Kleiman / Hunter Winternals Defragmentation, Recovery, and Administration Field Guide

1. Auflage 2006
ISBN: 978-0-08-048987-2
Verlag: Elsevier Science & Techn.
Format: PDF
Kopierschutz: 1 - PDF Watermark

E-Book, Englisch, 512 Seiten, Web PDF

The only book available for the market leading Winternals tools used in over 70,000 Microsoft networks worldwide.

The book begins with a chapter describing the most common challenges faced by system administrators related to system recovery, data backup and system performance enhancements. The next chapters introduce the readers to the complete suite of Winternals solutions including Recovery Manager, Defrag Manager, and the Administrator's Pak which repairs unbootable or locked-out systems, restores lost data, and removes malware from infected machines. Chapters on the Administrator' Pak detail all the components of this powerful suite of tools including: ERD Commander 2005, Remote Recover, NTFSDOS Professional, Crash Analyzer Wizard, FileRestore, Filemon Enterprise Edition, Regmon Enterprise Edition, AD Explorer, Insight for Active Directory, and TCP Tools. Each of these chapters details the complete functionality of all tools, and also provides detailed examples for using all tools in relatively simple to extremely complex scenarios. The chapters and companion Web site also include dozens of working scripts to automate many data recovery, backup, and performance enhancement tasks.

? Winternals tools are the market leading data recovery and system optimization tools for Microsoft Networks. These tools are deployed in more than 70,000 companies worldwide

? Despite the popularity of the Winternals tools, there are no competing books

? The companion Web site to the book will provide dozens of working scripts to optimize and enhance the performance of the Winternals tools

Zielgruppe

Academic/professional/technical: Research and professional

Autoren/Hrsg.

Kleiman, Dave

Hunter, Laura E

Inhaltsverzeichnis

1;Cover;1
2;Contents;15
3;Foreword;25
4;Chapter 1: Recovering Your Computer with ERD Commander 2005;27
4.1;Introduction;28
4.2;Utilizing ERD Commander 2005;28
4.3;Booting a Dead System;42
4.4;Being the Locksmith;43
4.5;Accessing Restore Points;46
4.6;Removing Hotfixes;51
5;Chapter 2: Examining Your Computer;61
5.1;Introduction;62
5.2;Exploring Process Activity with Process Explorer;62
5.3;Viewing and Controlling Process Activity Using Process Explorer;71
5.4;The Dynamic Duo: Using Autoruns and Process Explorer Together to Troubleshoot Startups and Combat Malware;100
6;Chapter 3: Checking the Security of Your Computer;139
6.1;Introduction;140
6.2;Viewing the Security Settings of Your Resources (AccessEnum);140
6.3;Listing the Users with Access to Encrypted Files (EFSDump);152
6.4;Moving/Deleting Files in Use on Reboot (PendMoves, MoveFile);154
6.5;Viewing Shared Resources and Their Access Permissions (ShareEnum);157
6.6;Investigating Suspicious Local Files (Sigcheck);161
6.7;Searching for Installed Rootkits (RootkitRevealer);164
7;Chapter 4: Computer Monitoring;177
7.1;Introduction;178
7.2;Viewing Users Who Are Logged On and What They’re Doing;178
7.3;Finding Open Resources and the Processes That Are Accessing Them;194
7.4;Viewing All File Activity with Filemon;208
7.5;Viewing All Registry Activity with Regmon;222
8;Chapter 5: Disk Management;243
8.1;Introduction;244
8.2;Managing Disk Fragmentation (Defrag Manager, PageDefrag, Contig, DiskView);244
8.3;Getting Extended File/Disk Information (DiskExt, DiskView, NTFSInfo, LDMDump);273
8.4;Disk Volume Management (NTFSInfo, VolumeID, LDMDump);283
8.5;Managing Disk Utilization (Du, DiskView);296
9;Chapter 6: Recovering Lost Data;307
9.1;Introduction;308
9.2;Recovering Data Across a Network (Remote Recover);308
9.3;Recovering Files (FileRestore);310
9.4;Advanced Data Recovery and Centralized Recovery (Recovery Manager);314
9.5;Restoring Lost Active Directory Data (AdRestore);319
10;Chapter 7: System Troubleshooting;325
10.1;Introduction;326
10.2;Making Sense of a Windows Crash (Crash Analyzer Wizard);326
10.3;Identifying Errant Drivers (LoadOrder);334
10.4;Detecting Problematic File and Registry Accesses (FileMon, Regmon);337
10.5;Analyzing Running Processes (PsTools);345
10.6;Putting It All Together (FileMon, RegMon, PsTools);348
11;Chapter 8: Network Troubleshooting;357
11.1;Introduction;358
11.2;Monitoring Active Network Connections (TCPView, Tcpvcon, TCPView Pro);358
11.3;Performing DNS and Reverse DNS Lookups (Hostname);370
11.4;Getting Public Domain Information (Whois);372
11.5;Identifying Problematic Network Applications (TDIMon, TCPView Pro);377
12;Chapter 9: Tools for Programmers;389
12.1;Introduction;390
12.2;Implementing a Trace Feature (DebugView);390
12.3;Identifying I/O Bottlenecks (Filemon, Regmon, Tokenmon, Process Explorer);394
12.4;Analyzing Applications (Process Explorer, Strings);400
12.5;Debugging Windows (LiveKd);405
12.6;Tracking Application Configuration Problems (Process Explorer, Tokenmon);408
13;Chapter 10: Working with the Source Code;417
13.1;Introduction;418
13.2;Overview of the Source;418
13.3;Compiling the Source;422
13.4;Sample Derivative Utilities;423
13.5;License Uses;431
14;Chapter 11: NT 4.0-Only Tools;439
14.1;Introduction;440
14.2;Optimizing an NT 4.0 System (CacheSet, Contig, PMon, Frob);440
14.3;Recovering Data (NTRecover);451
14.4;Accessing a Windows NT 4.0 NTFS Volume from a FAT File System Volume;458
14.5;Diagnosing a Windows 2000 NTFS Volume from Windows NT 4.0 (NTFSCHK);460
15;Chapter 12: Having Fun with Sysinternals;467
15.1;Introduction;468
15.2;Generating a Blue Screen of Death on Purpose (BlueScreen);468
15.3;Modifying the Behavior of the Keyboard (Ctrl2cap);471
15.4;Creating Useful Desktop Backgrounds (BgInfo);473
15.5;Bypassing the Login Screen (Autologon);478
16;Index;485