Remove the Read-Only Attribute from a File
To manually remove the read-only attribute from a file:
1. In Windows Explorer, right-click the file that you want to change, and then click Properties.
2. On the General tab, click to clear the Read Only check box.
3. Click OK.
An additional method available to change file attributes is by use of the Freeware utility "Attribute Changer", as described in Item 328.
«399» How To Recover a Deleted Dynamic NTFS or FAT32 Volume
When you delete a dynamic volume, the OS erases the volume's file-system boot sector (sector-0) and removes the volume entry from the Microsoft Management Console (MMC) Disk Management snap-in private region database. However, as part of this process, the OS leaves the rest of the drive intact, including the data. Both FAT32 and NTFS store a backup copy of the boot sector. You can copy this boot sector back to sector-0 and restore the volume as long as you know the original volume size.
To recover an NTFS volume, perform the following steps:
1. Open the MMC Disk Management snap-in (go to Start, Programs, Administrative Tools, Computer Management, and select Storage).
2. Recreate the original volume by right-clicking the unpartitioned space and selecting New Partition from the context menu; specify the exact size of the original volume in the process, but don't format the volume (you must know the original volume size to recreate the volume because the MMC Disk Management snap-in rounds partition sizes).
3. Use dskprobe.exe to recover the backup boot sector for the NTFS volume from the end of the deleted dynamic volume (because you're restoring a dynamic volume, you might need to use dmdiag.exe to find the backup boot sector). See the Microsoft article "Recovering NTFS boot sector on NTFS partitions" for an explanation of how to copy the boot sector.
4. After you rewrite the NTFS boot sector, quit Dskprobe.
5. Go to the MMC Computer Management console Action menu and click Rescan Disks to mount the volume for immediate use.
To recover a FAT32 volume, perform the following steps:
1. Open the MMC Disk Management snap-in (go to Start, Programs, Administrative Tools, Computer Management, and select Storage).
2. Recreate the original volume by right-clicking the unpartitioned space and selecting New Partition from the context menu; specify the exact size of the original volume in the process, but don't format the volume (you must know the original volume size to recreate the volume because the MMC Disk Management snap-in rounds partition sizes).
3. Use dskprobe.exe to recover the backup boot sector for the deleted dynamic FAT32 volume from sector-6 of the logical volume and write it to sector-0 of the logical volume. See the Microsoft article "Chkdsk Does Not Use Backup Boot Sector to Fix Corrupted FAT32 Boot Sector" for an explanation of how to copy the boot sector.
4. After you rewrite the FAT32 boot sector, quit Dskprobe.
5. Go to the MMC Computer Management console Action menu and click Rescan Disks to mount the volume for immediate use.
«400» Pci.sys Error When Starting Windows
When you start Windows, you could receive an error similar to:
File is missing or corrupt: C:\Winnt\System32\Drivers\Pci.sys
To restore the file, either perform an in-place upgrade or expand the file from the Recovery Console:
1. Start the Recovery Console.
2. Select the installation you wish to access.
3. Enter the Administrator password.
4. Enter MAP to determine the drive letter assigned to the CD-ROM.
5. Type: Expand <CD-ROM drive:>\i386\pci.sy_ c:\Winnt\System32\drivers /y.
You should receive:
pci.sys
1 file(s) expanded.
6. Type exit to terminate Recovery Console.
«401» How To Disable the Persistent Connections Registry Parameter
To disable the Persistent Connections Registry parameter:
1. Start Registry Editor (Regedit.exe).
2. Locate the following Registry key:
HKEY_USERS\.DEFAULT\Software\Microsoft\WindowsNT\CurrentVersion\
Network\Persistent Connections
3. Right-click the SaveConnections value, and then click Modify.
4. In the Value data box, type no , and then click OK.
5. Quit Registry Editor.
NOTE: You must also edit any prior user keys to disable the Persistent Connections parameter. This information is located in the following Registry key:
HKEY_USERS\.DEFAULT\Software\Microsoft\WindowsNT\CurrentVersion\
Network\Persistent Connections
«402» How To Control the NumLock Key At Startup
On Windows 2000 (Win2K) and NT systems, a Registry value controls the NumLock key's status at startup. You can manually set the value on a specific machine, or you can control groups of machines by using a group or system policy (i.e., the former for Win2K systems and the latter for NT systems) that contains a reference to the Registry value. You can find this value at the Registry key:
HKEY_USERS\.DEFAULT\Control Panel\Keyboard
The Data Value: "InitialKeyboardIndicators", Data Type: REG_SZ, can have a Data Value of 0 (i.e., NumLock Off, the default value) or 2 (i.e., NumLock On).
«403» Show Encryption Commands on the Context Menu
You may find it easier to enable EFS (Encrypting File System) by placing "Encrypt" and "Decrypt" commands on the Microsoft Windows Explorer context menu when a file is right-clicked with the mouse.
Open your Registry and find the following key:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Modify or create the Data Name: "Encryption Context Menu", Data Type: REG_DWORD, with a Data Value of either: 0 or 1 (0 = default, 1 = enabled)
Exit the Registry. You may need to restart or log out of Windows for the change to take effect.
«404» How To Create A Shortcut To Device Manager
To create a shortcut to Device Manager in Windows 2000 or Windows XP, use Explorer.exe to navigate to %SystemRoot%\system32\devmgmt.msc. Right-click devmgmt.msc and press Create Shortcut. Rename the shortcut Device Manager and drag it to your Start menu, Quick Launch toolbar, or desktop.
«405» Show All Hidden Devices in Device Manager
Devices that are installed but are not currently connected to the computer (such as a Universal Serial Bus (USB) device or "ghosted" devices) are not normally displayed in Device Manager. This tweak causes all devices to be shown.
Open Regedit and navigate to this key:
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment
Modify or create the Data Name: "DEVMGR_SHOW_NONPRESENT_DEVICES", Data Type: REG_SZ, with a Data Value of: 1 (1 = show all hidden devices)
«406» Network Connectivity Tester (Netdiag.exe)
The Network Diagnostics Tool (Netdiag.exe) is a command-line diagnostic tool that you can use to test network connectivity. It performs a series of tests to determine the state and functionality of your network client. You can use the results of these tests and network status information that is provided by Netdiag to help you isolate network and connectivity problems on your Windows 2000-based workstation or server computer.
Netdiag is included with the Windows 2000 Support Tools. To install the Support Tools, run Setup.exe from the Support\Tools folder on the Windows 2000 CD-ROM. For a free copy of Netdiag, visit this page of the Microsoft Web site.
NOTE: Before you use Netdiag to test network connectivity, Transmission Control Protocol/Internet Protocol (TCP/IP) must be bound to one or more network adapters.
An example of this tool's usefulness is a scenario where the user has a problem connecting to a network resource. Receiving only a "Network path not found" error message and no further assistance, the user has no idea where to start troubleshooting the problem.
Assuming that the reason for the failure in this case is that the WINS server is down, the solution can be found easily with Network Connectivity Tester. When executed in this scenario, the tool shows that the network adapter protocol, bindings, IP address, Default Gateway, and DNS tests succeed. The WINS ping test fails and reports that the WINS server could not be contacted. With this information the user knows that either the WINS server address is incorrect or that the WINS server is not responding for some unknown reason. Since the WINS address is also displayed as output, it can easily be verified for correctness. With the problem isolated, the Network Administrator can perform additional troubleshooting to determine why the WINS server is down.
Netdiag uses the following syntax:
netdiag [/q] [/v] [/l] [/debug] [/d: domain_name ] [/fix] [/dcaccountenum]
[/test: test_name ] [/skip: test_name ]
You can use the following parameters with Netdiag:
» /q : Use this parameter to specify quiet output and display errors only.
» /v : Use this parameter to run Netdiag in verbose mode and display information about the actions that are performed.
» /l : Use this parameter to write output to the Netdiag.log file. The Netdiag.log file is created in the same folder in which you run Netdiag.
» /debug : Use this parameter to run Netdiag in debug mode. This parameter specifies a more verbose output than when you use the /v parameter.
» /d: domain_name : Use this parameter to locate a domain controller in the specified domain.
» /fix : Use this parameter to correct minor issues.
» /dcaccountenum : Use this parameter to enumerate domain controller computer accounts.
» /test: test_name : Use this parameter to specify the test or tests that you want to run, where test_name can be any of the following values:
Autonet : Automatic Private IP Addressing (APIPA) address test
Bindings : Bindings test
Browser : Redir and Browser test
DcList : Domain controller list test
DefGw : Default gateway test
DNS : Domain Name Service (DNS) test
DsGetDc : Domain controller discovery test
IpConfig : Internet Protocol (IP) address configuration test
IpLoopBk : IP address loopback ping test
IPSec : IP Security Protocol (IPSec) security test
IPX : Internetwork Packet Exchange (IPX) test
Kerberos : Kerberos Test
Ldap : Lightweight Directory Access Protocol (LDAP) test
Member : Domain membership test
Modem : Modem diagnostics test
NbtNm : NetBIOS over TCP/IP (NetBT) name test
Ndis : Netcard queries test
NetBTTransports : NetBT transports test
Netstat : Netstat information test
NetWare : NetWare test
Route : Routing table test
Trust : Trust relationship test
WAN : Wide Area Network (WAN) configuration test
WINS : Windows Internet Naming Services (WINS) service test
Winsock : Winsock test
To specify two or more tests, separate each /test: test_name item with a space. Note that tests that you cannot skip will still be run.
» /skip: test_name : Use this parameter to specify the test or tests that you do not want to run, where test_name can be any of the tests listed earlier in the /test: test_name list.
To specify two or more tests, separate each /skip: test_name item with a space.
«407» Re-Initialize Your Registry Without Rebooting
Some Registry changes require you to restart Windows before they are enabled. This tip lets you re initialize your Registry and refresh your desktop without having to leave Windows. Save your work before attempting this tip!
For Windows NT or 2000, press Ctrl + Alt + Delete and select "Task Manager". Choose the "Processes" tab and locate the "explorer.exe" process, highlight it and click "End Process". Select 'File -> New Task', then enter 'explorer' and click OK.
«408» Manage Windows Short File Extensions
Windows evaluates file extensions on the first three characters, therefore 'filename.html' is actually treated as 'filename.htm'. Therefore if you use a command such as 'del *.htm' to delete all the '.htm' files, you will also delete all '.html' files as well. This functionality can be disabled by modifying the Registry.
To turn this setting off open Regedit and navigate to this key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
Modify or create the Data Name: "Win95TruncatedExtensions", Data Type: REG_DWORD, with a Data Value of: 0 (0 = disable , 1 = enable).
«409» Restrict Anonymous User Access
Windows has a feature where anonymous users can list domain user names and enumerate share names. Users who wish to enhanced their system's security may optionally restrict this functionality.
Open Regedit and navigate to this key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA
Create or modify the existing Data Value named: "RestrictAnonymous", Data Type: REG_DWORD, and set it to either "0", "1" or "2" from the list below.
» 0 = Allow anonymous users
» 1 = Restrict anonymous users
» 2 = Allow users with explicit anonymous permissions
Exit from Regedit and restart Windows for the change to take effect.
«410» Show Super Hidden File Extensions
Even when you have configured Windows to display all file extensions, there are still some which remain hidden. This allows potentially dangerous files to be masked as safe files, fooling the user into executing them. This tweak helps expose those file extensions.
It is possible for a malicious user to name a file so that it looks safe to open, when in fact it may be executable containing dangerous content. For example, a file could be displayed as "readme.txt" in explorer, when it fact it is really named "readme.txt.shs", but since the ".shs" portion of the filename is hidden it is impossible to tell it apart from a simple text file. Then once a user double-clicks to open this file, instead of seeing a text page as expected, the file will be executed by Windows as a scrap object and potentially harm the system.
To remove the potential to hide files, open your Registry and using the search function find each occurance of a Data Name of: "NeverShowExt".
Where this name is present the associated file extension will not be shown. To display the file extension highlight the "NeverShowExt" name and either rename it or press Delete. Repeat this process for each extension you want to display.
Some common hidden extensions include:
Document Shortcut (.SHB)
[HKEY_CLASSES_ROOT\DocShortcut]
Internet Shortcut (.URL)
[HKEY_CLASSES_ROOT\InternetShortcut]
File Shortcut (.LNK)
[HKEY_CLASSES_ROOT\lnkfile]
DOS Shortcut (.PIF)
[HKEY_CLASSES_ROOT\piffile]
Explorer Command (.SCF)
[HKEY_CLASSES_ROOT\SHCmdFile]
Shell Scrap Object (.SHS)
[HKEY_CLASSES_ROOT\ShellScrap]
Close the Registry and restart Windows for the change(s) to take effect.
«411» Has Your Taskbar Disappeared?
If your taskbar has disappeared from the desktop or becomes hidden when you move your cursor near, it may be due to a corrupt Registry key.
Close any open desktop and taskbar applications, then open your Registry and find this key:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StuckRects
Delete the entire "StuckRects" key, or "StuckRects2" for Windows 2000/XP, and reboot. When Windows restarts the taskbar should be set back to a default working state.
«412» Disable the New Menu Item
This tweak can be used to disable the ability to use the New menu item to create new objects using explorer.
Open Regedit and navigate to:
HKEY_CLASSES_ROOT\CLSID\{D969A300-E7FF-11d0-A93B-00A0C90F2719}
Rename the key by placing a dash "-" in front of the GUID (i.e.,
{-D969A300-E7FF-11d0-A93B-00A0C90F2719}).
Close Regedit and restart Windows for the change to take effect.
«413» Control the System Crash Dump File
This tweak allows you to control whether Windows creates a dump file of the computer memory when a system crashes.
Open the Registry and find this key:
HKLM\SYSTEM\CurrentControlSet\Control\CrashControl
Change the value of "CrashDumpEnabled" according to the options in the table below.
» 0 = None
» 1 = Complete memory dump
» 2 = Kernel memory dump
» 3 = Small memory dump (64KB)
Close the Registry and restart Windows for the change to take effect.
| ~ Includes previous work and rights from Ted Quantrill's Tip Quarry ~ |
