TreeWalk DNS
...select an «Item number» to view a topic, «Title number» to return.
«Item 343» Active Desktop
«Item 344» Enable Automatic Logon in Windows 2000
«Item 345» How To Install and Use FTP Folders
«Item 346» Change the System/Boot Drive Letter
«Item 347» Modify A Scheduled Task To Repeat By Minutes Or Hours
«Item 348» Copy Files From Recovery Console To Removable Media
«Item 349» Print Documents Faster the Second Time Around
«Item 350» How To Install Microsoft Loopback Adapter
«Item 351» Change Computer and Domain Names
«Item 352» How To Remove the Service Pack Restore Files and Folders
«Item 353» How To Secure Windows In A Non-Domain Environment
«Item 354» Internet Connection Problem When Using A Shared DSL And PPPoE
«Item 355» How To View/Create/Remove System Variables
«Item 356» Enable the Image Preview Feature In A Windows 2000 Folder
«Item 357» How To Move the Print Spool Folder
«Item 358» Windows Update Issues
«Item 359» Use Xcacls.exe To Modify NTFS Permissions
«Item 360» Reduce the Volume Control Window Size
«Item 361» Understanding TCP/IP Addressing And Subnetting Basics
«Item 362» How Windows File Protection Prevents Replacement of Essential Files
«Item 363» How To Verify That Windows File Protection Is Running
«Item 364» Windows File Protection Creates Event Log Entry When Scanning Is Stopped
«Item 365» Change Computer Name and/or Domain Membership Using the GUI
«Item 366» Prevent Overwriting All Files During A Bulk Copy
«Item 367» How To Remove Administrative Shares
«Item 368» Unable To Remove the Read-Only Attribute From A Folder
«Item 369» Changing File Associations
«Item 370» Configure the Size And Behavior Of Event Viewer Logs
«343» Active Desktop
You can make your desktop look and work like a Web page. You can display Web content directly on your desktop, and have the content updated automatically, making your desktop active. For example, you could add an investment channel or a weather map channel from the Windows Media Showcase or a page you found on the Web.
Not only do you now have many points of access to the Web from your desktop, but by adding Web content to your desktop and folders, you can personalize almost everything you see and use on your screen.
Once the Active Desktop feature is turned on, Web content is displayed or can be added to your desktop. When you right-click a blank space on the desktop and then point to Active Desktop, additional menu options also become available which enable you to customize and update desktop items.
» Show Web Content turns on the Active Desktop feature.
» Show Desktop Icons displays icons on the desktop.
» Lock Desktop Items secures the size and location of Active Desktop items. When Lock Desktop Items is selected, Active Desktop items cannot be moved or resized.
» Synchronize updates Web page content.
A check mark next to an item indicates that the option is enabled.
«344» Enable Automatic Logon in Windows 2000
This information describes how to set the automatic logon feature for Windows 2000 Professional. NOTE that this option is not available for Windows 2000 Server or Advanced Server.
Preventing the Password Prompt in a Non-domain System
1. In Control Panel, double-click Users and Passwords.
2. Click to clear the Users must enter a user name and password to use this computer check box.
NOTE: This option does not appear on a system that is a member of a domain.
3. Click the Advanced tab.
4. Click to clear the Require users to press Ctrl-Alt-Del before logging on check box.
Automatic logon is not supported when you are logging on to a domain. You will need to join a workgroup if you want the automatic logon feature.
This can also be turned on in a Windows 2000 Professional domain system by editing the registry.
WARNING: This procedure will allow the user to log on automatically to the domain. This could cause a serious security problem. Anyone booting this system with this registry modification will be logged on to the system with the user's security credentials.
1. Start Regedt32.exe and locate the following registry key:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
2. Establish your domain name, account name, and password, using the values you would normally type when logging on. You should assign the following values: DefaultDomainName, DefaultUserName, and DefaultPassword.
NOTE: The DefaultDomainName and DefaultUserName values may already exist. The DefaultPassword value may not. If it does not, create it:
a. On the Edit menu, click Add Value.
b. In the Value Name box, type DefaultPassword.
c. In the Data Type box, click REG_SZ.
d. Click OK.
e. In the String Editor box, type your password. Click OK and save your changes.
NOTE: If no DefaultPassword string is specified, Windows automatically changes the value of the AutoAdminLogon key from 1 (true) to 0 (false). This disables the AutoAdminLogon feature.
3. On the Edit menu, click Add Value. Type AutoAdminLogon in the Value Name box. Click REG_SZ in the Data Type box. Enter 1 in the String box. Save your changes.
4. Quit Regedt32.exe.
5. Shut down Windows and turn off the computer.
6. Restart your computer and Windows 2000. You should be able to log on automatically now.
NOTE: To bypass the AutoAdminLogon process and log on on as a different user, hold down the SHIFT key after a logoff or after a Windows restart.
«345» How To Install and Use FTP Folders
FTP Folders is a new shell extension in Internet Explorer 5.x, Windows 98 Second Edition, Windows Millennium Edition, and Windows 2000 that enables you to browse FTP sites in Windows Explorer or Internet Explorer using an Explorer-style folder-based interface.
FTP Folders is included with the Internet Explorer Browsing Enhancements feature in Internet Explorer 5.x, which is installed only when you select a full or typical installation. FTP Folders is installed by default with Windows 98 Second Edition, Windows Millennium Edition, and Windows 2000.
To disable FTP Folders, follow these steps:
1. Click Start, point to Settings, click Control Panel, and then double-click Internet Options.
2. Click the Advanced tab.
3. Under Browsing, click the Use Web Based FTP or Enable Folder View for FTP sites check box to select it.
NOTE: When you click the Use Web Based FTP or Enable Folder View for FTP sites check box to select it, you are disabling FTP Folder functionality in Internet Explorer 5 and enabling Internet Explorer 4 FTP functionality.
The FTP Folders feature does not support the following functionality:
» Connecting to the Internet using a CERN proxy server or Web proxy server.
» Connecting to a Virtual Address Extension (VAX) or Virtual Memory System (VMS) FTP server.
» Using Internet Explorer from within a separate program or service.
» Copying files from one server to another.
» Drag and drop functionality from an FTP server.
» The Copy command on the Edit menu and context menus does not work for files on an FTP server, but you are able to copy files locally and paste them on an FTP server.
Troubleshooting
If you are unable to see the FTP user interface, a CERN proxy server may be preventing you from doing so. You can verify this by connecting to the server using the Ftp.exe tool. To work around this issue, use a non-CERN proxy server such as Microsoft Remote Winsock.
«346» Change the System/Boot Drive Letter
This article describes how to change the system or boot drive letter in Windows. For the most part, this is not recommended, especially if the drive letter is the same as when Windows was installed. The only time that you may want to do this is when the drive letters get changed without any user intervention. This may happen when you break a mirror volume or there is a drive configuration change. This should be a rare occurrence and you should change the drive letters back to match the initial installation.
NOTE: Please be aware of the following issue related to drive letters:
Q249321 Unable to Log on if the Boot Partition Drive Letter Has Changed
To change or swap drive letters on volumes that cannot otherwise be changed using the Disk Management snap-in, use the following steps.
NOTE: In these steps, drive D refers to the (wrong) drive letter assigned to a volume, and drive C refers to the (new) drive letter you want to change to, or to assign to the volume.
This procedure swaps drive letters for drives C and D. If you do not need to swap drive letters, simply name the \DosDevice\letter: value to any new drive letter not in use.
Follow these steps to change the System/Boot Drive letter:
1. Make a full system backup of the computer and System State.
2. Log on as an Administrator.
3. Start Regedt32.exe.
4. Go to the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices
5. Click MountedDevices.
6. On the Security menu, click Permissions.
7. Check to make sure Administrators have full control. Change this back when you are finished with these steps.
8. Quit Regedt32.exe, and then start Regedit.exe.
9. Go to the following registry key
HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices
10. Find the drive letter you want to change to (new). Look for "\DosDevices\C:".
11. Right-click \DosDevices\C:, and then click Rename.
NOTE: You must use Regedit instead of Regedt32 to rename this registry key.
12. Rename it to an unused drive letter "\DosDevices\Z:". (This will free up drive letter C: to be used later.)
13. Find the drive letter you want changed. Look for "\DosDevices\D:".
14. Right-click \DosDevices\D:, and then click Rename.
15. Rename it to the appropriate (new) drive letter "\DosDevices\C:".
16. Click the value for \DosDevices\Z:, click Rename, and then name it back to "\DosDevices\D:".
17. Quit Regedit, and then start Regedt32.
18. Change the permissions back to the previous setting for Administrators (this should probably be Read Only).
19. Restart the computer.
«347» Modify A Scheduled Task To Repeat By Minutes Or Hours
The Task Scheduler tool in Control Panel does not have an option to schedule a task every n minutes or n hours.
To modify a Scheduled Task, do the following:
1. Click Start, point to Settings, and then click Control Panel.
2. Double-click Scheduled Tasks.
3. Right-click the task you want to modify, and then click Properties. If no task is listed, double-click Add Scheduled Task to start the Scheduled Task Wizard.
NOTE: If you use the Scheduled Task Wizard, click the Open advanced properties for this task when I click Finish check box to select it, and then click Finish to continue.
4. Click the Schedule tab, and then click Advanced.
5. Click the Repeat task check box to select it, and then specify the number of minutes or hours you want the task to be repeated.
6. Click OK, and then click OK again.
«348» Copy Files From Recovery Console To Removable Media
This Item describes how to configure Windows 2000 Recovery Console so that you can gain access to removable media devices without restriction. You can use Recovery Console for recovery purposes when your Windows 2000-based computer does not start properly or does not start at all.
WARNING: This feature is disabled by default for security reasons. Removing this restriction can potentially jeopardize the security of your operating system.
Procedure
1. To enable the security option, start the appropriate Windows 2000 security tool:
» Local Security Policy (in Administrative tools)
» Domain Security Policy (in Administrative tools)
» Domain Controller Security Policy (in Administrative tools)
» Security Configuration and Analysis (MMC snap-in)
2. In the MMC console tree pane, expand Local Policies, click Security Options, and then click the following security policy in the details pane:
Recovery Console: Allow floppy copy and access to all drives and all folders
3. On the Action menu, click Security.
4. When the Local Security Policy Setting dialog box is displayed, click Enabled, and then click OK.
5. Start into Recovery Console, and then type the following command at a Command prompt:
set allowremovablemedia = true
You can now copy files to and from a removable media source (for example, a diskette).
NOTE: You must retype the set command each time you start into Recovery Console.
For additional information see:
Item 56 Recovery Console Tips for System Admins
Item 198 Description of the Windows 2000 Recovery Console
Item 199 How to Install the Windows Recovery Console
Item 200 Description of the SET Command in Recovery Console
«349» Print Documents Faster the Second Time Around
This Item was copied from PC World magazine, April 2002 Edition
"There is a little-known but handy setting in Windows 2000 and XP (but not in available in Windows 98 or Me). Windows deletes documents from the printer spool by default as soon as they're printed. But keeping documents there lets you print them again in a snap. The price you pay is lost hard drive space.
You can turn on the option in the printer's Properties dialog box. To reach it in Windows 2000, select Start » Settings » Printers. In Windows XP, you may have Printers and Faxes on your Start menu, or you may have to open Control Panel, click Printers and Other Hardware, and finally select View installed printers or fax printers. If your Control Panel option opens a menu, choose Printers and Faxes. Right-click your printer and select Properties. Click the Advanced tab, check Keep printed documents, and click OK.
You'll also want a shortcut to the printer spool. In the Printers or 'Printers and Faxes' window, drag the printer icon to your desktop, your Quick Launch toolbar, or your Start menu. If Control Panel is displayed as a menu, <Ctrl>-drag the printer icon from the menu. To reprint a document, just launch the printer shortcut, right-click the file, and select Restart.
You'll eventually get a long list of printed documents. And the folder containing those printouts-either C:\WINNT\System32\spool\PRINTERS or C:\WINDOWS\System32\spool\PRINTERS-will be huge. To clean out the spool, launch the printer icon, right-click the files you don't need, and select Cancel."
«350» How To Install Microsoft Loopback Adapter
The Microsoft Loopback adapter is a tool for testing in a virtual network environment where access to a network is not feasible. Also, the Loopback adapter is essential if there are conflicts with a network adapter or a network adapter driver. Network clients, protocols, and so on, can be bound to the Loopback adapter, and the network adapter driver or network adapter can be installed at a later time while retaining the network configuration information. The Loopback adapter can also be installed during the unattended installation process.
Installation Procedure
1. Click Start, point to Settings, click Control Panel, and then double-click Add/Remove Hardware.
2. Click Add/Troubleshoot a device , and then click Next.
3. Click Add a new device, and then click Next.
4. Click No, I want to select the hardware from a list, and then click Next.
5. Click Network adapters, and then click Next.
6. In the Manufacturers box, click Microsoft.
7. In the Network Adapter box, click Microsoft Loopback Adapter, and then click Next.
8. Click Finish.
After the adapter is installed successfully, you can configure its options manually, as with any other adapter. Note that if the TCP/IP properties are configured to use DHCP (the default), the adapter will eventually use an autonet address (169.254.x.x/16) because it is not actually connected to any physical media.
«351» Change Computer and Domain Names
To change the computer name or domain membership, follow these steps:
1. Click Start, point to Settings, click Control Panel, and then double-click System.
2. On the Network Identification tab, click Advanced.
3. If you want to change the computer name, type the new name you want in the New Computer Name box. If not, continue to the next step.
4. If you want to change the domain name, type the new domain name in the Domain box. If not, continue to the next step.
5. If you want to change the name of the DNS domain name, click More, and then type the name of the DNS domain in the DNS domain name of this computer box. If not, continue to the next step.
NOTE: When you select the Change DNS domain name when domain membership changes check box, DNS domain name changes when you change to a new domain, but does not change if you change to use a workgroup.
6. Click OK.
«352» How To Remove the Service Pack Restore Files and Folders
This Item provides instructions and discusses the precautions for safely deleting the Service Pack Uninstall folder ($NtServicePackUninstall$). It also provides guidance for relocating the ServicePackFiles folder without losing functionality of the Windows File Protection system and the updated Service Pack files (which can be used to add additional components).
When a Windows 2000 Service Pack has been installed and tested, you may want to free hard disk space on the local computer by deleting and/or relocating the Service Pack folders. If you want, you can free disk space on the local system by deleting the Service Pack Uninstall folder (see below). Additionally, the ServicePackFiles folder may be relocated to an alternate drive or to a centralized network sharepoint (refer to the "Relocating the ServicePackFiles Folder" section below). Both actions can be accomplished independently of each other.
Delete the Service Pack Uninstall Folder
NOTE: The Service Pack uninstall capability should only be removed after you have determined that there is no longer a need to return the system to the pre-Service Pack state. For additional information, click the article number below to view the article in the Microsoft Knowledge Base:
Q268989 Considerations Before You Uninstall Windows 2000 Service Pack 1
The Service Pack Uninstall folder is a hidden file. If you do not find it in the following path, ensure that you have enabled the Show hidden files and folders option in the View tab in Folder Options:
1. Locate the Service Pack Uninstall folder in the %Systemroot%\$NtServicePackUninstall$ folder.
2. Select the $NtServicePackUninstall$ folder and delete it.
3. To remove the Service Pack uninstall option from the Add/Remove Programs menu, delete the following registry key:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows 2000 Service Pack x
where x is the version number of the Service Pack that is installed.
Troubleshooting
If you delete the ServicePackFiles folder, the Windows File Protection system is unable to work if a Service Pack file becomes corrupted. The Windows File Protection system does not prompt you for an alternate file location nor does it restore the corrupted file. If you remove the ServicePackFiles folder, and then attempt to install optional components [such as, Dynamic Host Configuration Protocol (DHCP) or Windows Internet Name Service (WINS)], the system is unable to automatically install the latest Service Pack version of the files. You are prompted for an alternate location for the file installation.
To work around both of these issues and to successfully free disk space, refer to the following KB article for steps to permanently configure an alternate directory location:
Q271484 Files and Folders Are Added to Your System After Service Pack Is Installed
Relocating the ServicePackFiles Folder
The ServicePackFiles folder contains the updated versions of the Windows 2000 system files installed by the Service Pack. This folder is used when additional components are installed to ensure that the most recent version of the files are used. This folder is also used by the Windows File Protection system to restore corrupt or missing versions of the Service Pack files.
For additional information, click the number below to view the article in the Microsoft Knowledge Base:
Q274215 Not Necessary to Reinstall Windows 2000 SP1 After System Changes
«353» How To Secure Windows In A Non-Domain Environment
You can use a Windows-based computer in a non-domain environment to use local group policies to secure the workstation. This implementation is not designed to secure a Windows-based computer for individual users who log on to the computer.
You can, however, configure a Windows-based computer to use system policies. This allows administrators to configure policies on Windows-based computers for individual users who log on to the computer.
To create the system policy, use the Poledit.exe file that is located on the Windows CD-ROM or contact Microsoft Product Support for the PolEdit.exe file and the supporting files. The following table lists the files that you need and the location to which they must be copied.
|
File name |
Location |
|
Poledit.exe |
%SystemRoot% |
|
Common.adm |
%SystemRoot%\Inf |
|
Winnt.adm |
%SystemRoot%\Inf |
|
Poledit.chm |
%SystemRoot%\Help |
Implementing System Policies
1. Start System Policy Editor (Poledit.exe) and make the changes for your policy.
For additional information about system policies, click the article number below to view the article in the Microsoft Knowledge Base:
Q161334 Guide To Windows NT 4.0 Profiles and Policies (Part 1 of 6)
2. On the File menu, click Save As, and then save the policy file on your hard disk. For example, save the file in the Ntconfig.pol folder.
3. On the File menu, click Open Registry.
4. Double-click Local Computer, double-click Network, double-click System Policies Update, and then click to select the Remote Update check box.
5. In the Update Mode box, click Manual (use the specific path), type a path name in the Path for Manual Update dialog box (for example, type c:\ntconfig.pol ), and then click OK.
6. Save your policy to the Ntconfig.pol folder, and then quit Policy Editor.
7. Restart your computer for the changes to the policy to take effect.
WARNING: Every person or computer that logs on to the computer after a policy is in place is subject to the policy. Therefore, it is a good idea to not edit the default user or computer until you are familiar with system policies. You may want to make a test user account in Local Users and Computers, and then make specific policy for this user in System Policy Editor. After the policy is working properly, you can transfer the policy to the production environment.
«354» Internet Connection Problem When Using A Shared DSL And PPPoE
When you try to connect to the Internet through a shared Digital Subscriber Line (DSL) network connection, and the DSL connection uses PPP over Ethernet (PPPoE), you may not be able to connect to the Internet.
This behavior can occur if the PPPoE connection is configured for DSL instead of for a local area network (LAN).
To resolve this behavior, configure the PPPoE connection for use on a LAN:
1. On the computer that has the DSL connection, click Start, point to Settings, and then click Control Panel.
2. Double-click Network and Dial-up Connections.
Three local-area connections are listed: one for the LAN, one for the DSL network interface card (NIC), and one for the PPPoE connection.
3. Right-click the PPPoE connection, click Properties, and then click the Sharing tab.
4. Click Enable Internet Connection Sharing for this connection, click For Local Network, and then click Local Area Connection.
5. Click OK.
6. Right-click the LAN connection, click Properties, click Internet Protocol (TCP/IP), and then click Properties.
7. Verify that the IP address is 192.168.0.1, and then click Cancel.
8. Verify that the computer can gain access to the Internet.
9. Restart the client computers, and verify that they also can gain access to the Internet.
«355» How To View/Create/Remove System Variables
The following procedures must be completed by a member of the Administrators group.
Viewing System Variables
1. Click Start, point to Programs, Administrative Tools, and then click Computer Management.
2. In the console tree, click to expand System Information, click to expand Software Environment, and then click Environment Variables.
3. The display pane to the right lists all current system variables and their associated values.
Creating a System Variable
1. Click Start, point to Settings, and then click Control Panel.
2. Double-click System.
3. On the Advanced tab, click Environment Variables.
4. Under System variables, click New.
5. In the Variable Name box type the name for your variable, in the Variable Value box type your variable path, and then click OK.
6. Click OK.
Removing a System Variable
1. Click Start, point to Settings, and then click Control Panel.
2. Double-click System.
3. On the Advanced tab, click Environment Variables.
4. In the System variables box, click the variable you want to remove, and then click Delete.
5. Click OK.
Saving System Variables in a Text Document
1. In the Computer Management snap-in console tree, right-click Environment Variables, and then click Save As Text File.
2. In the File name box, type the name you are giving to the file, and then click Save.
«356» Enable the Image Preview Feature In A Windows 2000 Folder
To enable the image preview feature in a folder:
1. Use My Computer to navigate to the folder where you wish to enable image preview.
2. Use the View menu to press Customize This Folder.
3. Press Next.
4. Press Customize and check the Choose or edit an HTML template for this folder box.
5. Press Next.
6. Press Finish.
«357» How To Move the Print Spool Folder
The spool folder is the area on the hard disk that Windows uses to store print jobs as they are being printed. By default, the spool folder is located in the %SystemRoot%\System32\Spool\Printers folder. This is also the partition that contains the Windows system files.
If the print server supports many printers or large print jobs, consider relocating the spool folder. You can increase Windows performance, and increase free space on the partition in which Windows is installed, by moving the spool folder to a different partition.
How to Move the Spool Folder for All Printers on a Server
To change the location of the spool folder for all printers:
1. Log on to the computer as Administrator, or as a member of the Administrators group.
2. Click Start, point to Settings, and then click Printers.
3. On the File menu, click Server Properties.
4. Click the Advanced tab.
5. In the Spool folder box, type the complete path to the new spool folder location. If the new spool folder does not exist, this procedure creates it.
NOTE: Do not use the root folder of a drive (for example, E:\) as the new spool folder. You must specify a folder (for example, E:\ NewSpoolFolder or E:\ Path \ NewSpoolFolder ). If you use the root of the drive and you do not specify a new spool folder, the default %SystemRoot%\System32\Spool\Printers folder is used.
6. Click OK. The following message appears:
The changes to the spool folder will occur immediately and any currently active documents will not print. It is recommended to allow all documents to complete printing before changing the spool folder. Are you sure you want to change the spool folder?
Verify that all documents have been printed, and then click Yes.
7. Close the Printers folder.
8. If the new spool folder is on a partition that uses the NTFS file system, verify that users have sufficient permissions to access the folder.
How to Move the Spool Folder for a Specific Printer on a Server
To change the location of the spool folder for a specific printer:
1. Log on to the computer as Administrator, or as a member of the Administrators group.
2. Start Windows Explorer and create a new folder to use as the new spool folder.
NOTE: Do not use the root folder of a drive (for example, E:\) as the new spool folder. You must specify a folder (for example, E:\ NewSpoolFolder or E:\ Path \ NewSpoolFolder ). If you use the root of the drive and you do not specify a new spool folder, the default %SystemRoot%\System32\Spool\Printers folder is used.
3. Click Start, and then click Run.
4. In the Open box, type regedit, and then click OK
5. In Registry Editor, locate and then click the following Registry key, where PrinterName is the printer whose spool folder you want to move:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\ PrinterName
6. In the right pane, double-click SpoolDirectory.
7. In the Value data box, type the path to the new spool folder that you created in step 2, and then click OK.
8. Quit Registry Editor.
9. If the new spool folder is on a partition that uses the NTFS file system, verify that users have sufficient permissions to access the folder.
10. Restart the computer.
«358» Windows Update Issues
When you visit Windows Update to download and install an update, you may receive:
The software you are about to install does not contain a Microsoft digital signature. Therefore, there is no guarantee that this software works correctly with Windows.
Unknown software package.
If you respond Yes, the installation continues.
Microsoft does NOT post unsigned packages to the Windows Update site, but some of the files in the package may be unsigned.
If you configured the Unsigned non-driver installation behavior to Warn but allow installation, you will receive the above message when a package contains an unsigned file. This policy is configured in the Default Domain Group Policy at: Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options or in the Local Security Policy at: Security Settings|Local Policies|Security Options.
If you have set this policy to Warn but allow installation, simply verify that you are downloading from Windows Update and press Yes to proceed with the installation.
«359» Use Xcacls.exe To Modify NTFS Permissions
The MS Knowledge Base Article: Q318754 describes how to use the Extended Change Access Control List tool (Xcacls.exe) to modify and view NTFS permissions for files or folders.
You can use Xcacls.exe to set all file-system security options that are accessible in Windows Explorer from the command line. Xcacls.exe does this by displaying and modifying the access control lists (ACLs) of files.
Xcacls.exe is especially useful in unattended installations of Windows 2000 Professional or Windows 2000 Server. By using this tool, you can set the initial access rights for folders in which the operating system resides. When you distribute software to servers or workstations, Xcacls.exe also offers one-step protection against deletion of folders or files by users.
The Xcacls.exe utility is included in the Windows 2000 Resource Kit. You can download the Xcacls.exe utility, without charge, from the following Microsoft Web page at:
«360» Reduce the Volume Control Window Size
When you double-click the Volume Control icon in the System Tray, the Volume Control window takes up a lot of screen space.
To reduce the size of the Volume Control window, press: CTRL+S.
The new size will be remembered until you press: CTRL+S again.
«361» Understanding TCP/IP Addressing And Subnetting Basics
When you configure the TCP/IP protocol on a Microsoft Windows computer, an IP address, subnet mask, and usually a default gateway are required in the TCP/IP configuration settings.
To configure TCP/IP correctly, it is necessary to understand how TCP/IP networks are addressed and divided into networks and subnetworks. The MS Knowledge Base Article: Q164015 is intended as a general introduction to the concepts of IP networks and subnetting. A glossary is included at the end of the article.
«362» How Windows File Protection Prevents Replacement of Essential Files
Preventing the replacement of essential system files avoids file version mismatches. Windows File Protection (WFP) runs in the background on a Windows 2000-based computer. All .sys, .dll, .exe, and .ocx files that come on the Windows 2000 CD are protected.
Installation programs that are not part of the operating system can overwrite shared system files. This has been a common problem in the history of the Microsoft Windows operating systems. Overwriting shared system files can result in unpredictable system performance that ranges from program errors to operating-system crashes. The file types that are most commonly affected by this problem are dynamic-link libraries (.dll) and executable files (.exe).
WFP protects system files by detecting attempts to overwrite protected system files. Windows File Protection is triggered after it receives a directory change notification on a file in a protected directory. Once this notification is received, WFP determines which file was changed. If the file is protected, WFP looks up the file signature in a catalog file to determine whether the new file is the correct Microsoft version. If it is not, the operating system replaces the file with the correct version from the DllCache directory or the distribution media.
After detecting the overwriting of a protected file, WFP searches for the correct files in the following places, in this order:
1. It searches the DllCache directory.
2. If the system was installed through a network install, it searches the network installation path.
3. It searches on the CD.
If the file is found in DllCache or if the install source is auto-located, WFP silently replaces the file and moves on.
WFP also records an event to the system event log, noting the file replacement attempt. If the administrative user cancels the WFP file replacement, an event noting the cancellation is logged.
For additional information see: Item 364 WFP Creates Event Log Entry
«363» How To Verify That Windows File Protection Is Running
Here is how to verify that the Windows File Protection feature is running and protecting your system files.
1. Start Microsoft Windows Explorer, and then open the WINNT\system32 folder.
2. Right-click the Winmine.exe file, and then click Rename.
3. Type Winmine.old to rename the executable file for the Microsoft Windows Minesweeper game.
4. Wait a few moments, and then note that Windows replaces the missing Winmine.exe file.
You may need to scroll to the top or the bottom of the file list to confirm that the file is displayed again.
If Windows replaces the missing Winmine.exe file, the Windows File Protection feature is protecting your files.
As noted in the preceeding Item, when Windows File Protection restores a file a log entry is logged in System Event Viewer that is similar to the following entry:
File replacement was attempted on the protected system file C:\Windows\System32\Winmine.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
For additional information about the Windows 2000 Windows File Protection feature see:
Item 266 Description of the Windows File Protection Feature
Item 267 Register Settings for Windows File Protection
Item 268 Description Of the Windows System File Checker Tool
«364» Windows File Protection Creates Event Log Entry When Scanning Is Stopped
The Windows File Protection feature (WFP) logs an event if WFP is canceled while it is performing a scan of the system files or attempting to replace an individual file. This information is recorded for later review in the System event log.
Event ID 6406
Event ID 6406 indicates that a user canceled the replacement of a file that WFP targeted to be replaced and for which WFP prompted the user for the media source.
Event ID: 6406
Type: Informational
Source: Windows File Protection
Description: The system file Filename was not restored to its original, valid version because the WFP restoration process was canceled by user interaction, user name is UserID.
Event ID 6409
Event ID 6409 indicates that a user canceled the scanning process completely.
Event ID: 6409
Type: Informational
Source: Windows File Protection
Description: The WFP file scan was canceled by user interaction, user name was UserID.
«365» Change Computer Name and/or Domain Membership Using the GUI
To change the Windows 2000 computer name and/or domain membership:
1. Click on Control Panel|System|Network Identification|Properties.
2. To change the computer name, type the new computer name into the Computer name box.
3. To change the domain name, Select Domain in Member of and type the new domain name into the Domain box.
4. To change the Primary DNS suffix of this computer, press More and type the DNS domain name and press OK.
5. Press OK and complete the dialog.
«366» Prevent Overwriting All Files During A Bulk Copy
When you perform a bulk file copy and files of the same name as those you're copying exist in the target location, Windows 2000 will display a dialog box every time one of the files you've asked to copy will overwrite an existing file. The dialog box contains the following options:
» Yes (to overwrite the file)
» Yes to All (to overwrite all duplicate files)
» No (to not overwrite the file)
» Cancel
If you don't want to overwrite a particular file at the target location, you must click No when Windows prompts you about that file. If you don't want to overwrite any files that already exist at the target location, you can hold down the Shift key and click No, which acts like a "No to All" option.
«367» How To Remove Administrative Shares
This Item describes how to remove the default administrative shares, and prevent them from being automatically created.
Any server that is running Windows 2000 has default Administration shares that should be removed. These hidden shares are designated by the logical drive names that you have on the server, for example, the root folder of drive C is C$. You can disable the automatic creation of the administrative shares by using either the Registry Editor or Poledit.exe. Note that these methods do not remove the IPC$ share or existing shares that have been manually created.
Remove Administrative Shares By Using Poledit
1. Click Start, click Run, type poledit in the Open box, and then click OK.
2. On the File menu, click Open Registry.
3. Double-click Local Computer.
4. Expand Windows NT Network, and then expand Sharing (Server).
5. Click to clear the Create Hidden Drive Shares (Server) check box, and then click OK.
6. On the File menu, click Save.
NOTE: To install the Windows 2000 Administration Tools (including Poledit.exe) on a Windows 2000 Professional-based computer, open the i386 folder on the applicable Windows 2000 Server CD-ROM and then double-click the Adminpak.msi file. Follow the instructions that appear in the Windows 2000 Administration Tools Setup Wizard.
Remove Administrative Shares Using the Registry Editor
You can remove automatic creation of the administrative shares by using the Registry Editor. By using this method, you must make sure that the Group Policy does not restore this entry after you set it. For more information, see the "Remove Administrative Shares By Using Poledit" section above.
To remove automatic creation of the administrative shares by using the Registry Editor:
1. Start Registry Editor.
2. Locate the following Registry key:
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
3. For a workstation, create or change the value of the AutoShareWks Data Name to zero (0).
For a server, create or change the value of the AutoShareServer Data Name to zero (0).
NOTE: A setting of zero (0) prevents the administrative shares, such as C$, D$, and Admin$ from being created automatically.
4. Quit Registry Editor.</
«368» Unable To Remove the Read-Only Attribute From A Folder
You try to remove the Read-Only attribute from a folder in Windows Explorer, but it does not happen. You may even receive an error message. If you have customized the folder using View|Customize This Folder, Windows Explorer sets the Read-Only attribute, and will not let you change it. To workaround this behavior, you can make Windows Explorer use the System attribute instead of the Read-Only attribute.
Open Regedit and navigate to the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
Add or modify the Data Name: "UseSystemForSystemFolders", Data Type: REG_DWORD, and make the Data Value = 00000001.
«369» Changing File Associations
This Item describes how to change which program is used to open a file in Windows 2000. For example, you can specify that files with a certain extension open automatically in a specific program. You can also modify an existing file type to change its association with a program.
How to Change a File Association
You may want to change the association of a file name extension from one program to another program. To change an existing file association:
1. In My Computer or Windows Explorer, right-click a file with the extension whose association that you want to change, and then click Open With.
2. In the Open With dialog box, click the program that you want to use to open the file type. Or, click Choose Program to choose the program that you want. If the program is not listed, click Other to locate your program.
3. Click the Always use the selected program to open this kind of file option.
How to View File Name Extensions
The file name extensions of known file types are hidden by default. "Known file types" includes file types that are associated with a program. To see all file name extensions:
1. Double-click My Computer.
2. On the Tools menu, click Folder Options.
3. Click the View tab, and then click to clear the Hide extensions for known file types check box.
How to Create a File Association for an Unassociated File Type
You may want to create a file association for a file type that is not known to Windows 2000 by default. There are two common reasons for this action:
» A program (typically a database program) produces file reports with extensions that are not registered in Windows 2000.
» You receive e-mail message attachments that were created in a program that is not installed on your computer. The file name extension is not registered, but you have a program that can open these files.
To create a file association for an unassociated file type:
1. In My Computer or Windows Explorer, right-click a file with the extension whose association that you want to create, and then click Open. Or, double-click the file.
2. In the Open With dialog box, choose a program to associate with this file name extension. Click the Always use the selected program to open this kind of file option.
«370» Configure the Size And Behavior Of Event Viewer Logs
By default, the configuration of the event logs in Event Viewer may allow an event log to become full. If an event log becomes full, an error message is generated, and you may miss important events. However, you can change the size and behavior of event logs to handle the number of events that you want to be able to view.
To Change the Size and Behavior of an Event Log
1. Start Event Viewer. Click Start, point to Settings, click Control Panel, double-click Administrative Tools, and then double-click Event Viewer.
2. In Event Viewer, right-click the log that you want to change, and then click Properties.
3. To change the size of the log, click the General tab, and then specify a new size (in kilobytes) in the Maximum log size box. Click Clear Log to apply the change.
When you click Clear Log, you are prompted to specify if you want to save the events in the original log before you clear it. If you want to save the events click Yes, and then click OK. Select a folder, and then type a file name for the saved log. By default, Windows 2000 selects the My Documents folder of the current user. The default extension for a saved event log file is .evt. You can open any .evt file in Event Viewer by clicking Open Log File on the Action menu.
If you want to use event log files in a database or spreadsheet to sort and select events easily, you can save the log file as a tab-delimited text file with a .txt extension, or as a comma-delimited text file with a .csv extension.
4. To change the way in which the log behaves when it reaches its maximum size, click one of the following options:
» Overwrite events as needed: Event Viewer overwrites the oldest event with each new event. If you use this option and the computer is experiencing problems, you might replace important event notifications without knowing it.
» Overwrite events older than N days: This is the default option. The default number of days is seven. Event Viewer overwrites the oldest event that is older than the specified number of days as each new event occurs. If the computer is experiencing problems and many events are written to the log, no existing event may be older than the specified number of days. In this case, no events are automatically cleared and the log becomes
full.
» Do not overwrite events (clear log manually): Event Viewer does not overwrite events. If the log reaches its maximum size (becomes full), new events are not written to the log and an error message is generated.
| Copyright © 2000-2008 treewalkdns.com All rights are reserved |
