ERD Commander 2000 User’s Guide Winternals Software LP 3101 Bee Caves Road, Suite 150 Austin, Texas 78746 (512) 330-9130 (512) 330-9131 Fax www.winternals.
ERD Commander 2000 Table of Contents 1 Introduction................................................................................... 1 2 Overview of Use............................................................................ 2 3 ERD Commander 2000 Setup ...................................................... 4 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 4 Starting ERD Commander 2000................................................. 16 4.1 4.2 5 Booting Up ..............................................
ERD Commander 2000 6.20 6.21 6.22 6.23 6.24 6.25 6.26 6.27 6.28 6.29 6.30 6.31 6.32 MKDIR/MD...................................................................................34 MORE ..........................................................................................34 MOVE ..........................................................................................34 PASSWORD ................................................................................35 REG/REGEDIT ................................
ERD Commander 2000 1 Introduction When problems arise in Windows 3.1 or Windows 95 that render a system unbootable, there is always the possibility of booting off of a DOS floppy disk so that the drives of the machine can be accessed for repair and salvage. This boot-floppy approach to system recovery is often the only way to correct problems that even "automatic" system repair utilities fail to correct. Previously, Windows NT/2000 administrators went without this recovery option.
ERD Commander 2000 2 Overview of Use ERD Commander 2000 can be used as a tool in solving problems such as: Enabling and Disabling Services and Drivers You can list and modify the start types of a system’s drivers and services with ERD Commander 2000. This makes it easy to disable a driver or service that, because of a bug or misconfiguration, is preventing a system from booting. Editing Registry Keys A number of Windows NT/2000 boot problems are the result of misconfigured Registry values.
ERD Commander 2000 Regaining Access to a System That You’ve Been Locked Out Of ERD Commander 2000 allows you to list the accounts for a Windows NT/2000 system and to change their passwords, including Administrator accounts. Copying Important Files off of a Dead System Compress and copy important files into CAB files for transfer to another system by floppy disk or other removable media using ERD Commander 2000.
ERD Commander 2000 3 ERD Commander 2000 Setup 3.1 Requirements ERD Commander 2000 can be configured to boot from a set of floppy disks, from a CD-ROM (which you burn yourself), or from the system’s hard disk. All three types of ERD Commander 2000 installations require the Microsoft Windows NT© 4.0/2000 installation CD-ROM (Server or Workstation). A Windows NT/2000 system with a diskette drive and approximately 1MB of hard disk space are also required.
ERD Commander 2000 3.2 Setup Overview You build an ERD Commander 2000 installation by running the ERD Commander 2000 Setup Wizard, which guides you through the setup process. (See Figure 3-1) Figure 3-1 3.3 Installation Media The ERD Commander 2000 Setup Wizard will prompt you for your preferred installation method. If you elect to boot from floppy disks you will require four blank diskettes if you are creating an installation for Windows NT 4.
ERD Commander 2000 www.goldenhawk.com). Creating a bootable CD-ROM will allow you to boot ERD Commander 2000 more quickly than when booting from floppy disks. It is also a convenient means of creating a disaster recovery CD-ROM on which you can place system images or other files that you might want to use to recover or restore a system. Finally, you can install ERD Commander 2000 directly on the hard disk of a system.
ERD Commander 2000 3.4 Installation Files ERD Commander 2000 requires files that are shipped as part of the Windows NT 4.0 or Windows 2000 installation CD-ROM. You must provide the path to the \I386 directory of the installation CD-ROM, or a directory containing these files. (See Figure 3-3) If you intend to use ERD Commander 2000 to repair systems running Windows NT 4.0 you should use a Windows NT 4.0 installation CD-ROM.
ERD Commander 2000 3.5 FAT32 Support If you are creating a Windows NT 4.0 installation and installing onto floppy diskettes, you have the option of including support for accessing FAT32 volumes. FAT32 volumes are used by Windows 95/98 and Windows 2000, but are not normally accessible from Windows NT 4.0. (See Figure 3-4) If you are creating a CD-ROM or hard disk installation then support for FAT32 is always enabled automatically.
ERD Commander 2000 3.6 Service Pack Upgrade Using Service Pack 4 or higher will enable ERD Commander 2000 to access IDE drives that are 8GB and larger (see Q197667). Service Pack 4 also includes an updated NTFS driver that allows ERD Commander 2000 to access NTFS volumes on Windows 2000 systems. If you have the Service Pack on CD-ROM you can simply browse to the I386 directory of the CD-ROM.
ERD Commander 2000 3.7 OEM Drivers If you work with systems that use SCSI adapters that Windows NT/2000 does not natively support (i.e., hardware that requires additional drivers to be added for Windows NT/2000 to use it) then you can add those OEM drivers to ERD Commander 2000 .To add an OEM driver, simply enter the path the driver (the driver file should end in. SYS) or browse to it, and press the Add button.
ERD Commander 2000 3.8 Password Protection Because ERD Commander 2000 gives its user so much power in accessing systems, you have the option of requiring a password before ERD Commander 2000 will run. Using a password is especially important when you have ERD Commander 2000 installed on your hard disk, since otherwise anyone will be able to access files on your system. (See Figure 3-7) When an ERD Commander 2000 installation requires a password, the user is given five attempts to enter it correctly.
ERD Commander 2000 3.9 File Installation The final phase of installation is copying the ERD Commander 2000 files to the installation point: floppy disk, CD-ROM image directory, or hard disk. 3.9.1 Floppy Disk Installation If you are creating a floppy disk installation you will be prompted for each floppy disk in turn. Four blank diskettes are required if you are creating an installation for Windows NT 4.0, and five blank diskettes are required if you are creating an installation for Windows 2000.
ERD Commander 2000 3.9.2 CD-ROM Installation You must have a CD-Writer and appropriate CD-ROM burning software in order to create a bootable CD-ROM. The software must support the creation of bootable CD-ROMs that use a Custom boot record. (One choice is Golden Hawk’s CDRWIN). Creating a bootable CD-ROM will allow you to boot ERD Commander 2000 more quickly than when booting from floppy disks.
ERD Commander 2000 Figure 3-9 Winternals Software LP Page 14
ERD Commander 2000 3.9.3 Hard Disk Installation You can also choose to install ERD Commander 2000 directly on the hard disk of a system. When installed on the hard disk, you will have the option to run ERD Commander 2000 each time your system boots (an entry for it is added to your BOOT.INI file). If you are creating a hard disk installation then the ERD Commander 2000 files will be copied to the \ERDCBOOT directory of your boot partition (the partition containing your BOOT.INI file), and your BOOT.
ERD Commander 2000 4 Starting ERD Commander 2000 4.1 Booting Up After the disks are loaded, a stripped–down version of Windows NT/2000 will start, displaying the familiar boot–time Blue Screen that presents the NT/2000 version number, system memory size, and number of processors present. ERD Commander 2000 then starts automatically and enters a command–line environment nearly identical to the one Windows NT/2000 implements in Command-Prompt. 4.
ERD Commander 2000 5 The Command-line Environment 5.1 Overview Once ERD Commander 2000 boots, a stripped-down version of Windows NT/2000 will start, displaying the familiar boot-time Blue Screen that presents the Windows NT/2000 version number, system memory size, and number of processors present. ERD Commander 2000 then starts automatically and enters a command-line environment nearly identical to the one Windows NT/2000 implements in Command Prompt.
ERD Commander 2000 ♦ RENAME ♦ DELETE ♦ COPY and XCOPY 5.2 Command-line Editing The command-line editing capabilities of ERD Commander 2000 are very similar to those supported by Windows NT/2000’s command-line processor. Below is a reference of recognized special keys. ESC Resets the input line. HOME Moves the cursor to the start of the input line. END Moves the cursor to the end of the input line.
ERD Commander 2000 6 The Command Set The command set of ERD Commander 2000, like its command-line editing features, is similar to that of Windows NT/2000. The command set includes all standard file-related commands, and virtually all support the same options as their Windows NT/2000 counterparts. This list shows the full set, with each command linked to its documentation.
ERD Commander 2000 ERASE Deletes one or more files. EXIT Quits ERD Commander 2000 and reboots the system. EXPAND Expands one or more files. FTDISK Initializes fault tolerant disk support. HELP Provides Help information for ERD Commander 2000 commands. KEYBOARD Allows the user to select an alternate keyboard layout. LOGFILE Starts or stops a log file. MAP Displays drive letter to partition mapping. MD Creates a directory. MKDIR Creates a directory. MORE Displays the contents of a file.
ERD Commander 2000 REN Renames a file or files. RENAME Renames a file or files. RESTORE Restores the registry files stored on an Emergency Repair Disk. RMDIR Removes a directory. SERVICE Displays and modifies service and driver startup settings. TYPE Displays the contents of a file. VER Displays ERD Commander 2000 version number. VERSION Displays ERD Commander 2000 version number. XCOPY Copies files and directory trees.
ERD Commander 2000 6.1 ACCESS Gives Everyone full access to directories or files. Syntax ACCESS [[drive][path]filename] [/S] Switches /S Processes files in all subdirectories in the specified path This command is a custom ERD Commander 2000 command. It is possible to render a Windows NT/2000 system unbootable by inadvertently applying security restrictions to NTFS files or directories that prevent NT/2000 from loading files it requires.
ERD Commander 2000 6.2 ATTRIB Displays or changes file attributes. Syntax ATTRIB [+R | -R] [+A | -A] [+S | -S] [+H | -H] [drive:][path]filename] [/S] Switches + Sets an attribute - Clears an attribute R Read-only file attribute A Archive file attribute S System file attribute /S Processes files in all subdirectories in the specified path 6.3 BATCH Executes an ERD Commander 2000 batch file.
ERD Commander 2000 6.4 CD/CHDIR Displays the name of or changes the current directory. Syntax CHDIR [drive:][path] CHDIR[..] CD [drive:][path] CD[..] Notes .. Specifies that you want to change to the parent directory Type CD drive: to display the current directory in the specified drive. Type CD without parameters to display the current drive and directory. 6.5 CHKDSK Checks a drive for errors and corrects them.
ERD Commander 2000 6.7 COMPRESS Compresses files or directories. Syntax COMPRESS [/P] [/S] [/F] source [..] destination Switches /P Preserve path information. This option ensures that directory information is preserved /S Recurse subdirectories /F Limit output file size to 1.44 MB Source Specifies one or more files and/or directories to be compressed Destination Specifies the output file. ('.CAB' will be appended to the name automatically.
ERD Commander 2000 6.8 COPY Copies one or more files to another location. Syntax COPY source [destination] Notes source Specifies the file or files to be copied destination Specifies the directory and/or filename for the new file(s) Wildcards can be used in both the source and destination file name specifications.
ERD Commander 2000 6.9 DEL/ERASE Deletes one or more files.
ERD Commander 2000 6.10 DEVICE Displays and modifies device driver startup settings. Syntax DEVICE DEVICE[device] DEVICE[device] [start] Notes device Specifies the name of the device to display start Specifies the new start type. Can be on of:. boot Start at system boot system Start at system initialization auto Start at Win32 startup manual Manually start disabled Do not start The REGISTRY command must be used first to initialize Registry support.
ERD Commander 2000 6.11 DIR DIR displays a list of files and subdirectories in a directory.
ERD Commander 2000 6.12 EDIT Starts the file editor. Edits the specified file. If file does not exit, it is created. Syntax EDIT [drive:][path]filename. Use the arrow keys and page-up/page-down to move around the file. Press the shift key while moving the cursor to mark text.
ERD Commander 2000 6.14 EXPAND Expands one or more files that are in compressed format. Syntax EXPAND Source [Target] Notes Source Specifies the path and name of the file(s) to expand. Target Specifies the path and name to expand file(s) to. If no Target is specified the source file will be expanded into the current directory and will have its name reflect the original un-compressed file’s name. For example, if you decompress a file called UFAT.
ERD Commander 2000 6.17 KEYBOARD Allows the user to select an alternate keyboard layout. Syntax KEYBOARD [country] If country is provided, the appropriate keyboard layout is loaded. Otherwise, a list of supported layouts is printed, and the user is prompted to select one. Supported countries are U.S., Germany, and Japan. 6.18 LOGFILE Starts or stops a log file. Syntax LOGFILE [filename] A log file contains a transcript of all commands and output produced while the log file is open.
ERD Commander 2000 6.19 MAP Displays drive letter to partition mappings. Syntax MAP This command’s purpose is to help you determine the drive letter assignments ERD Commander 2000 has made. ERD Commander 2000 does not rely on Disk Administrator drive letter mappings because there may be multiple Windows NT/2000 installations on the hard disks, each with their own mappings. For each drive you’ll see the device name, volume label, file system type and drive size.
ERD Commander 2000 6.20 MKDIR/MD Creates a directory. Syntax MKDIR [drive:]path MD [drive:]path MKDIR creates any intermediate directories in the path, if needed. For example, assume \a does not exist then: Syntax 6.21 MKDIR a\b\c is the same as MKDIR \a mkdir \a\b mkdir \a\b\c MORE Displays the ASCII contents of a file. Syntax MORE filename The MORE command automatically pauses after each screen of data.
ERD Commander 2000 6.23 PASSWORD Changes the password of an account. Syntax PASSWORD PASSWORD [account] [password] Notes Account Specifies the name of the account to change Password Specifies the new password for the account The REGISTRY command must be used to load the Registry for a Windows NT/2000 installation on a hard drive before PASSWORD will work. Typing PASSWORD with no parameters results in the list of local accounts present on the system to be printed.
ERD Commander 2000 6.24 REG/REGEDIT Displays or modifies an entry in the HKEY_LOCAL_MACHINE\System registry key. Syntax REGEDIT QUERY key [/S] REGEDIT ADD key [class] REGEDIT QUERY key\value REGEDIT ADD key\value=data [type] REGEDIT DELETE key[\value] [/F] REGEDIT FIND key string [/D] Notes key Specifies the location of a registry key. They key name should begin with SYSTEM to specify the HKEY_LOCAL_MACHINE\SYSTEM key value Specifies the name of a value within a key.
ERD Commander 2000 The QUERY, ADD, DELETE, and FIND commands may be abbreviated Q, A, D, and F respectively. When specifying hexidecimal numbers, you may use a format like 01 02 03 04 to specify bytes, 0001 0002 0003 to specify words, etc. 6.25 REGISTRY/REGLOAD Loads the Registry from a Windows NT/2000 installation on a hard drive.
ERD Commander 2000 6.27 RESTORE Restores the registry files stored on an emergency repair disk Syntax RESTORE [erd-path] [system-path] Notes erd-path Directory containing the emergency repair disk files. system-path Directory containing your Windows NT/2000 installation The existing registry files are renamed before being replaced. For example, the command: RESTORE a:\c:\winnt Is equivalent to the following sequence of commands.
ERD Commander 2000 6.28 RMDIR/RD Removes (deletes) a directory. Syntax RMDIR [/S] [/Q] [drive:]path RD [/S] [/Q] [drive:]path Switches 6.29 /S Removes all directories and files in the specified in addition to the directory itself. Used to remove a directory tree /Q Quiet mode, do not ask if ok to remove a directory tree with /S SERVICE Displays and modifies service startup settings.
ERD Commander 2000 6.30 TYPE Displays the ASCII contents of a file. TYPE filename. The TYPE command displays the contents of a file. You can pause the output at any time by pressing CTRL-S, and abort the output by pressing CTRL-C. Also see the MORE command. 6.31 VERSION/VER Displays ERD Commander 2000 's version number.
ERD Commander 2000 6.32 XCOPY Copies files and directory trees.
ERD Commander 2000 7 Troubleshooting Can I run external programs or commands once I've booted with ERD Commander 2000? Because ERD Commander 2000 runs before the Win32 subsystem begins executing, it is not possible to run any programs other than those built into ERD Commander 2000. XCOPY doesn't seem to work correctly for me. You must specify the /H switch to copy system and hidden files, and the /R switch if you wish to overwrite read-only files. Why do I get a FAT32.
ERD Commander 2000 8 Technical Support ♦ If you encounter a problem while using ERD Commander 2000 that requires technical support, please e-mail us at: support@winternals.com ♦ You can also view our Frequently Asked Questions and download free updates from our web site at: http://www.winternals.
ERD Commander 2000 Appendix: Creating a Golden Hawk Bootable CD-ROM The following steps guide you through the configuration of Golden Hawk's CDRWIN product for creating a bootable ERD Commander 2000 CD-ROM. Obtaining CDRWIN Golden Hawk (www.goldenhawk.com) offers a full-feature demo version you can download free of charge that is sufficient for creating bootable CD-ROMs. Configuring CDRWIN When you run CDRWIN you are presented with the following window.
ERD Commander 2000 Figure A-2 First, enter the path to the directory in which you stored ERD Commander 2000’s CD-ROM files, either by typing it in or by dragging the folder from Explorer, into the File Backup List. Next, enter the name of the CD image file you will create in the Image Filename entry in the ISO9660 Image File area. Note that the name you assign is not important and that you will need approximately 10 MB of free space on the drive where you store the image file.
ERD Commander 2000 Figure A-3 Click on the Bootable Disc tab and configure the dialog box as shown in Figure A-4: ♦ Check Make Bootable Disc ♦ Set Media Emulation Type to Custom ♦ In the Image File Name field enter the path to the BOOTSECT.
ERD Commander 2000 Figure A-4 Dismiss the dialog by clicking OK, insert a blank CD-R disk into your CD burner, and then press Start on the right side of the File Backup and Tools dialog. Once your ERD Commander 2000 CD is created and you use it to run ERD Commander 2000 from CD on unbootable systems that support booting from CD-ROMs.
