1.4 - Additional Windows Tools

Computer Troubleshooting and System Analysis

Overview of System Troubleshooting

  • Common scenario of troubleshooting involves sitting at a machine with unknown internals.

  • A quick way to get an overview of the device's configuration is through the System Information Utility.

  • To access this utility, users can run msinfo32.exe.

System Information Utility Categories

  • The System Information Utility consists of three main categories:

    • Hardware Resources

    • Provides information about:

      • Memory in the system

      • Configured DMA (Direct Memory Access) settings

      • Interrupts

      • Conflicts with settings

    • Components

    • Contains details on:

      • Display settings

      • Network configurations

      • Sound device information

      • Storage information such as drives and disk details

    • Software Environment

    • Displays:

      • Installed drivers

      • Pending print jobs

      • Running tasks

  • System Summary

    • Offers an overview of the overall system configuration:

    • Operating system name and version

    • Processor details

    • BIOS configuration

    • Boot device information

    • Available memory and file space

Hardware Resources Exploration

  • Expanding the Hardware Resources section:

    • Information about conflicts or sharing issues (none listed in the current device).

    • Details on DMA devices, forced hardware, I/O settings, IRQs (interrupt requests), and memory configurations.

Components Exploration

  • Different options to explore within the Components category:

    • Information related to sound devices.

    • Details concerning network adapters, protocols, and Winsock configuration details.

    • Storage information covering:

    • Physical drives

    • Detailed disk information

    • IDE and SATA drive data.

Software Environment Exploration

  • The Software Environment section includes:

    • System driver information (notable quantity on Windows).

    • Pending print jobs (none in the current queue).

    • Various services, program groups, and any other software details.

  • Important point: Users cannot change or modify settings in this utility, but it aids in quickly gathering details without navigating through multiple utilities.

Resource Monitor Utility

  • Resource Monitor combines real-time analysis and detailed statistics:

    • Available categories include CPU, disk, network, among others.

  • To access Resource Monitor, users can type resmon.exe.

  • Overview page shows:

    • System performance across various categories.

    • Detailed information about individual services running under each resource category.

  • Users can obtain detailed information about specific applications and corresponding resource usage.

Starting Windows and Configuration

  • Standard process to start Windows:

    • Power on computer.

    • View splash screen.

    • Login prompt appears.

  • System Configuration helps customize startup options:

    • Access through msconfig.exe.

    • Tabs within System Configuration:

    • General: Primarily specifies startup settings (normal, diagnostic).

    • Boot: Allows selection of which operating system to start, safe boot options, including log creation.

    • Services: Manages services initiating at startup, including how they will run.

    • Startup: Manages individual startup applications. With new implementations, this function exists in Task Manager.

    • Tools: Launches various utilities like Event Viewer, Task Manager, Resource Monitor, etc.

Managing Storage Space

  • Disk Cleanup Utility for cleaning drives:

    • Access via cleanmgr.exe.

    • Categorizes types of data on the system for deletion:

    • Downloaded program files

    • Temporary internet files

    • Windows error reports

    • Temporary files (example: 1.56GB of temporary files can be cleared).

  • Users can select categories for cleanup and confirm deletion.

Disk Defragmentation

  • For systems with traditional hard drives:

    • Disk Defragmentation optimizes storage performance by consolidating fragmented files.

    • SSDs (Solid State Drives) do not require defragmentation since they access files directly without delay from spinning drives.

  • Disk Defragmentation can also be executed from the command line using the defrag command or through the graphical interface.

  • Defragmentation status (example: 98% efficiency) indicates whether action is necessary to optimize space.

Windows Registry Management

  • Windows stores configuration settings within the Windows Registry:

    • Accessed using regedit.exe.

    • Contains critical information on kernel settings, applications, services, etc. Important to backup the registry before making changes.

  • Structure of the Registry:

    • Main folders start with HKEY, representing handle to registry key:

    • Various categories such as HKEYCLASSESROOT, HKEYCURRENTUSER, HKEYLOCALMACHINE, HKEYUSERS, HKEYCURRENT_CONFIG.

  • Example of navigating within the registry:

    • Explore HKEYLOCALMACHINE > Software > Microsoft > Windows > Current Version for system entries and their properties.

  • Backing up registry entries:

    • Export options available to save registry keys or sections as files, enabling restoration if needed.