quiz image

Troubleshooting window start up

jlopez59# avatar
jlopez59#
·
·
Download

Start Quiz

Study Flashcards

248 Questions

Which of these actions is performed during a hard boot?

Initializing the processor and clearing memory

What is one advantage of performing a soft boot?

It saves time

When should you consider using a hard boot?

When a soft boot doesn't work

Why does a hard boot take more time than a soft boot?

Because it performs additional initialization steps

What is a common action that is unique to a soft boot and not a hard boot?

Using the OS to reboot

What happens when you press the reset button on the front of the case?

The CPU is initialized and the BIOS/UEFI startup is restarted

What is the LAST step to try if all other methods fail when Windows hangs?

Turn off the power switch on rear of the case, wait 30 seconds, turn it back on, and then press power button on the front of the case

Which button or switch is used for an abrupt power-off?

The hard power button on the rear

What should you try initially when Windows hangs?

Try a restart

Which power button can be set to perform a Windows restart?

The soft power button on the front

What is the primary role of the startup BIOS/UEFI in the early steps of the boot process?

Running power-on self-tests

What kind of information is stored in onboard RAM relevant to the boot process?

Inventory of hardware devices, hardware settings, and startup settings

Which of these tasks is performed by startup UEFI?

Loading the UEFI boot manager and device drivers

What does POST (power-on self-test) verify?

Communication with essential hardware components

What does the Windows Boot Manager read during the boot process?

Settings in the Boot Configuration Data (BCD)

What is the primary responsibility of the Windows Boot Loader (winload.exe)?

Loading Windows components

Which file is responsible for starting the Session Manager (Smss.exe)?

ntoskrnl.exe

Which component is activated by the kernel (ntoskrnl.exe) during the boot process?

HAL

What task does the Session Manager (Smss.exe) perform during the Windows boot process?

Loading the graphical interface

Which registry key does the kernel (ntoskrnl.exe) build into memory during the boot process?

HKEY_LOCAL_MACHINE\HARDWARE

Which process is responsible for starting the Service Control Manager during boot?

Winlogon.exe

What does Userinit.exe apply during the Windows boot process?

Group Policy settings

What occurrence signifies the official completion of the Windows startup?

Disappearance of the pinwheel wait icon

Which process launches Userinit.exe during the boot process?

Winlogon.exe

To which process are user account and password details passed for authentication during the boot process?

Lsass.exe

What does the Windows Boot Loader load first during a normal startup?

OS kernel (ntoskrnl.exe)

Which component's status does the BIOS check to determine if an error message should be displayed on-screen?

Video

What is the first step taken by the UEFI during the boot process?

Loads UEFI Boot Manager

What happens if Windows was previously stopped abruptly?

Error Recovery screen appears

In the BIOS process, what is checked after finding the OS in BIOS/RAM?

Consulting MBR

During a normal startup, which process turns over the startup to the OS kernel?

Windows Boot Loader

Which process is responsible for displaying the logon screen and authenticating user credentials?

Lsass.exe

Which registry key is built into memory by the OS kernel during the boot process?

HKLM\Hardware

What is the primary role of the Session Manager (Smss.exe) during the boot process?

Starts Csrss.exe and Winlogon.exe

Which subsystem is started by Smss.exe to interact with applications?

Csrss.exe

What process is responsible for starting services set with the type 'Automatic'?

Services.exe

Which process launches Userinit.exe during the boot process?

Winlogon.exe

Which method can you use to boot from a recovery drive?

Boot from a Windows 10/8 recovery drive

Which option is available under the Advanced Options menu?

Startup settings

What can you do in the Windows Recovery Environment to disable certain startup features?

Disable driver signatures

Which tool available on the Windows Recovery Environment can be used for fixing system files?

Command prompt

Which Windows version includes the 'Fresh Start' option in the Startup Menu?

Windows 10

Which feature is available to enable boot logging?

Startup settings

Which tool can be used to create Windows 10 setup media?

Media Creation Tool

Configuring Windows 10/8 to use the F8 key at startup allows access to which menu?

Advanced Boot Options

Which of the following is NOT a recommended action to take while your computer is still healthy?

Delete temporary files

Which type of recovery boot media can be created using a USB drive?

Windows 10/8 USB recovery drive

What is the primary purpose of creating a system image while your computer is still healthy?

To provide a full backup of your system for restoration

What is the purpose of creating a system repair disc in Windows 10/7?

To launch Windows Recovery Environment

Which tool must be used in Windows 7 to create a system repair disc?

Backup and Restore (Windows 7)

What type of repair disc does a 64-bit Windows installation create?

64-bit version of the repair disc

What is a significant difference between creating a system repair disc in Windows 8 compared to Windows 10/7?

The option to create a system repair disc is hidden in Windows 8

What does the system repair disc created from a 32-bit Windows installation allow you to do?

Launch Windows RE on a 32-bit system

What is the primary function of an OEM recovery partition on a computer's hard drive?

To contain drivers specific for the computer

Which step must be performed first when creating a Windows recovery drive?

Open Control Panel and click Recovery

What is the purpose of a Windows recovery drive?

To access Windows repair tools

Which selection must be made after responding to the UAC dialog box when creating a recovery drive?

Include system files

What indicates the size of the USB flash drive needed for a recovery drive?

Windows reports the size

What can you create using the Media Creation Tool on a Windows 10 working computer?

A bootable Windows setup ISO file

Which types of media can the Windows 10 Media Creation Tool generate for a Windows setup?

ISO file, DVD, flash drive

How can you launch Windows Recovery Environment (Windows Re)?

From a Windows setup DVD or flash drive

Which device is NOT supported for creating setup media with the Windows 10 Media Creation Tool?

Network drive

What is the main purpose of the Windows 10 Media Creation Tool?

To create bootable Windows setup media

Which method can be used to launch Windows RE when Windows is functioning normally?

Enter shutdown /r /o in command prompt

What should you do to launch Windows RE using the Windows 10 Settings app?

Under Advanced startup, click Restart now

Which method involves using the Shift key to launch Windows RE?

Click the Power icon, press and hold Shift, and click Restart

Which option allows you to launch Windows RE when Windows cannot start normally?

Windows detects startup problems and launches automatic diagnostics and repairs

Which action should be taken if you prefer to use a bootable device to launch Windows RE?

Boot from a USB recovery drive, DVD system repair disc, or Windows setup DVD or USB drive

What initial action must be taken to run Startup Repair in Windows RE?

Click Startup Repair on the Advanced options screen

Which of the following is a capability of the Startup Repair tool?

Fix Windows system files without changing Windows settings

Where can the log file of the Startup Repair process be found?

C:\Windows\System32\LogFiles\SRT\SRTTrail.txt

What does Windows RE do after examining the system during Startup Repair?

Fixes problems and reports what it did

Which of the following is NOT affected by the Startup Repair tool?

User data

When is the Startup Settings option on the Advanced options screen available?

When Windows RE is launched from the hard drive

What happens when you press 1 or F1 to enable debugging?

The system boot logs are moved to another computer

What file records all files used during the boot process when Boot Logging is enabled?

C:\Windows\Ntbtlog.txt

What does Windows do when Boot Logging is enabled?

Record all files used during the boot process

What purpose does Boot Logging serve?

To monitor which files did and did not load during boot

Which key do you press to enable Low-Resolution Video mode?

3 or F3

Which of the following tasks can be performed in Safe Mode?

Running the System File Checker command

What is a scenario where enabling Low-Resolution Video might be necessary?

When the video setting does not allow the screen to display well enough to fix a bad setting

Which command can be run in Safe Mode to check for file system errors?

chkdsk /r

What tool can be used in Safe Mode to verify memory?

Memory Diagnostics

Which key enables Safe Mode with Networking?

5 or F5

What command is used to verify system files in Safe Mode with Command Prompt?

sfc /scannow

What should be launched if verifying system files does not solve the problem in Safe Mode with Command Prompt?

System Restore

When should you use Safe Mode with Networking?

To troubleshoot booting issues when network access is required

Which path is used to launch System Restore from the Command Prompt?

C:\Windows\system32\rstrui.exe

Which key should you press to disable Driver Signature Enforcement?

F7

What happens when you press F8 in the Startup Settings menu?

Disable Early Launch Anti-Malware Driver

Which feature is disabled by pressing F9?

Automatic Restart on System

Why might developers disable Driver Signature Enforcement?

To test kernel-mode device drivers

Which action is performed when pressing F10 in the Startup Settings screen?

Return to the Startup Settings Screen

What does pressing 7 or F7 in the startup settings screen do?

Disable Driver Signature Enforcement

Which startup setting allows antivirus software to launch a driver before any third-party drivers?

Press 8 or F8

What happens when you press 9 or F9 in the startup settings screen?

Stops rebooting upon encountering a system failure.

Which option would you use to return to the Startup Settings Screen?

Press F10

Which of the following is required in all 64-bit editions of Windows?

Kernel-mode drivers must be digitally signed

Which of the following is NOT a method to select System Restore?

Recovery Drive created using a USB

What command can be used to initiate System Restore from a command prompt?

rstrui

Which of the following issues is NOT a potential problem caused by using System Restore?

Loss of personal files and documents

Which of the following components will NOT be helped by System Restore if corrupted?

Registry

Which version of Windows includes the System Recovery Options screen?

Windows 7

When should you use the Command Prompt Window in Windows RE?

When the graphical interface is missing or corrupted

What privilege level do you have when accessing the Windows RE Command Prompt?

Administrator privileges

How can you access the Command Prompt in Windows RE in Windows 10 or 8?

Click Command Prompt on the Advanced options screen

Which screen must you navigate to in Windows 7 to access the Command Prompt in Windows RE?

System Recovery Options

For what purpose might you use a specific command in the Windows RE Command Prompt?

To fix a problem when Windows refuses to start

Which command can be used to restore critical Windows system files?

SFC

What should be done after each fix to verify if the problem was solved?

Reboot the system

Which folder contains registry files that can be restored using the command prompt in Windows RE?

RegBack

Which of the following is NOT a command used to manage data and system files?

refresh

Which commands are used to restore registry files?

Commands from Table 6-2

Which command makes the Windows registry folder the current folder?

cd \windows\system32\config

What is the purpose of the command ren system system.save?

To rename the system registry file

Which command should be used to examine the contents of the current drive?

dir

Which step should be tried first for hardware problems according to the content?

Copying just the system hive from the backup folder to the registry folder

What is the command cd regback used for?

To make the registry backup folder the current folder

What is the first step to take for software problems in the Windows Recovery Environment?

Copy the Software hive to the registry folder

What command would you use to copy the SAM hive to the registry folder?

copy sam c:\windows\system32\config

What should you try if copying just the Software hive does not solve the problem?

Copy all five hives to the registry folder and reboot

Which of the following is NOT one of the five hives that can be copied to the registry folder in the given commands?

User

Which command is repeated in the list but lacks a description?

copy software c:\windows\system32\config

Which command is used to enable networking from the Windows RE command prompt?

wpeinit

Which command is used to manage hard drives, partitions, and volumes?

diskpart

Which command can repair the BCD and boot sectors in the Windows Recovery Environment?

bootrec

What is the primary function of the chkdsk /r command in the Windows RE command prompt?

Repair the file system

Which command is used to manually edit the BCD in the Windows Recovery Environment?

bcdedit

Which command would you use to scan for Windows installations that are not stored in the BCD?

bootrec /scanOS

Which command repairs the Master Boot Record (MBR) of hard drives using the MBR partitioning system?

bootrec /fixmbr

What is the function of the command 'bootrec /rebuildBCD'?

Scans for Windows installations and rebuilds the BCD

Which command would you use to display the contents of the BCD?

bcdedit /enum

Which command repairs the boot sector of the system partition?

bootrec /fixboot

Which option is the least intrusive solution for reinstalling Windows?

Windows 10/8 previous version

Which of the following is a more intrusive option than 'Windows 8 refresh'?

Windows 10 reset

Which option applies a pre-existing backup to restore the system?

Apply a Windows 10/7 system image

If you need to perform a clean installation from setup media, which option should you choose?

Windows 10/8/7 clean install from setup media

Which option specifically refers to reinstalling Windows directly from a manufacturer's recovery partition?

Install Windows 10/8/7 from the OEM recovery partition

When are minor updates to Windows distributed?

Second Tuesday of each month

What condition must be met to revert to an earlier version of Windows?

You have not reset your computer during this time

What happens if you delete the Windows.Old folder?

You will lose the ability to revert to an earlier version

What is the distribution frequency of major updates to Windows?

Once or twice a year

How long do you have to revert a Windows version to an earlier one if experiencing issues?

10 days

Which step should you take first from the Windows desktop to roll back a Windows update?

Open the Settings app and click 'Update & security'

Where can you find the 'Go back to the previous version of Windows 10' option in the Settings app?

Under 'Recovery'

In which scenario should you use the Windows Recovery Environment (RE) to roll back a Windows update?

When a new version has caused the system to fail to start

Where can you access the option to roll back a Windows update in Windows RE?

On the Advanced options screen

What must you do after clicking 'Get started' under 'Go back to the previous version of Windows 10' in the Settings app?

Confirm the action and follow the on-screen instructions

What is the primary benefit of performing a repair upgrade of Windows 10?

It nondestructively installs Windows 10 over an existing Windows installation.

Which of the following is NOT a necessary step when performing a repair upgrade?

Formatting the hard drive before starting the upgrade.

Why is it important to gather all product keys for installed apps before a repair upgrade?

To make reinstallation of these apps easier if necessary.

What should be done as a precaution before starting a repair upgrade, despite its nondestructive nature?

Make a full backup of all data, apps, and settings.

What type of media can be created to perform a repair upgrade?

Windows setup media on DVD, USB, or ISO file.

What is the main purpose of performing a Fresh Start on a Windows 10 system?

To remove manufacturer bloatware

What is kept after performing a Fresh Start on Windows 10?

User accounts, settings, and personal data

Which type of applications are maintained after a Fresh Start?

Microsoft Store apps installed by the computer manufacturer

What does a Fresh Start remove from a Windows 10 system?

Manufacturer bloatware

What happens to manufacturer drivers and OEM system files during a Fresh Start?

They are removed

What should you ensure before starting a fresh installation of Windows 10?

You are connected to the internet

Where do you need to navigate in the Settings app to start the recovery process?

Update & Security

Which option must be clicked to learn how to start fresh with a clean installation of Windows?

Learn how to start fresh with a clean installation of Windows

What must be clicked to switch to the Fresh start page?

Yes

Which button begins the process of a fresh start installation?

Get Started

What does Windows 10 reset keep by default?

User accounts, some Windows settings, and all personal data files

What happens to third-party apps during a Windows 10 reset?

They are removed

What are some Windows settings automatically resynced if you use a Microsoft account?

Windows settings

Which of these changes made to Windows settings might be lost during a reset?

Changes made to display settings

In a Windows 10 reset, which of these statements is true regarding user data files?

They are kept and not affected by the reset

What is the correct way to initiate a system image recovery for Windows 10?

Reboot the computer into Windows RE, navigate to the Advanced options screen, and select System Image Recovery

How is System Image Recovery accessed on Windows 7?

On the System Recovery Options screen

Which option must be selected to recover Windows 8 using a system image?

System Image Recovery from the Advanced options screen

Which screen must be accessed to perform a system image recovery on Windows 10?

Advanced options screen in Windows RE

Where do you find the System Image Recovery option on Windows 7?

System Recovery Options screen

What might be included in the recovery partition on a laptop?

A copy of the OS build, device drivers, diagnostics programs, and preinstalled applications

Where can you find instructions on how to access the recovery tools stored on the recovery partition?

On the manufacturer's website or during the initial boot screen message

What should you do if your laptop's recovery partition is corrupted or missing?

Look for the option to download recovery media from the manufacturer's website

What types of programs are typically found in the recovery partition?

Diagnostics programs

Which statement is true regarding the visibility of the recovery partition?

The recovery partition might or might not be hidden

What is the first step in the process of installing Windows over the network?

Boot the computer to the network

In the BIOS/UEFI setup, which feature must be enabled to support network booting?

PXE Support

What does the Preboot eXecution Environment (PXE) do after the computer boots to it?

Searches for a server to provide Windows PE and the deployment image

Which environment must be loaded on the deployment server for network installation?

Windows Preinstallation Environment (PE)

Where do you enable PXE Support for network installation?

BIOS/UEFI setup

What is the first step you should take when troubleshooting a startup problem?

Follow procedures to interview the user

After identifying error messages, what should you do next in the troubleshooting process?

Determine what has just changed that might be the source of the problem

Why is it important to back up important data during the troubleshooting process?

To ensure data is not lost during the troubleshooting process

What should you do once you know the source of a startup problem?

Decide which tool will be the least invasive to use, yet still fix the problem

Which step involves verifying that you have current backups?

Back up important data or verify you have current backups

What should you use first when data on a hard drive is lost or corrupted?

Windows tools or third party software

Which equipment is used to temporarily connect a hard drive to a working computer?

SATA-to-USB converter kit

Which software tool is recommended for copying data from a connected hard drive?

File Explorer or Windows Explorer

What initial question should you ask when handling a hard drive?

Is there important data on the hard drive not backed up?

What should be the purpose of using a SATA-to-USB converter kit on a hard drive?

To connect the hard drive to a USB port on a working computer

Which of the following could be a reason for Windows not booting?

Hardware issues

Which startup error message indicates a problem with the hard drive being undetected?

Hard drive not found

If you see a message 'No boot device found' on a black screen during startup, what is most likely the cause?

Hardware issue

Which error message on a black screen indicates that Windows cannot locate the operating system?

No OS found

What does the error message 'Disk boot failure' at startup signify?

Issues with the disk drive

Which tool can be used to fix problems with system files that might lead to a slow profile load?

sfc/scannow

Which of the following is a method to reduce the time it takes to load a user profile by addressing startup items?

Reduce startup items

When experiencing a slow profile load, what can be done specifically for Windows 10?

Try a repair upgrade

What action can be taken to revert the system to a state before the slow profile load issue began?

Apply a restore point

Which step involves creating a fresh user environment to address slow profile load problems?

Create a new user profile

What can trigger a Blue Screen of Death (BSOD)?

Corrupted registry

Blue screen of death (BSOD) errors are also known by what other name?

Stop errors

Which of the following is not a common cause of a stop error?

Slow internet connection

When can stop errors occur?

During or after startup

Stop errors require Windows to do which of the following?

Stop the system

What is another name for the Blue Screen of Death (BSOD) error?

Stop error

Which of the following is NOT a common cause of stop errors?

Incorrect display settings

When can stop errors occur?

During or after startup

Which kernel mode issue can cause a Blue Screen of Death (BSOD)?

Missing or damaged system files

Which of the following components, if corrupted or failing, can lead to a stop error?

Hard drive

What is the first step you should take when you encounter a blue screen error?

Search Microsoft websites for the error.

What should be done if rebooting and enabling boot logging do not resolve the issue?

Launch Windows RE and restart in Safe Mode with Networking.

Which action might help in identifying a peripheral device causing the blue screen error?

Disconnect any peripheral devices.

What is the recommended action if the blue screen error persists after multiple restarts?

Launch Windows RE and restart in Safe Mode with Networking.

Which option is NOT a recommended step when dealing with a stop error?

Reinstall the operating system immediately.

What should you do if the device driver has been recently updated and the Safe Mode desktop is loaded?

Open Device Manager and roll back the driver

What might help if your device driver problem occurred after a recent Windows update?

Return to a previous version of Windows

What action can be taken using Device Manager if a device driver is causing problems?

Use Device Manager to uninstall the device

Which of the following might resolve a problematic device driver issue without rolling back the driver?

A Windows update might fix the problem

If a device driver updated along with a Windows update caused a problem, what should you try?

Return to a previous version of Windows

What should you do if the blue screen names a program file but does not identify a device?

Open File Explorer or Windows Explorer, locate the program file, right-click it, select Properties, and check the Details tab.

Which Windows tool should you use to open a command prompt if you cannot start Windows in Safe mode?

Windows RE

What value should you change the Start parameter to in the Registry Editor to disable a problematic service or driver?

0x4

What is the purpose of the Details tab in the Properties window of a program file?

To tell you the purpose of the file

Which step should you take to disable a service or driver if you cannot boot Windows normally?

Use Windows RE, access the Registry Editor, drill down to the service or device key, and change the Start value to 0x4

Which tool can be used to find critical errors and warnings recorded in the Administrative Events log?

Event Viewer

Which command should be used to check the hard drive for errors?

chkdsk /r

What action can you take to prevent a service from launching at startup?

Disable the service using Task Manager or the Service console

If you are unsure which service or program is causing a problem, what is one method you can use to diagnose the issue?

Perform a clean boot or a Safe boot

Which tool should you use to check memory for errors?

Memory Diagnostics tool

Which command can be used to fix Missing Boot Configuration Data in Windows?

bootrec /rebuildBCD

What is one recommended step if Windows shuts down improperly?

Check Event Viewer for clues

Which diagnostic tool can be used to verify memory issues after an improper shutdown?

Memory Diagnostics

What should you try first if no graphics appear on the screen?

Try a different monitor or onboard video port

In the event of missing graphics, how can you perform a System Restore?

Use the command prompt in Windows RE

Which tool can you use to enable boot logging in Windows Recovery Environment?

Startup Settings

What is a recommended action to take before a problem occurs?

Configure the F8 key at startup

Which method is NOT a way to start Windows Recovery Environment?

From Safe Mode

Which tool can be used to fix issues with system files during startup troubleshooting?

SFC

Who manages the Windows startup process?

Windows Boot Manager

Which tool can be used to create Windows 10 setup media?

Windows 10 previous version

What should be done if a hard drive contains valuable data but will not boot?

Install the drive in another system

What is a likely cause of improper shutdowns?

Hardware issues

What is a recommended action when encountering stop errors on a blue screen?

Research error titles and numbers online

What should you do if a device or service causes Windows to hang during a normal boot?

Boot into Safe Mode and disable the device or service

Study Notes

Booting a Computer

  • There are two fundamental ways to boot a computer:

Hard Boot (Cold Boot)

  • Turning on the power with the on/off switch
  • Takes more time than a soft boot
  • Initializes the processor and clears memory

Soft Boot (Warm Boot)

  • Using the OS to reboot
  • Initial steps performed by UEFI/BIOS in a hard boot are skipped
  • Saves time by restarting the system quickly
  • If a soft boot doesn't work, use a hard boot as an alternative

Power Button and Switch Functions

  • A power button in front can be configured as a "soft" power button, triggering a Windows restart.
  • The reset button initializes the CPU and restarts at the beginning of the BIOS/UEFI startup.
  • The switch on the rear of the case acts as a "hard" power button, turning off the power abruptly.

Troubleshooting Windows Hangs

  • When Windows hangs, attempt a restart as the first step.
  • If a restart doesn't work, try a shutdown followed by powering the system back up.
  • If the shutdown method fails, press the reset button on the front of the case.
  • If all else fails, turn off the power switch on the rear of the case, wait 30 seconds, turn it back on, and then press the power button on the front of the case.

Booting the Computer and Starting Windows

  • The boot process involves several steps, as outlined in Table 6-1

Startup BIOS/UEFI

  • Responsible for early steps in the boot process
  • Reads information from onboard RAM, including:
    • Inventory of hardware devices
    • Hardware settings
    • Security passwords
    • Date and time
    • Startup settings
  • Surveys hardware devices against the list kept in RAM

POST (Power-On Self Test)

  • A series of tests run by Startup BIOS/UEFI to ensure correct communication with essential hardware components

UEFI Boot Manager and Device Drivers

  • Loaded by Startup UEFI

Windows Boot Manager

  • Reads settings from the BCD (Boot Configuration Data)

Steps to Boot the Computer and Start Windows

  • Windows Boot Loader (winload.exe) is responsible for loading Windows components during the boot process.

Roles of the Kernel (Ntoskrnl.exe)

  • Activates the Hardware Abstraction Layer (HAL) and reads additional information from the registry.
  • Builds the registry key HKEY_LOCAL_MACHINE\HARDWARE in memory.
  • Starts critical services and drivers configured to be started by the kernel.

Roles of the Session Manager (Smss.exe)

  • Runs in user mode after being started by the kernel.
  • Loads the graphical interface.
  • Starts the client/server run-time subsystem (csrss.exe).
  • Starts the Logon Manager (winlogon.exe) and executes commands stored in the registry.

Windows Boot Process

  • Winlogon.exe is responsible for:
    • Starting the Service Control Manager (services.exe)
    • Starting the Local Security Authority process (lsass.exe)
    • Displaying the sign-in screen for user authentication
    • Passing user account and password to lsass.exe for authentication
    • Launching usernit.exe

Windows Startup

  • Userinit.exe applies:
    • Group Policy settings
    • Programs stored in startup folders and startup registry keys, unless trumped by Group Policy
  • Windows startup is complete when:
    • Windows desktop or Start screen appears
    • Pinwheel wait icon disappears

BIOS/UEFI Checks

  • BIOS checks essential hardware during POST (Power-On Self-Test)
  • BIOS checks BIOS/RAM to find OS and consults MBR (Master Boot Record)
  • BIOS searches for active partition and loads booting
  • BIOS reads BCD (Boot Configuration Data) store
  • If video is not active, BIOS sends error message as beeps or speech
  • If video is active, BIOS displays error message on-screen

UEFI

  • UEFI loads UEFI Boot Manager
  • UEFI loads EFI device drivers and enforces Secure Boot
  • UEFI follows boot file path
  • UEFI loads bootmfw.efi
  • UEFI reads BCD store

Windows Boot Loader

  • During normal startup, Windows Boot Loader loads OS kernel (ntoskrnl.exe)
  • Windows Boot Loader loads HAL (Hardware Abstraction Layer)
  • Windows Boot Loader loads System registry hive
  • Windows Boot Loader reads registry and loads device drivers for BIOS systems
  • Windows Boot Loader starts memory paging process
  • Windows Boot Loader turns over startup to OS kernel (ntoskrnl.exe)

Alternative Boot Options

  • In a dual-boot system, Windows Boot Manager screen appears
  • When user presses Spacebar, Windows Boot Manager screen appears
  • When user presses F8, Advanced Boot Options screen appears
  • When Windows previously stopped abruptly, Error Recovery screen appears

Booting the Computer and Starting Windows

  • The OS kernel activates the Hardware Abstraction Layer (HAL) during the boot process.

OS Kernel Initialization

  • The kernel reads more of the registry and builds the registry key HKLM\Hardware into memory.
  • Critical services and drivers are started by the kernel.
  • The Session Manager (Smss.exe) is started in user mode, which includes:
    • Starting the subsystem to display graphics and the Windows flag.
    • Starting Csrss.exe, the subsystem that interacts with applications.
    • Starting the Logon Manager (Winlogon.exe).

Service Initialization

  • The kernel reads and executes other commands stored in the registry, including:
    • Starting the Service Control Manager (Services.exe).
    • Starting services set with type "Automatic".
    • Starting the Local Security Authority Process (Lsass.exe), which:
      • Displays the logon screen and passes the user account and password for authentication.
    • For Windows 7, updating the Last Known Good Configuration.
    • Launching Userinit.exe.

###Finalizing the Windows Load

  • The kernel applies group policy settings and loads any programs stored in registry keys and folders, unless prevented by group policy.

Methods to Boot the System

  • Boot from a Windows 10/8 recovery drive to troubleshoot startup problems
  • Use Windows setup media or system repair disc to boot the system
  • Press F8 at startup to access Windows Startup Menu (must be enabled)

Windows Startup Menu

  • Access Previous version (if available) in Windows 10
  • Use Repair upgrade in Windows 10
  • Perform Fresh Start in Windows 10
  • Reset the PC in Windows 10
  • Refresh the PC in Windows 8
  • Reset the PC in Windows 8

Advanced Options Menu

  • Access Command prompt to troubleshoot startup problems
  • Change Startup settings (if available)
  • Access Advanced Boot Options Menu

Windows Recovery Environment

  • Apply system image to restore the system
  • Perform system repair to fix startup problems
  • Restore system to a previous point
  • Use commands to fix system files, volumes, and partitions
  • Access UEFI firmware settings
  • Disable driver signatures, anti-malware, early launch, and automatic restarts
  • Enable boot logging, VGA mode, and Safe Mode options

Pre-Problem Preparation

  • Keep good backups of data while the computer is still healthy
  • Create a system image to ensure easy restoration of the system
  • Configure Windows 10/8 to use the F8 key at startup to access the Advanced Boot Options menu
  • Create recovery boot media to troubleshoot and repair Windows

Recovery Boot Media Options

  • Create a Windows 10/7 DVD system repair disc
  • Create a Windows 10/8 USB recovery drive
  • Create Windows 10 setup media using the Media Creation Tool

System Repair Disc

  • A system repair disc can be used to launch Windows RE (Recovery Environment)
  • Creating a system repair disc:
    • In Windows 7, click Create a system repair disc in the Backup and Restore window
    • The created repair disc's architecture (32-bit or 64-bit) matches the architecture of the Windows installation used to create it

Windows 8 System Repair Disc

  • In Windows 8, the option to create a system repair disc is hidden

Windows 10/8 Recovery Drive

  • Most computers have an OEM recovery partition on the hard drive, containing drivers specific to the computer.
  • It's recommended to back up the OEM partition to a Windows recovery drive before a problem occurs.

Creating a Recovery Drive

  • To create a recovery drive, open Control Panel and click Recovery, then click Create a recovery drive and respond to the UAC dialog box.
  • Choose whether to Include system files, then click Next.
  • Windows will report the size of the USB flash drive needed, and you'll need to insert a drive of that size.
  • Windows will inspect the size of the drive, and if it's large enough, it will be listed among available devices.
  • Click Next, then click Create to begin the process.

Windows 10 Media Creation Tool

  • Launching Windows Re is possible from a Windows setup DVD or flash drive
  • The Media Creation Tool allows creation of a bootable Windows setup ISO file, DVD, or flash drive on a working computer

Launching Windows RE when Windows Works Normally

  • Use the Windows 10 Settings app to launch Windows RE by going to Advanced startup and clicking Restart now
  • Press Shift + Restart to launch Windows RE
  • Click the Power icon, press and hold Shift, and click Restart to launch Windows RE
  • Use the Command prompt to launch Windows RE by entering shutdown /r/o

Launching Windows RE when Windows Cannot Start Normally

  • Windows automatically launches automatic diagnostics and repairs when it detects startup problems
  • Boot from a USB recovery drive, DVD system repair disc, or Windows setup DVD or USB drive to launch Windows RE
  • Press F8 during startup to launch Windows RE

Startup Repair

  • Startup Repair is a built-in diagnostic and repair tool in Windows.
  • It can fix Windows system files without altering Windows settings, user data, or applications.

Running Startup Repair

  • To run Startup Repair, access Windows RE (Recovery Environment) and navigate to the Advanced options screen.
  • Click Startup Repair to initiate the process.

Startup Repair Process

  • Windows RE examines the system to identify and fix problems.
  • A report is generated detailing the actions taken during the repair process.
  • Suggestions for further fixes may be offered.

Log File

  • A log file of the Startup Repair process is created and stored at C:\Windows\System32\LogFiles\SRT\SRTTrail.txt.

Changing Startup Settings

  • The Startup Settings option is available only when Windows RE is launched from the hard drive, not from another media.

Debugging and Boot Logging

  • Pressing 1 or F1 enables Debugging, moving system boot logs from the failing computer to another computer for evaluation.
  • Pressing 2 or F2 enables Boot Logging, which:
    • Loads Windows normally
    • Records all files used during the load process in C:\Windows\Ntbtlog.txt
    • Allows users to see what did and did not load during the boot process

Startup Tools

  • Press 3 or F3: Enable Low-Resolution Video to fix display issues or troubleshoot video driver problems.

Safe Mode

  • Press 4 or F4: Enable Safe Mode to perform various troubleshooting tasks, including:
    • Launching antivirus software
    • Opening Event Viewer
    • Running the System File Checker command
    • Rolling back a driver using Device Manager
    • Verifying memory with Memory Diagnostics
    • Checking for file system errors with the chkdsk /r command
    • Configuring Windows for a clean boot on next restart

Startup Settings

  • Press 5 or F5 to enable Safe Mode with Networking:
    • Use when solving booting problems and network access is required
    • Use when Windows installation files are available on the network

Safe Mode with Command Prompt

  • Press 6 or F6 to enable Safe Mode with Command Prompt:
    • Use the sfc /scannow command to verify system files
    • If the problem is not solved, launch System Restore:
      • Run C:\Windows\system32\rstrui.exe

Changing Startup Settings

  • Pressing 7 or F7 disables Driver Signature Enforcement, which is required in 64-bit Windows editions to ensure kernel-mode drivers are digitally signed, and is useful for developers testing kernel-mode device drivers.

Disabling Security Features

  • Pressing 8 or F8 disables the Early Launch Anti-Malware Driver, a Windows 10/8 feature that allows antivirus software to launch a driver before third-party drivers to scan for malware.

System Failure Handling

  • Pressing 9 or F9 disables Automatic Restart on System Failure, preventing Windows from rebooting when it encounters a system failure.

Changing Startup Settings

  • Pressing 7 or F7 disables Driver Signature Enforcement, which is required in 64-bit Windows editions to ensure kernel-mode drivers are digitally signed, and is useful for developers testing kernel-mode device drivers.

Disabling Security Features

  • Pressing 8 or F8 disables the Early Launch Anti-Malware Driver, a Windows 10/8 feature that allows antivirus software to launch a driver before third-party drivers to scan for malware.

System Failure Handling

  • Pressing 9 or F9 disables Automatic Restart on System Failure, preventing Windows from rebooting when it encounters a system failure.

Accessing System Restore

  • System Restore can be accessed from the Windows RE Advanced options screen
  • System Restore can be accessed from the Windows 7 System Recovery Options screen
  • System Restore can be accessed within Safe Mode
  • System Restore can be accessed using the rstrui command in a command prompt

Limitations of System Restore

  • System Restore may cause loss of Windows updates
  • System Restore may cause loss of updates to anti-malware software
  • System Restore may require reinstallation of hardware devices and apps

Situations Where System Restore Won't Help

  • System Restore is ineffective when the file system is corrupted
  • System Restore is ineffective when the registry is corrupted

Windows RE Command Prompt

  • Used when graphical interface is missing or corrupted
  • Useful for running specific commands to fix problems when Windows won't start
  • Provides administrator privileges and full read and write access to all files on all drives

Accessing Windows RE Command Prompt

  • Accessible from Windows 10/8 Advanced options screen
  • Accessible from Windows 7 System Recovery Options screen

Scene Description

  • A brown bear is eating noodles with chopsticks.
  • A white panda bear is standing beside the bear, holding a cup of boba tea and gazing at the bear with heart eyes, indicating admiration or affection.

Kitchen Setting

  • The scene takes place in a kitchen where the bear and panda are located.
  • A bowl of noodles is placed on the table in front of the bear.
  • A cutting board with vegetables is positioned in front of the panda.

Visual Elements

  • A small chalkboard is suspended above the panda, with an arrow pointing to it, suggesting a potential menu or recipe display.

Image Details

  • The image is titled "Bubu & Dudi's World" at the bottom, indicating the name of the setting or scene.

Managing Data Files and System Files in Windows RE

  • Use SFC or DISM commands to restore critical Windows system files
  • Manage data and system files using the following commands:
    • cd for navigating directories
    • copy for duplicating files
    • rename for changing file names
    • delete for removing files
  • Restore registry files using backups saved in the RegBack folder
  • Reboot the system after each fix to verify if the problem is resolved
  • Utilize commands from Table 6-2 to restore registry files

Command Prompt in Windows RE

  • c: command makes drive C: the current drive with the default directory set to root.

Directory Navigation

  • dir command examines the contents of the current drive, defaulting to drive C: if not specified.
  • cd \windows\system32\config command makes the Windows registry folder the current folder.

Registry File Renaming

  • ren command renames registry files, including:
    • default to default.save
    • sam to sam.save
    • security to security.save
    • software to software.save
    • system to system.save

Registry Backup

  • cd regback command makes the registry backup folder the current folder.
  • copy system c:\windows\system32\config command copies the System hive from the backup folder to the registry folder, recommended for hardware problems before rebooting.

Troubleshooting Software Problems in Windows RE

  • When encountering software problems in Windows RE, a possible solution is to copy the Software hive to the registry folder and then reboot.
  • If the problem persists, try copying all five hives to the registry folder and reboot.
  • The five hives that can be copied to the registry folder are:
    • Software
    • System
    • Default
    • SAM
    • Security

Repairing Hard Drive File Systems and Partitions

  • Use chkdsk /r to repair file systems on hard drives
  • Utilize diskpart to manage hard drives, including creating and modifying partitions and volumes

Enabling Networking in Windows RE

  • Networking is not enabled by default in Windows RE command prompt
  • Run wpeinit to enable networking in Windows RE command prompt

Repairing Boot Files and BCD

  • Use bootrec to repair Boot Configuration Data (BCD) and boot sectors
  • Utilize bcdedit to manually edit the BCD
  • Run bootsect to repair dual boot systems

The Command Prompt in Windows RE

  • The bootrec /scanOS command scans the hard drive for Windows installations not stored in the Boot Configuration Data (BCD).
  • The bootrec /rebuildBCD command scans for Windows installations and rebuilds the BCD.
  • The bootrec /fixboot command repairs the boot sector of the system partition.
  • The bootrec /fixmbr command repairs the Master Boot Record (MBR) for hard drives using the MBR partitioning system.
  • The bcdedit /enum command displays the contents of the BCD.

Options to Reinstall Windows

  • When repair efforts fail, reinstalling Windows is the next step.
  • Options for reinstalling Windows are listed below, from least to most intrusive:

Reinstallation Options

  • Windows 10/8 Previous Version: Restore to a previous version of Windows.
  • Windows 10 Repair Upgrade: Upgrade Windows while keeping files and settings intact.
  • Windows 10 Fresh Start: Reinstall Windows, removing applications and settings, but keeping personal files.
  • Windows 10 Reset: Reinstall Windows, removing all files, applications, and settings.
  • Windows 8 Refresh: Reinstall Windows, removing applications and settings, but keeping personal files.
  • Apply a Windows 10/7 System Image: Restore Windows from a system image.
  • Windows 8 Reset: Reinstall Windows, removing all files, applications, and settings.
  • Install from OEM Recovery Partition: Reinstall Windows from the OEM recovery partition.
  • Windows 10/8/7 Clean Install: Reinstall Windows from setup media, erasing all data.

Windows 10 Update Cycle

  • Minor updates to Windows 10 are distributed on the second Tuesday of every month.
  • Major updates, known as versions, are released once or twice a year.

Reverting to a Previous Version

  • If a new version is causing issues, you can revert to the previous version.
  • Reversion is possible if:
    • The new version was installed within the last 10 days.
    • You have not reset your computer during this timeframe.
    • The Windows.Old folder has not been deleted.

Rolling Back Windows Updates

  • There are two ways to roll back Windows updates: from the Windows desktop and from Windows RE.
  • To roll back from the Windows desktop:
    • Open the Settings app
    • Click Update & security
    • Click Recovery
    • Under "Go back to the previous version of Windows 10," click Get started
  • To roll back from Windows RE:
    • The option is available on the Advanced options screen in Windows RE
    • Use this method when a new version has caused the system to fail to start

Windows 10 Repair Upgrade

  • A repair upgrade is a non-destructive installation of Windows 10 over an existing Windows installation, preserving existing data, apps, and settings.

Preparing for a Repair Upgrade

  • Create Windows setup media on DVD or USB, or save an ISO file on the local hard drive.
  • Ensure full boot capability into Windows 10 before proceeding.
  • Backup all data as a precautionary measure, despite the repair upgrade's protective nature.
  • Collect product keys for all installed apps to facilitate easy reinstallation if needed.

Windows 10 Fresh Start

  • Performs a clean installation of the latest version of Windows 10, removing manufacturer bloatware

What is Installed, Kept, and Not Kept

  • Installed: latest generic copy of Windows, free from manufacturer bloatware
  • Kept:
    • User accounts
    • User settings
    • Personal data
    • Some Windows settings
    • Microsoft apps natively integrated in Windows
    • Microsoft store apps installed by the computer manufacturer
  • Not Kept:
    • All apps, except those stated above
    • Manufacturer drivers
    • OEM system files

Post-Fresh Start

  • A list of removed apps is displayed on the desktop after the Fresh Start completes

Windows 10 Fresh Start Installation

  • Ensure internet connection and sufficient storage space before proceeding with the installation
  • Access the Fresh Start feature through the Settings app, specifically in the Update & Security section
  • Locate the Recovery option to find the More Recovery Options section
  • Click on Learn how to start fresh with a clean installation of Windows to access the Fresh Start page
  • Confirm the decision by clicking Yes to proceed to the Fresh Start page
  • Initiate the Fresh Start installation process by clicking Get Started

Windows 10 Reset

  • Windows 10 reset allows users to keep: • User accounts • Some Windows settings • All personal data files
  • What is removed during a reset: • Third-party apps • Third-party drivers
  • Some Windows settings changes will be lost during a reset
  • Microsoft account users can opt to have many Windows settings automatically resynced to the device

Recovering Windows using a System Image

  • To recover Windows 10/8 using a system image file, reboot the computer into Windows RE, navigate to the Advanced options screen, and select System Image Recovery
  • For Windows 7, select System Image Recovery on the System Recovery Options screen

OEM Factory Recovery Partition

  • Laptops and brand-name desktops often have a recovery partition on the hard drive that contains:
  • A copy of the OS build
  • Device drivers
  • Diagnostics programs
  • Preinstalled applications
  • The recovery partition may be hidden or visible
  • To access the recovery tools stored on the recovery partition:
  • Check the manufacturer's website for instructions
  • Look for a message at the beginning of the boot process
  • If the recovery partition is corrupted or nonexistent:
  • Download recovery media from the manufacturer's website to create a: + Bootable USB flash drive + Bootable DVD

Installing Windows Over the Network

  • Boot the computer to the network to begin the installation process
  • The computer loads Windows PE from the deployment server
  • Enable PXE Support in the BIOS/UEFI setup to allow the computer to boot to the network
  • The computer boots to the Preboot Execution Environment (PXE)
  • PXE searches for a server to provide Windows PE and the deployment image

Troubleshooting Windows Startup Problems

  • Follow a structured approach when troubleshooting startup issues: interview the user, back up crucial data, research error messages, and identify recent changes that may have caused the problem.
  • Identify the source of the problem before choosing a troubleshooting tool to use.
  • Select the least invasive tool that can still effectively fix the issue.

Important Data on the Hard Drive

  • Before proceeding, always ask if there is important data on the hard drive that has not been backed up.

Data Recovery Options

  • If data is lost or corrupted, utilize Windows built-in tools to recover data.
  • Use third-party software to recover data in case of loss or corruption.
  • If all else fails, consider commercial data recovery services.

Data Transfer Methods

  • Use a SATA-to-USB converter kit to connect a desktop or laptop hard drive to a USB port on a working computer.
  • Utilize File Explorer or Windows Explorer to copy data from the hard drive to other media.

Windows Startup Errors

  • Windows startup errors can be caused by hardware, device drivers, services, applications, or Windows itself.
  • Startup error messages often appear on a black screen.

Common Startup Error Messages

  • No OS found
  • A disk read error occurred
  • Invalid boot disk
  • Hard drive not found
  • Disk boot failure
  • No boot device found

Resolving Slow Profile Load Issues

  • Utilize the Windows Troubleshooting applet to identify and fix problems
  • Ensure all Windows updates are applied to prevent compatibility issues
  • Run the sfc/scannow command to scan and repair corrupted system files
  • Reduce the number of startup items to minimize clutter and improve performance
  • Apply a previously created system restore point to revert to a stable state
  • For Windows 10, perform a repair upgrade to fix underlying issues
  • Create a new user profile as a last resort to start with a clean slate

Error Messages and Problems

  • Blue screen of death (BSOD) errors are also known as stop errors
  • Stop errors occur when processes running in kernel mode encounter a problem and Windows must stop the system to prevent further damage
  • Causes of stop errors include:
    • Corrupted registry
    • Missing or damaged system file
    • Missing or damaged device driver
    • Bad memory
    • Corrupted or failing hard drive
  • Stop errors can occur at two stages:
    • During startup
    • After startup

Error Messages and Problems

  • Blue screen of death (BSOD) errors are also known as stop errors
  • Stop errors occur when processes running in kernel mode encounter a problem and Windows must stop the system to prevent further damage
  • Causes of stop errors include:
    • Corrupted registry
    • Missing or damaged system file
    • Missing or damaged device driver
    • Bad memory
    • Corrupted or failing hard drive
  • Stop errors can occur at two stages:
    • During startup
    • After startup

Error Messages and Problems

  • When encountering a stop error (blue screen):
    • Search Microsoft websites for the error to find possible solutions
    • Disconnect any peripheral devices that might be causing the issue
    • Reboot the system and read the information in the Windows error message box or bubble
    • Enable boot logging to gather more information about the error
    • Try restarting the system multiple times to see if the issue resolves
    • If the problem persists, launch Windows RE and restart Windows in Safe mode with Networking to troubleshoot the issue

Errors With Hardware and Device Drivers

  • When a blue screen error occurs and a specific device or device driver is identified as the cause:
    • If the driver was recently updated and Safe Mode is accessible, roll back the driver using Device Manager.
    • If the driver update coincided with a Windows update, consider reverting to a previous version of Windows.
    • A subsequent Windows update might resolve the issue.
    • Uninstall the problematic device using Device Manager as a troubleshooting measure.

Troubleshooting Blue Screen Errors

  • If the blue screen error message does not identify a specific device but names a program file:
  • Locate the program file using File Explorer or Windows Explorer
  • Check the file's properties to determine its purpose
  • Reinstall the device or program that caused the problem

Troubleshooting Windows Startup Issues

  • If Windows cannot start in Safe mode:
  • Use Windows RE to open a command prompt window
  • Back up the registry
  • Open the Registry Editor
  • Disable the problematic service or driver by changing the Start value to 0x4
  • Reboot the system

Errors With Services or Other Programs

  • Check the Administrative Events log in Event Viewer for critical errors and warnings
  • Use Task Manager to stop the problematic service or program
  • Disable the service from launching at startup using Task Manager or the Service console
  • Update Windows to resolve potential issues
  • Perform a clean boot or Safe boot to isolate the problematic service or program
  • Undo recent system changes to troubleshoot the issue

Troubleshooting Tools

  • Run the Memory Diagnostics tool to check for memory-related errors
  • Use the chkdsk /r command to scan the hard drive for errors

Windows is Corrupted

  • Missing Boot Configuration Data: Use the bootrec /rebuildBCD command to resolve the issue.
  • Improper Shutdown: To troubleshoot,
  • Check Event Viewer for clues
  • Apply Windows updates
  • Verify memory with Memory Diagnostics
  • Use chkdsk /r to check the hard drive for errors
  • No graphics appear:
  • Try using a different monitor or onboard video port
  • Launch a command prompt in Windows RE and perform a System Restore

System Startup

  • When a system is turned on, the startup BIOS/UEFI takes control, performing a Power-On Self-Test (POST) to examine hardware components and find an Operating System (OS) to load.

Windows Startup Management

  • Windows startup is managed by the Windows Boot Manager.

Pre-Problem Preparation

  • Before a problem occurs, ensure:
    • Good backups of user data exist
    • A system image is created
    • The F8 key is configured at startup
    • Recovery boot media is created

Windows RE Startup Options

  • Windows Recovery Environment (RE) can be started from:
    • Within Windows
    • The Windows setup DVD
    • A recovery drive
    • A system repair disc

Startup Troubleshooting Tools

System Repair

  • Startup repair

Advanced Startup

  • Startup settings

System Restore and Safe Mode

  • System Restore
  • Safe Mode

Command-Line Tools

  • Enabling boot logging
  • System File Checker (SFC)
  • Check Disk (chkdsk)
  • DiskPart
  • BootRec
  • BootSect

Windows Reinstallation Options

  • Windows 10 previous version can be used to reinstall Windows.
  • A repair upgrade can be used to reinstall Windows.
  • Fresh Start can be used to reinstall Windows.
  • A reset can be used to reinstall Windows.

Data Recovery

  • A hard drive containing valuable data that won't boot may be recoverable by installing it in another system.

Troubleshooting Stop Errors

  • Research stop errors online using the error title and error number listed on the blue screen.

Troubleshooting System Hangs

  • Improper shutdowns are likely hardware related.
  • Boot into Safe Mode and disable the device or service to troubleshoot system hangs caused by a device or service.

Make Your Own Quizzes and Flashcards

Convert your notes into interactive study material.

Get started for free

More Quizzes Like This

Printer Troubleshooting Quiz
5 questions

Printer Troubleshooting Quiz

ComplimentaryPelican avatar
ComplimentaryPelican
BIOS Quiz
5 questions

BIOS Quiz

UsableSagacity avatar
UsableSagacity
Understanding Master Boot Record (MBR)
18 questions
Use Quizgecko on...
Browser
Browser