ERD Commander 2003 User's Guide Winternals Software LP 3101 Bee Caves Road, Suite 150 Austin, Texas 78746 (512) 330-9130 (512) 330-9131 Fax www.winternals.com Copyright © 2003 Winternals Software LP ERD Commander 2003 User's Guide Table of Contents 1 Introduction ...................................................................................1 1.1 1.2 Overview of Use.............................................................................. 2 Sample Screen................................................................................ 6 2 ERD Commander 2003 Setup.......................................................7 2.1 2.2 2.3 2.4 2.5 2.6 2.7 2.8 2.9 2.10 System Requirements..................................................................... 7 Booting with ERD Commander 2003 .............................................. 8 License............................................................................................ 9 Password Protection ..................................................................... 10 Selecting the Installed Applications............................................... 11 Adding OEM SCSI Drivers ............................................................ 12 Adding OEM Network Drivers ....................................................... 13 Adding Files to the CD-ROM Image.............................................. 14 Image Location.............................................................................. 15 Burning the ERD Commander 2003 CD-ROM.............................. 16 3 Using ERD Commander 2003.....................................................17 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 3.12 3.13 3.14 3.15 3.16 3.17 3.18 3.19 3.20 3.21 3.22 3.23 3.24 Logon ............................................................................................ 19 Windowing Shell............................................................................ 22 System Information ....................................................................... 23 Explorer......................................................................................... 24 Volume Properties......................................................................... 26 Folder Properties........................................................................... 27 Resetting Permissions .................................................................. 28 Mapping Network Drives ............................................................... 29 Adding a Domain........................................................................... 30 Using File Search.......................................................................... 31 Using FileRestore.......................................................................... 33 Command Prompt ......................................................................... 35 Chkdsk .......................................................................................... 44 Diskpart ......................................................................................... 45 Regsvr32....................................................................................... 46 Notepad......................................................................................... 47 Regedit.......................................................................................... 48 Using Service and Driver Manager ............................................... 50 Using Event Log Viewer................................................................ 52 Filtering Events ............................................................................. 53 Using TCP/IP Configuration .......................................................... 54 Using Disk Management ............................................................... 56 Locksmith ...................................................................................... 58 File Sharing ................................................................................... 59 Winternals Software Page i ERD Commander 2003 User's Guide 3.25 System Restore............................................................................. 61 3.26 System Compare .......................................................................... 63 3.27 Running External Commands ....................................................... 64 4 Disk Commander.........................................................................66 4.1 4.2 4.3 4.4 4.5 4.6 Selecting a Drive Letter to Recover .............................................. 66 Selecting a Target Disk ................................................................. 68 Lost Volume Scan ......................................................................... 68 Partition Table Backup .................................................................. 69 Volume Recovery.......................................................................... 70 Salvaging Files.............................................................................. 72 5 6 7 8 Frequently Asked Questions......................................................75 Sales.............................................................................................77 Technical Support .......................................................................78 Index.............................................................................................79 Winternals Software Page ii ERD Commander 2003 User's Guide 1 Introduction When your Windows NT, Windows 2000, Windows XP or Server 2003 system becomes unbootable and you've exhausted the recovery options available with the operating system, you can rely on ERD Commander 2003 to provide full access to your dead system with a familiar Windows-like environment. ERD Commander 2003 provides the tools you need to help you quickly diagnose and repair the problem that is preventing your system from booting. Like the Recovery Console of Windows 2000 and Windows XP, as well as the previous versions of ERD Commander, ERD Commander 2003 makes any Windows NT/2000/XP/Server 2003 file system accessible, including FAT, NTFS and CDFS. Unlike those other utilities, ERD Commander 2003 offers both a graphical windowing environment and a command-line console. In addition, ERD Commander 2003 includes a service and driver manager, Registry editor, Explorer-like file system browser, Notepad-like text editor, Event Viewer, and local password changer so that you can gain access to accounts to locked accounts. And when you need to save files to another system on the network or to copy files from another system as part of the repair process, ERD Commander 2003 gives you full access to network file shares. With ERD Commander 2003, repairing your dead systems has never been easier or more intuitive. Winternals Software Page 1 ERD Commander 2003 User's Guide 1.1 Overview of Use ERD Commander's built-in tools allow you to perform many different types of system diagnosis and repair. A few of the ways that ERD Commander 2003 helps you solve problems include: Removing or Replacing Buggy Drivers You can use ERD Commander 2003 to delete or replace the image files of drivers or services that, because of a bug or misconfiguration, prevent Windows NT/2000 from booting. Updating Out-of-Date System Files Incorrectly applying service packs or system software updates can cause system DLLs to become out of sync with each other. In many cases this can prevent Windows NT/2000 from booting successfully. ERD Commander 2003 can copy up-to-date versions of old files from floppy disks, CD-ROMs, or other computers on your network. Correcting Misconfigured NTFS or Registry Security If excessively restrictive security attributes are applied to certain system files or directories on NTFS boot drives, or to some Registry keys, Windows will become unbootable. Using ERD Commander 2003's Explorer and Regedit you can reset permissions on files, directories and Registry keys to regain access. Updating Locked Files Once Windows NT/2000/XP/Server 2003 is up and running many system files cannot be replaced because the system keeps them locked. ERD Commander 2003 makes it possible to update such files because it runs when Windows NT/2000/XP/Server 2003 is off-line and the files are not open. Winternals Software Page 2 ERD Commander 2003 User's Guide Correcting Registry Problems A significant number of Windows NT/2000/XP/Server 2003 boot problems are the result of misconfigured Registry values. The ERD Commander 2003 Registry editor has all the capabilities and the same interface as the Windows NT/2000/XP/Server 2003 Registry editor, making it easy for you to inspect and change Registry settings. Recovering Deleted Files ERD Commander 2003 includes FileRestore, a utility that you can use to find and restore deleted files from any supported Windows NT/2000/XP/Server 2003 file system format, including FAT, FAT32, and NTFS. Copying Important Files off of a Dead System ERD Commander 2003 enables you to access files on a Windows NT/2000/XP/Server 2003 system that fails to boot. You can copy files to removable media such as floppy disks, Zip drives, or Jaz drives, or use ERD Commander 2003's network capabilities to copy them to another system on your network. Regaining Access to a System That You've Been Locked Out Of ERD Commander 2003's Locksmith utility allows you to list the accounts for a Windows NT/2000/XP/Server 2003 system and to change their passwords, including Administrator accounts. Viewing Event Logs Since the Event Logs of a system often contain clues that can help you diagnose a boot problem, ERD Commander 2003 includes an Event Log Viewer with the same interface as the Windows 2000/XP Event Log Viewer MMC snap-in, allowing you to inspect logs for relevant records. Winternals Software Page 3 ERD Commander 2003 User's Guide Running CHKDSK on Corrupt Drives ERD Commander 2003 will let you check the consistency of hard drives. Enabling and Disabling Services and Drivers You can list and modify the start types of a system's drivers and services with ERD Commander 2003's Service and Driver Manager utility. The utility implements an interface similar to the Windows 2000/XP Services MMC snap-in, which makes it easy to identify services and drivers and to disable those that are preventing a system from booting. Restoring Windows XP Restore Points Windows XP's Restore Point feature periodically creates snapshots of a system's state that includes system files and Registry data. Overcoming a deficiency of Windows XP's Restore Point functionality, ERD Commander 2003 allows you to restore unbootable systems to a previous Restore Point. Comparing a Working System with a Dead System ERD Commander 2003's System Compare utility let's you compare service and driver configuration and the system files of a dead system with that of a live system or a Windows installation media to which you direct it. This enables you to identify differences between working systems and one that doesn't boot in order to guide your repair process. Partitioning and Formatting Disks The Disk Management MMC snap-in that ERD Commander 2003 includes in its Computer Management utility has many of the features of the Windows 2000/XP Disk Management MMC snap-in, allowing you to delete, format, and create partitions and volumes. If you prefer a command-line environment you can use the corresponding command-line tool, DiskPart, to accomplish the same tasks. Winternals Software Page 4 ERD Commander 2003 User's Guide Scanning a Dead System for Viruses With ERD Commander 2003 you can share the drives of a system on the network so that you can access them from another computer. This allows you to use tools installed on other systems to aid in the repair process. For example, if you suspect a virus has attacked a computer you can shut it down, boot into ERD Commander 2003, share its drives, and then run a virus scanner on the drives from a different system. Registering COM/DCOM Server DLLs A system may become unstable if COM or DCOM registration information is corrupted or deleted. The standard Windows COM/DCOM server DLL registration utility, Regsvr32, requires that you be logged into a system into which you are registering DLLs, but ERD Commander 2003's Regsvr32 utility enables you to register COM/DCOM server DLLs into an installation that's offline. Winternals Software Page 5 ERD Commander 2003 User's Guide 1.2 Sample Screen This screenshot demonstrates a typical session using ERD Commander 2003 to access the Registry and service configuration of an unbootable system. Winternals Software Page 6 ERD Commander 2003 User's Guide 2 2.1 ERD Commander 2003 Setup System Requirements ERD Commander 2003 requires that the target system have a bootable CDROM, and one of the following operating systems: · · · · Windows NT 4 Windows 2000 Windows XP Windows Server 2003 Regardless ...