XP EnhancementsChapters 15 & 16

David TurtonConestoga College

Institute of Technology & Advanced Learningwww.conestogac.on.ca/~dturton

Doon 1B43 x3610

XP versions XP Home

2+ simultaneous users

separate open apps for each

Win Media Player Messenger

conf'g, app share CD drag-and-drop firewall

XP Pro remote desktop

control roaming profiles connect to

2000/2003 domain

IIS web server

XP versions cont'd

XP Media Ctr Edition XP Pro base: digital

entertainment h/w support:

video recording integ'd w/ TV

only avail pre-installed

XP Tablet PC XP Pro base tablet stylus &

touch-screen support

XP 64-bit Itanium & Opteron heavy

workstations free beta download

Workgroup vs Domain Workgroup

small network < 10 computers each controls own

resources users groups files/folder printers

Domain >10 computers domain controller:

Win 2000/2003 needs XP Pro

clients central control

users groups resources

Upgrading to XP

Win 98/SE/ME no drivers carried fwd some registry interpretations

Win 95 cannot upgrade clean install req'd

Transfer Files/Settings to New XP

User State Migration tool files, folders, display properties, taskbar

options, browser/email settings on an XP machine (or from XP CD)

create diskette: AccessoriesSystem ToolsFiles and Settings

Transfer Wizard run on old machine

retrieve files & settings run on new machine

put info there.

Automated System Recovery (ASR)Full-System backup

use once XP fully installed and whenever desired afterwards

creates complete drive backup & ASR diskette doesn't compress, unless hardware supports compression back up to another drive, another computer, CD-R, tape,

DVD±R complete contents of source drive

AccessoriesSystem ToolsBackup Advanced Mode Automated System Recovery Wizard

XP Home backup not installed by default XP CD \VALUEADD\MSFT\NTBACKUP\ntbackup.msi

Automated System Recovery (ASR)Full-System restore

Will lose all on XP volume since ASR backup boot to XP CD watch for message "Press F2 to run the

automated System Recovery Process" press F2 insert ASR diskette XP setup will:

load itself into memory repartition/reformat hard drive install Windows XP from CD run ASR Wizard

restoring system state, apps and data from backup

Customising desktop manage shortcuts

displaydesktopcustomise desktop create program icons

right-click program "copy" "paste shortcut" to desktop or "create shortcut" – drag to desktop

icon properties: compatibility mode runs Win 95, 98, ME, NT or 2000

environment taskbar – quick launch

single-click always-on-top icons

Windows Messenger

loads by default consumes resources in

background stop from loading at

start-up Better:

Remove from install

Users in XP Global users (domain-

wide) stored on server (domain

controller) in Active Directory

database Local users

rights only to local computer

built-in XP users administrator

all rights, can create other users

guest use of computer, very

limited configuration rights

User profiles created at first logon customise desktop

saved in profile local to each machine

roaming profile profile saved on domain

server same profile used at each

computer signs on to mandatory profile

roaming profile applied to user of a group users cannot modify

settings for users doing only job-

related tasks

creating users - XP

right-click My ComputerManage or control paneladmin

toolscomputer management select Local Users & Groups right-click to create user user has limited rights

Modifying User Accounts control paneluser

accounts need admin authority

create users change user type

admin vs limited how users sign on/off change user name change password change image

User groups manage groups, not individuals

can grant rights to groups (Local Security policy) can apply limitations to groups (Group Policies) members of group inherit rights/limitations of group

default XP groups: administrators backup operators power users limited users guests

can add groups some s/w adds groups they need (Visual Studio)

Local Security Policiesgranting rights to groups (& their members)

Control Panel Admin Tools Local Security Policy

properties

Group Policies: gpedit.mscApplying limitations to groups (& their members)

Encrypted File System file/folder properties advanced attributes can encrypt a file or folder

files put in folder are encrypted To userid of person moving them in

Files remain encrypted if moved to another NTFS location Files decrypted if moved to non-NTFS file system like diskette, CD

only user that encrypted data can open/move/copy it "Access Denied" otherwise If user's password changed by administrator

Administrator could then "impersonate" user Userid loses access to encrypted files

System administrator can decrypt files/folders, not open directly

Disgruntled employees, forgotten passwords Administrator leaves audit trail:

cannot re-encrypt to another's userid

cipher [/E, /D] [/S:dir] folderListencrypting/decrypting at command-prompt or in scripts

options: /E

encrypts specified file or folders /D

decrypts specified files or folders /S:xxx

apply to subfolders of folder xxx

Doesn't encrypt files already inside folder See cipher /? for more options

Internet Connection Firewall a Stateful Packet Inspection (SPI) Firewall

if local PC initiates a communication Other PC's can reply to it

if remote PC initiates a communication blocked

protect yourself from your roommates Control PanelNetwork

Connectionsproperties advanced tab modify settings to log blocked connections

enhanced with SP2

Troubleshooting Driver rollback Last Known Good Configuration Safe Mode System Restore XP boot disk Recovery Console ASR – Automated System Recovery Reinstall XP

System Restore Needs Windows to run AccessoriesSystem ToolsSystem

Restore Create a restore point before installing s/w or

h/w Can return to restore point if install fails

Try driver rollback for h/w changes first: Control PanelSystemHardwareDevice Manager

Install & configuration changes since restore-point lost Can also restore to before a virus

Note: if s/w install hangs: Disable System Restore & retry

Lose all restore points, however

Ms-DOS Startup Diskette

Right-click A: drive Select format, check "create startup

disk" Files similar to Win 98

Useful for real-mode programs Memory analysers Re-flash BIOS

XP Boot Diskette Bypasses hard drive

damage: Boot sector MBR Partition table Ntldr, Ntdetect.com,

Ntbootdd.sys (SCSI), boot.ini

Virus Not for device driver

problems

Format diskette on XP

Copy from \i386 on XP CD

Ntldr Ntdetect.com Create boot.ini

Write-protect diskette

XP Boot Diskette cont'd

If XP loads, but with errors: Load Recovery Console

\i386 on CD: winnt32 /cmdcons

Restart PC Use Fixmbr & Fixboot

Run antivirus Verify partitions OK Defrag hard drive Copy from diskette: Ntldr, Ntdetect.com,

Boot.ini

Black screen, no messages Corrupted MBR, partition table, boot sector, Ntldr Use XP boot diskette – Recovery Console

run fixmbr, fixboot