210 likes | 390 Views
A+ Ch 14. Errors. Vista Tools For Solving Startup Problems. Advanced Boot Options menu Vista Recovery Environment Command prompt in Windows RE. Files Needed to Start Vista. 1.Vista startup is managed by two files: Windows Boot Manager (Bootmgr) Windows Boot loader (Winload.exe)
E N D
A+ Ch 14 • Errors
Vista Tools For Solving Startup Problems • Advanced Boot Options menu • Vista Recovery Environment • Command prompt in Windows RE
Files Needed to Start Vista • 1.Vista startup is managed by two files: • Windows Boot Manager (Bootmgr) • Windows Boot loader (Winload.exe) • 2.Vista configuration data is storred in the Boot Configuration Data (BCD) file.
List of Files for Booting Vista • 3. MBR - partition table and master boot program • 4.OS boot program - on the first sector of the system partition - C:\ Windows XP uses this, Vista doesn’t. • 5.BootMgr - root of C:\ - manages the initial startup of Vista. • 6.BCD - Boot folder of the system partition, C:\Boot - contains boot parameters.
List of Files for Booting Vista - pg 2 • WinLoad.exe - C:\Windows\System32 - loads and starts Windows processes • Ntoskrnle.exe - \system32 - Vista Kernel • 7.Hal.dll - \system32 - hardware abstraction layer talks to hardware. • 6.SMSS.exe - \system32 - Session manager file loads graphic components
List of Files for Booting Vista- pg 3 • Csrss.exe - \System32 - Win32 subsystem • 10.Winlogon - logon process • 9.service.exe - services control manager stops and starts services • 8.Lsass.exe - authenticates users
List of Files for Booting Vista - pg 4 • System Registry Hive files - C:\Windows\System32\Config\System - holds the data for the HKEY_LOCAL_MACHINE key of the registry • Device drivers - C:\Windows\System32\Drivers - Drivers required for hardware.
Starting Vista • Don’t get confused - It is true that, according to the terms in Microsoft’s documentation, the Windows OS is on the boot partition, and the boot record is on the system partition. • On most PCs these are one and the same.
Steps to Start Vista • POST • Looks in CMOS for the boot sequence. • BIOS finds and launches the MBR - BootMgr • BootMgr starts in 16bit mode and switches to 32-bit or 64-bit mode. • BootMgr reads the BCD File.
BCD Factors • Option 1 - Normal startups, no dual boot, no menu appears, BootMgr finds and launches Windows Boot Loader (WinLoad.exe) • Option 2 - in a dual boot, BootMgr displays the Windows Boot Manager screen. • Option 3 - press spacebar, the Windows Boot Manager screen appears. • Option 4 - Press F8, the Advanced Boot Options menua appears. • Option 5 - if Windows was previously stopped abruptly, the Windows Error Recover Screen appears.
Starting Vista, Page 2 • Normal startup, WinLoad loads into memory, the OS kernel and Ntoskrnle.exe, but does not start them. WinLoad also loads the hal.dll. • WinLoad loads into memory the system registry hive. • WinLoad read the registry key just created, HKEY_LOCAL_MACHINE/SYSTEM/Services. Looks for and loads devices drivers needed at startup. They are NOT started yet.
Starting Vista, Page 3 • WinLoad reads the data from the registry key HKEY_LOCAL_MACHINE/SYSTEM and tells the OS if the user wants to start the OS with Last Known Good Configuration. • WinLoad starts up the memory paging process and then turns over startup to the OS kernel.
Starting Vista, Page 4 • The kernel (ntoskernal.exe) activates the Hal, and builds the HKEY_LOCAL_MACHINE/HARDWARE using the system poll data. • Kernel starts critical services and drivers that are to be started at startup. Reminder - drivers talk to hardware, services talk to drivers. • Kernel starts Session Manager(Smss.exe) which runs in user mode. • Smss starts the Win32 subsystem that displays graphics and the Windows progress bar. When you see the progress bar, you knows the kernel has loaded sucessfully.
Starting Vista, Page 5 • Smss.exe then starts the client/server runtime subsystem, runs in user mode - it interacts with Applications. • Smss.exe starts the Logon manager(Winlogon.exe) and reads/executes other commands stored in the registry, such as a command to replace system files placed there by Windows Update. • Winlogon.exe starts the Service Control Manager(services.exe). SCM starts all services listed as automatic in the Services console.
Starting Vista, Page 6 • Winlogon.exe starts the Local Security Authority(Lsass.exe). The logon screen is shown, authentication passed to be verified. Last Known Good Configuration in registry is updated. • Winlogan launches Userinit.exe and the Windows destop (Explorer.exe).
Starting Vista, Page 7 • Userinit applies Group Policy setting and any programs not trumped by Group Policy that are stored in these keys and folders. • HKLM\Software\Microsoft\Windows\CurrentVersion\Runonce • \CurrentVersion\Policies\Explorer/Run • \CurrentVersion\Run • HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run • \Windows\RunOnce • SystemDrive\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup • SystemDrive\Users\UserName\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Sites for Window RE • Bleeping Computer