|
|
 |
|
|
|
Microsoft® Windows® XP Professional Resource Kit, Second Edition
|
|
|
Author |
|
The Microsoft Windows Team
|
|
|
Pages |
1744
|
|
Disk |
1 Companion CD(s)
|
|
Level |
Advanced
|
|
Published |
06/11/2003
|
|
ISBN |
9780735619746
|
|
ISBN-10 |
0-7356-1974-3
|
|
Price(USD) |
$59.99
To see this book's discounted price, select a reseller below.
|
|
|
|
|
|
|
|
|
Index
Numbers
3DES encryption algorithm, 771, 815-816, 871
8.3 short file names
converting to long file names, 99
FAT volumes, 616
NTFS, 597, 609
Windows XP Professional, 622-623
56-bit DESX encryption algorithm, 871
64-Bit Edition. See Windows XP 64-Bit Edition
802.1x, 328-331, 877
802.11
architecture, 324-325
authentication, 326-327
encryption, 327-328
open system authentication, 326
overview, 323
security, 326-331, 874-878
shared key authentication, 327
802.11a, 324
802.11b, 324
61883 Protocol, 383
A
AC-3 audio, 433
Accelerated Graphics Port (AGP), 385, 441
access control
access tokens, 701
ACE, 724
ACL. See ACL (access control list)
anonymous logons, managing, 736
applying to new objects, 725-728
auditing Account Management, 758
auditing and analyzing, 754-764
auditing privilege use, 757-758
auditing system events, 702
Cacls.exe, 732
configuring and analyzing operations, 763-764
DACL, 725
default permissions, 728-732
default user rights for clean-installed workstations, 734-735
default Write access permissions for Users group, 734
deployment strategies, 28-30
discretionary access to securable objects, 702
enabling auditing policies, 755-758
Event Viewer, 758-759
Guest accounts, 737-739
inheritance, 701-702, 726
key concepts, 702-705
local computer policy databases, 760-763
Local Security Policy. See Local Security Policy
multi-user access to encrypted files, 797-801
network, 1059
network authentication management, 736-739
overview, 699-700
ownership permissions, 726-728
permission inheritance, 702, 726
permissions overview, 703
planning, 706-707
rights, 703
Secedit.exe, 763-764
Security Configuration and Analysis snap-in, 747, 759-763
security configuration databases, 760-763
security context, 700
security descriptors, 701, 705
security groups. See security groups
security policy overview, 739-740
security principals, 700
security settings, 702
security templates. See security templates
sharing files and folders, 738
SID, 700
Software Restriction Policies, 740-742
system event auditing, 702
user accounts. See user accounts
user rights, managing using security groups, 733
user-based authorization, 703-705
validating requests for access, 704
access control entries (ACE), 724
access control lists. See ACL (access control list)
access tokens, 658-659, 701
accessibility
assistive technology, 1560-1561
automating logon, 1537
ClickLock, 1555
cognitive disabilities, 1557-1559
color schemes, 1545-1546, 1559
configuring accessibility features, 1539-1540
contrast settings, 1559
cursor blink-rate options, 1559
customizing computers, 1536-1539
customizing fonts, 1544
deployment planning, 36-37
Fast User Switching, 1537
FilterKeys, 1552-1553, 1558
Group Policy, 1536
hearing impairments, 1556-1557
insertion point indicator blink rate, 1546
keyboard audio cues, 1542
keyboard shortcuts, 1548-1554
keyboard-only input, 1554-1555
Magnifier, 1543-1544
mobility impairments, 1546-1555
mouse options, 1554-1555
mouse pointers, 1546
mouthstick typing, 1551-1552
Narrator, 1542
NetMeeting, 1557
one-finger typing, 1551-1552
on-screen keyboards, 143-144
overview, 1535
seizure disorders, 1559
SerialKeys, 1555, 1558, 1561
setting options by disability type, 1540-1541
ShowSounds, 1556
size schemes, 1545-1546
Snap To, 1559
sound schemes, 1546, 1559
SoundSentry, 1556
StickyKeys, 1551-1552
timing patterns, 1559
ToggleKeys, 1542, 1554
user profiles, 1536-1537
Utility Manager, 1538-1539
vision impairments, 1542-1546
Windows Explorer, 1538
Windows Installer, 1536
Accessibility Wizard
Administrative Options setting, 1537
configuring accessibility features, 1539
shortcut keys, 1550
account authentication, 884, 894-895
account lockout policies, 688
account logon events, 1507-1510
Account Management, auditing, 758
account policies
Default Domain GPO, 686
Kerberos policies, 688
lockout policies, 688
password policies, 687
accounts
Administrator, 707
Guest, 708, 737-739
lockout policies, 688
policies. See account policies
users. See user accounts
ACE (access control entries), 724
ACL (access control list)
ACE, 724
applying access control to new objects, 725-728
Cacls.exe, 732
default permissions, 728-732
defined, 702
viewing, 721-724
working with, 721
ACPI (Advanced Configuration and Power Interface)
BIOS compatibility, 292-293
firmware, checking for compliance, 1130-1132
HAL, 1132
Plug and Play detection, 365
power management, 292-293
Active Directory
computer settings in Group Policy, 217
deployment planning, 7-8
desktop management overview, 211-212
desktop management using Group Policy, 219-230
desktop management using IntelliMirror, 214-219
DNS, 892-893
GPO overview, 220
GPO processing order, 221
Group Policy extensions, list of, 222
Group Policy-based software distribution, 217-219
IntelliMirror, implementing, 212-214
IntelliMirror overview, 212
interactive logon, 661
linking GPOs to OUs, 213-214
managing files and folders, 250, 272, 273
multilingual compatibility with objects, clients, and domain controllers, 174-175
printers, 464-467, 898
publishing, 897-898
refreshing Group Policy from command line, 229-230
RIS. See RIS (Remote Installation Services)
RSoP snap-in in Group Policy, 222
searching fields, 466
searching for computers, 273
searching locations, 466-467
security, 891
share publishing, 898
user data management using IntelliMirror, 214-215
user settings management using IntelliMirror, 216-217
Windows domain environments, 889-893
ActiveState ActivePerl, 1568
ActiveSync 3.0, 319
Add Hardware Wizard, 471
Add or Remove Programs, 1401
Add Printer Wizard
Active Directory, 464
local printers, 471
network printers, 469
printer pooling, 486
SNA, 474
Address Resolution Protocol (ARP), 830, 832
administrative templates
desktop management, 233-234
Group Policy, 223-225
Administrator accounts, 707
Administrators group
assigning object ownership, 727
disk quotas, 567
overview, 710
Administrators Tools Pack (ATP), 355
Advanced Configuration and Power Interface. See ACPI (Advanced Configuration and Power Interface)
Advanced Power Management (APM), 293-296
Advanced RISC Computing (ARC) paths, 1268
Advanced Security Settings dialog box
Auditing tab, 756
Effective Permissions tab, 723
overview, 560, 722
Owner tab, 727
Permissions tab, 726
Afd.sys, 842
AGP (Accelerated Graphics Port), 385, 441
AH (Authentication Header), 847
allocation unit (cluster) size option, 558
allocation units, recovering lost, 1161-1162
alternate IP Configuration, 969, 972
Anonymous Logon built-in security principal, 715
Anonymous users, 736
answer files
automatically converting FAT32 to NTFS, 99
creating manually, 87
creating using Setup Manager (Setupmgr.exe), 71
customizing language and regional options, 95-97
detecting video modes, 98
driver signing policies, 91
example for multiple languages, 164
[GuiRunOnce] options for automatic installations, 102-103
[GuiUnattended] options for multiple languages, 163
[GuiUnattended] options in MUI Pack, 166
language and regional settings, 160-164
presetting time zones, 98, 163
[RegionalSettings] options for multiple languages, 160-162
[RegionalSettings] options in MUI Pack, 165
RIS, 82-83
Ristndrd.sif, 82-83
setting passwords, 105-108
Sysprep.inf, 76-77, 117
[TapiLocation] options for multiple languages, 163
[Unattended] options in MUI Pack, 166
Unattend.txt. See Unattend.txt
Winnt.sif, 87
APIPA (Automatic Private IP Addressing)
choosing, 971
configuring, 974-976
overview, 969
APM (Advanced Power Management), 293-296
Apmstat.exe, 295
Apple Macintosh system interoperability, 1571-1573
AppleTalk Phase 2 Protocol Suite, 1571
application and service tools
boot logging, 1423-1424
Boot.ini Configuration Editor (Bootcfg.exe), 1423
Dependency Walker (Depends.exe), 1425
Device Manager. See Device Manager
DirectX Diagnostic Tool (Dxdiag.exe), 429, 1425-1428, 1471
Dr. Watson (DrWtsn32.exe), 1260, 1428-1429
Error Reporting service, 1259, 1331-1332, 1429-1430
Event Query (Eventquery.vbs), 1430
Event Triggers (Eventtriggers.exe), 1430
Event Viewer. See Event Viewer
Global Flags Editor (Gflags.exe), 1431
Group Policy. See Group Policy
Group Policy Results (Gpresult.exe), 1432
Group Policy Update (Gpupdate.exe), 1432
Kernel Debugger (Kd.exe), 1335, 1433
list of, 1420-1423
Memory Pool Monitor (Poolmon.exe), 1433
OCA Web site, 1434
Openfiles (Openfiles.exe), 1434
Performance snap-in (Perfmon.msc), 1434
Process and Thread Status (Pstat.exe), 1434
Program Compatibility Wizard, 1435-1436
Regedit.exe (registry editor), 1398, 1436-1438
RSoP snap-in, 1438
RunAs, 662-664, 1439
SC (Sc.exe). See SC (Sc.exe)
Services (Services.msc) snap-in, 1257, 1440
Shutdown Event Tracker, 1440-1442
System Configuration Utility. See System Configuration Utility (Msconfig.exe)
System Information (Msinfo32.exe), 1261, 1285, 1445-1448, 1470
Systeminfo (Systeminfo.exe), 1445
Task Kill (Tskill.exe), 1448
Task List (Tasklist.exe), 1449
Task Manager (Taskmgr.exe), 1253-1255, 1449
WinDbg Debugger (Windbg.exe), 1335, 1433
application compatibility, 14-18
application pools, 647
ARC (Advanced RISC Computing) paths, 1268
architecture
802.11, 324-325
DVD, 431-437
EFS, 770
WIA, 390
Windows XP 64-Bit Edition, 1528
archive attributes, 627
area codes, specifying, 163
ARP (Address Resolution Protocol), 830, 832
AS Exchange (Authentication Service Exchange), 682
ASR (Automated System Recovery)
backups, 642
considerations, 643
overview, 626, 641, 1169-1170, 1419-1420
restoring systems, 642-643
troubleshooting startup, 1279
ASR Wizard, 642
assigning
software to users and computers, 218-219
user rights, 689-690
assistive technology, 1560-1561
ATP (Administrators Tools Pack), 355
ATTEMPTED_WRITE_TO_READONLY_MEMORY Stop message, 1358
attrib command, 1408
audio decoder, 434
audio renderer, 434
Audit Boot Mode, 81, 117
auditing
See also security event messages
access control, 754-764
Account Management, 758
Application log, 758
audit policy, 695
disk quotas, 569
logon, 694-696
policies, 755-758
privilege use, 757-758
Security log, 758
system events, 702
System log, 758
troubleshooting, 694-696
Authenticated Users built-in security principal, 715
authentication
See also logon
802.11, 326-327
account authentication, 884, 894-895
auditing, 694-696
blank password restrictions, 675
challenge/response methods, 666-667
connections, 1058-1064
credentials, 656
credentials, managing, 674-685
deployment strategies, 27-28
interactive, 711, 714-717, 734-735
interactive logon process, 1058
IPSec, 850, 855
Kerberos V5 protocol. See Kerberos V5 protocol
logging on using domain credentials, 1059
LSA, 656
network, 736-739, 1059
NTLM protocol, 666-667
open system, 326
overview, 653-654
pass-through, 916
password management, 676-681
policies. See authentication policies
protocols, 664-665, 1060-1063
Remote Desktop, 351
security groups, 659
security principals. See security principals
shared key, 327
smart cards, 681-683
Stored User Names and Passwords, 677-679
troubleshooting, 694-696
validation, 656
Authentication Header (AH), 847
authentication policies
account lockout policies, 688
account policies, 686-688
Kerberos policies, 688
local policies, 689-694
overview, 685-686
password policies, 687
Authentication Service Exchange (AS Exchange), 682
authenticator, 668, 877
authorization. See access control
authorized private IP addresses, 968
Autochk.exe, 1155-1158
AutoComplete, 1557
AutoCorrect, 1557
Autodial, 1042
autologon, 683-685
Automated System Recovery. See ASR (Automated System Recovery)
automatic caching, 310
automatic detection and installation of local printers, 471
Automatic Private IP Addressing. See APIPA (Automatic Private IP Addressing)
Automatic Updates, 372, 1466
automatic wireless configuration, 333-336
automating installations
adding applications, 100
adding hardware device support, 88-95
answer files, creating manually, 87
answer files, creating using Setup Manager (Setupmgr.exe), 71
application installation programs, 103
automatically converting FAT32 to NTFS, 99
batch files, 104
Cmdlines.txt, 101-102
converting short file names, 99
customizing components and features, 88
customizing language and regional options, 95-97
customizing overview, 68-70
customizing tool list, 68
customizing tools overview, 71
detecting video modes, 98
distribution folders, 64-68
driver signatures, 91
driver signing policies, 91
Dynamic Update overview, 52-54
[GuiRunOnce] section of answer files, 102-103
HAL, 54, 90
hardware requirements, 63-64
installing operating systems. See installing operating systems
mass storage devices, 88-90
overview, 49-54
password setting, 105-108
Plug and Play, 92-95
preparing, 63-68
presetting time zones, 98
process overview, 50
RIS. See RIS (Remote Installation Services)
Setup, 99, 109-113
software requirements, 63-64
System Preparation tool. See Sysprep.exe (System Preparation tool)
tool choice guidelines, 54-56
tool locations and information, 62
unattended installations. See unattended installations
Windows Installer, 105
WPA, 51
B
backup and restore
archive attributes, 627
backing up files on local computers, 648
backing up files on remote computers, 649
backup markers, 627
backup plan, establishing, 631-636
Backup Tool. See Backup Tool (NTBackup.exe)
backup types, 627
boot files, 637-638
copy backups, 627
daily backups, 627
differential backups, 627
documenting procedures, 635
encrypted files or folders, 648, 809
enhancements, 626
file permissions, 630
file security settings, 650
files skipped during backup, 640
incremental backups, 627
LAN workgroup backup planning, 634-635
locked files, 648
media, 628, 630, 648
normal backups, 627
NTBackup.exe. See Backup Tool (NTBackup.exe)
overview, 625-626
passwords, 679-681
Removable Storage. See Removable Storage
restoring data, 649-650
rights, 629
security, 629-630
stand-alone computer backup planning, 632-633
storage, 628, 630
system files, 637-638
System State data, 636-638, 649, 1418
third-party backup programs, 650
verifying operations, 636
volume shadow copies, 626, 640-641
backup GUID partition entry arrays, 1216
Backup Operators group, 629, 711
Backup Tool (NTBackup.exe)
ASR. See ASR (Automated System Recovery)
overview, 1418-1419
Removable Storage, 638
saving System State data, 1418
using, 638-641
$BadClus, 604
BAD_POOL_CALLER Stop message, 1358-1360
banner grabbing, 836
basic disks
Boot Indicator field, 1192
CHS fields, 1193-1194
converting to dynamic disks, 513-519
EBR, 1195-1197
GPT disk partition requirements, 533
master boot code, 1189-1190
MBR, 1189-1197
moving, 526-529
overview, 507-508
partition tables, 1190-1192
Relative Sectors field, 1194
status descriptions, 1173-1175
System ID field, 1192-1193
Total Sectors field, 1194
basic input/output system. See BIOS
Basic Language Collection
disk space requirements, 150
language group IDs, 141-142
basic service set (BSS), 324
basic volumes
creating during Setup, 521-524
extending, 509
overview, 507, 509
status descriptions, 1175-1177
Batch built-in security principal, 715
batch command, 1408
batch logon, 659
battery monitoring and management, 300-301
binding order, 896-897
BINL (Boot Information Negotiation Layer), 128
BIOS
ACPI, 292-293
APM, 294-295
BPB, 1198
checking, 12
Plug and Play settings, 399-400
portable computers, 286, 318, 869
troubleshooting, 1128-1132
BIOS parameter block (BPB), 1198
blink rates
cursor, 1559
insertion point indicator, 1546
blue screen errors. See Stop messages
b-node broadcasts, 1012-1015
boot files, backup and restore, 637-638
Boot Indicator field, 1192
Boot Information Negotiation Layer (BINL), 128
boot logging, 1260, 1423-1424
boot passwords, 869
boot protection for portable computers, 869
boot sectors
components, 1200
FAT16, 1201-1204
FAT32, 1204-1208
GPT disks, 1219
MBR disks, 1198-1211
NTFS, 1208-1211
protecting, 1211
replacing, 1184-1186
startup processes, 1199-1200
viruses, 1178-1181
boot volumes, 513, 516
bootcfg command, 1409
Bootcfg.exe (Boot.ini Configuration Editor), 1274, 1423
Boot.ini
ARC paths, 1268
editing, 1274
multi() syntax, 1269
Ntbootdd.sys, 1271
parameters and options, 1271-1273
replacing damaged, 1275-1276
scsi() syntax, 1269
signature() syntax, 1270
troubleshooting startup, 1267-1276
Boot.ini Configuration Editor (Bootcfg.exe), 1274, 1423
BPB (BIOS parameter block), 1198
broadband connections, 1039
broadcasting presentations over intranets, 452-454
browsing roles, 898-902
BSOD. See Stop messages
BSS (basic service set), 324
built-in language support, 141-142
built-in security principals
list of, 714-716
overview, 709, 714
C
CA (certification authorities), 794-795
cable modems, 1034
cache memory, 604
Cacls.exe, 732
CA-issued certificates, 796-797
call stacks, 1317
Callback, 1042-1044
cameras, configuring, 412
capturing on-screen error messages, 1122
CardBus, 385
cd command, 1409
CDFS (Compact Disc File System), 446, 618-619
certificate authentication, 1061-1063
Certificate Export Wizard, 807
Certificate Import Wizard, 808
certificate templates, 794
certificates
CA-issued, 796
EFS overview, 792-793
enterprise certification authority, using to issue, 794-795
exporting, 806-809
generating new, 795
importing, 806-809
obtaining in stand-alone environments, 794
renewing, 795-796
replacing self-signed with CA-issued, 796-797
requesting from CAs, 795
security, 811-818
self-signed, 796
storage, 811
viewing using Certificates snap-in, 793
Certificates snap-in
requesting certificates from CAs, 795
viewing certificates, 793
certification authorities (CA), 794-795
Challenge Handshake Authentication Protocol (CHAP), 1060
Change Drive Letter and Paths command. See Disk Management snap-in
change journals
cleanup operations on Windows NT 4.0 volumes, 602
NTFS compatibility with Windows NT 4.0, 601
overview, 587
CHAP (Challenge Handshake Authentication Protocol), 1060
chdir command, 1409
check disk. See Chkdsk.exe
Check Upgrade Only mode, 18-19
chkdsk command, 1410
Chkdsk.exe
Autochk.exe, 1155-1158
converting FAT volumes to NTFS, 590
duration of run, 1161
examples, 1153
file system repair, 1150-1153
mission-critical computers, 1160
NTFS volumes, 1153-1155, 1158-1160
overview, 1149-1150, 1462
parameters, 1152-1153
read-only mode, 1150, 1161
recovering lost clusters on FAT volumes, 1161-1162
repair process, 1154-1155
running at startup, 1155-1156
running from My Computer or Windows Explorer, 1162
shortening duration of, 1158-1160
syntax, 1152
Chkntfs.exe
Autochk.exe, 1155-1158
parameters, 1156-1158
syntax, 1156
volumes, checking if dirty, 1150
CHS fields, 1193-1194
cipher command
determining encryption status, 784
file and folder encryption, 781-782
generating new certificates, 795
generating recovery agent certificates, 806
requesting CA-issued file encryption certificates, 796
CIW (Client Installation Wizard), 83-86
Classic security model, 738
clean installations compared with upgrading, 38-39
Cleanmgr.exe (Disk Cleanup), 1370, 1463
cleanup operations on Windows NT 4.0 volumes, 601-602
ClickLock, 1555
Client for NFS, 1566
Client Installation Wizard (CIW), 83-86
Client (Respond Only) policy, 852
Client Service for NetWare
deployment planning, 27
interoperability, 1569
print servers, 473
client side caching (CSC), 255
clients
See also connections; networking
configuring DHCP, 974
configuring dynamic update for DHCP, 1003-1004
connecting to Windows networks, 883
deployment administration and configuration strategies, 30-37
deployment connectivity strategies, 24-27
desktop management strategies, 22-24
dynamic update, 1005-1006
installation methods, 40-41
IPX protocols, 26-27
multihomed, 1005-1006
Novell Client, 27, 473
portable computer configurations, 23-24
preferred configurations, 21
printing processes, 488
remote access, 1004
Remote Desktop, 339-340, 344-346
restarting DHCP, 974
security strategies for deployment, 27-30
statically configured, 1004
TCP/IP networks, 25-26
client/server telephony
configuring support, 1106-1107
overview, 1089-1090
cloning, 58
cls command, 1410
clusters
maximum number on FAT16 volumes, 557
maximum number on NTFS volumes, 555
minimum number on FAT32 volumes, 556
recovering lost, 1161-1162
remapping, 604
sizes, 553-555, 596-597
CMAK (Connection Manager Administration Kit), 1048
Cmdlines.txt
installing MUI Pack using, 167
planning service pack deployments, 190
using, 101-102
CMOS problems, 1187-1188
code pages, 144-145
codecs, 450
cognitive disabilities, 1557-1559
cold docking and undocking, 291
command-line disk management, 538-543
command-line tools
See also tools
Apmstat.exe, 295
Boot.ini Configuration Editor (Bootcfg.exe), 1274, 1423
Cacls.exe, 732
Change Drive Letter and Paths. See Disk Management snap-in
Chkdsk.exe. See Chkdsk.exe
Chkntfs.exe. See Chkntfs.exe
cipher. See cipher command
Compact.exe, 572-573
Convert.exe. See Convert.exe
copy command, 790, 792
Defrag.exe. See Defrag.exe
dir, 728
DiskPart. See DiskPart
Driver Query (Driverquery.exe), 1470-1472
Event Query (Eventquery.vbs), 1430
Event Triggers (Eventtriggers.exe), 1430
Fdisk /mbr, 1181
file system, list of, 620
format command, 554
Fsutil.exe. See Fsutil.exe
Ftonline.exe, 521
GetMac (Getmac.exe), 1475
Group Policy Results (Gpresult.exe), 1251, 1432
Group Policy Update (Gpupdate.exe), 1432
Help, viewing, 1382
IP Config (Ipconfig.exe), 934-935, 960, 1476
Kernel Debugger (Kd.exe), 1335, 1433
Ksetup, 671-673
logging output, 1382
mountvol, 535
msiexec.exe, 167
NetBT Statistics (Nbtstat.exe), 1477
Netsh, 935-938, 1477
Netstat.exe, 835, 1477
Network Connectivity Tester (Netdiag.exe), 919, 1478
Network Monitor Capture Utility (Netcap.exe), 1478
Nltest.exe, 916-917
Openfiles (Openfiles.exe), 1434
overview, 1380
PathPing (Pathping.exe), 960-962, 1479-1480
Ping (Ping.exe), 934-935, 960-962
Portqry.exe, 836
Process and Thread Status (Pstat.exe), 1434
Remove Disk. See Disk Management snap-in
Rescan Disks, 1175
RunAs, 662-664, 1439
SC (Sc.exe). See SC (Sc.exe)
Secedit.exe, 747, 763-764
starting, 1382-1383
syskey, 813-815
System File Checker (Sfc.exe), 1473
Systeminfo (Systeminfo.exe), 1445
Task Kill (Tskill.exe), 1448
Task List (Tasklist.exe), 1449
TCP/IP troubleshooting, 959-964
Whoami, 718-719
xcopy command, 790, 792
Compact Disc File System (CDFS), 446, 618-619
Compact.exe, 572-573
compatibility
ACPI BIOS, 292-293
APM BIOS, 294-295
applications, 14-18
file systems, 33-34
Group Policy and System Policy, 906
HAL, 120
hardware, 11-14
HCL. See HCL (Hardware Compatibility List)
localized versions of Office XP, 175
MUI Pack, 175
multilingual application overview, 174
multilingual applications, determining compatibility, 172-173
multiple languages with Active Directory objects, clients, and domain controllers, 174-175
multiple languages with Office XP and Windows XP Professional, 175-176
multiple operating systems, 43-44
multiple-booting, 33-34
NTFS and Windows NT 4.0, 600-601
portable computer BIOS, 286
Program Compatibility Wizard, 1435-1436
troubleshooting multilingual applications, 178-179
Windows NT 4.0 domain environments, 893
compatible IDs, 372-373
compatible matches, 372-373
Compatible (Compatws.inf) security templates, 743
complete memory dump files, 1327, 1330
Complex Script and Right-to-Left Language Collection
disk space requirements, 150
display problems, 176
installing, 154
language group IDs, 141-142
Compmgmt.msc (Computer Management snap-in), 1452-1453
Compressed (zipped) Folders feature, 577
compressing files or folders. See file compression
Computer Browser service, 898-902
computer local security groups
Administrators group, 710
Backup Operators group, 711
built-in, 709-713
Guests group, 711
HelpServicesGroup, 711
Network Configuration Operators group, 711
overview, 708
Power Users group, 711-712
Remote Desktop Users group, 712
Replicator group, 712
Users group, 712-713
Computer Management snap-in (Compmgmt.msc), 1452-1453
conferencing. See telephony and conferencing
configuring
802.11 security with 802.1x, 877
802.11 security with WEP, 875
accessibility features, 1539-1540
alternate IP addresses, 979-980
animation in Internet Explorer, 444
APIPA, 974-976
APM BIOS, 296
audio performance options, 443
battery monitoring and management, 300-301
caching, 999-1000
CD and DVD playback options, 443-444
communications resources, 410-411
data recovery policy, 805-806
desktops for multilingual deployments, 154
device settings, 401-402
DHCP, 972-974
digital media devices, 444-445
display resolution and appearance, 407
displays, 404-408
DNS overview, 982-984
drives to record CDs, 444
dynamic update, 1003-1007
fax services, 500-502
files on network shares for offline use, 310-311
hibernation, 297
home networks, 1051-1054
ICMP Router Discovery, 941-942
ICS computers, 1069-1074
IP addresses manually, 976-977
lid switches, 301
localized content for multilingual deployments, 156
modems, 1096-1104
MUI Pack user interface language, 156
multiple IP addresses on network adapters, 977-979
multiple monitors, 409
name resolution settings when DNS is used, 982
NetBIOS name resolution, 1007-1017
Offline Files for portable computers, 309-317
partitions, 34
permissions for file system directories, 752
power buttons, 301
power management, 291, 407
power schemes, 296-297
preferred playback and recording devices, 442
protocol binding order, 896-897
refresh intervals using Group Policy, 298-299
regional and language options for multilingual deployments, 154-156
regional and language support for user accounts, 155-156
registry settings for TCP/IP security, 840-843
remote access connections, 1041
roaming user profiles, 303-308
scanners and cameras, 412
security for 802.11 wireless network connectivity, 874-877
servers for broadcasting presentations, 453
shared folder permissions, 266-268
sleep buttons, 301
sound events and sound schemes, 442
sounds in Internet Explorer, 444
standby mode, 298
subnet prioritization, 1000-1002
synchronization for Offline Files, 260, 311-312
System Restore for use with EFS, 804
System Restore using Control Panel, 1396
System Restore using custom scripts, 1398
System Restore using Group Policy, 1396
System Restore using Regedit.exe (registry editor), 1398
TCP/IP. See TCP/IP
telephony and conferencing. See configuring telephony and conferencing
videos in Internet Explorer, 444
WINS, 1011-1012
configuring telephony and conferencing
client/server telephony support, 1106-1107
default dialing location, 1099
directory services, 1109
H.323 gatekeepers, 1109
H.323 gateways, 1107-1108
H.323 proxy addresses, 1108
ISDN support, 1104-1106
location information, 1098
modem configuration overview, 1096
modem properties, 1100-1104
overview, 1096
Phone and Modem Options, 1097
TAPI IP telephony, 1107-1109
Connection Manager, 1047-1048
Connection Manager Administration Kit (CMAK), 1048
Connection Point Services (CPS), 1048
connections
See also clients; networking
accessing network resources, 1049
advanced settings, 1045
authentication, 1058-1064
Autodial, 1042
Callback, 1042-1044
choosing types, 1037-1040
clients to Windows networks, 883
configuring advanced settings, 1041
configuring home networks, 1051-1054
Connection Manager, 1047-1048
data encryption, 1064-1065
defined, 1035-1036
Device Manager, 1076
dial-up, 1038
dial-up preferences, 1042-1044
dynamic multiple device dialing, 1044
Group Policy, 907-913, 1040
ICF, 844-846, 1074-1075
ICS. See ICS (Internet Connection Sharing)
incoming, 1035, 1049-1051
Internet, 1025, 1038-1039
IPSec, 855
list of types, 1025-1026
local. See local connections
modem diagnostics, 1076
modem logging, 1076
network identification, 1045
operator-assisted dialing, 1042
optional networking components, 1046
outgoing, 1036-1037
overview, 1023-1025
PPP logging, 1075-1076
remote access. See remote access connections
remote network security, 1057-1065
security, 1063
slow-link, 313-315
troubleshooting Internet access configuration problems, 1083-1084
troubleshooting local area configuration problems, 1077
troubleshooting remote access configuration problems, 1077-1082
troubleshooting tools, list of, 1075
VPN, list of types, 1028-1030
connection-specific domain names, 986
consistency, 165
consoles, 340
Control Panel
Add or Remove Programs, 1401
configuring accessibility features, 1539
configuring System Restore, 1396
editing Boot.ini, 1274
Phone and Modem Options, 1097
shortcut keys for accessibility, 1551
Stored User Names and Passwords, 677-679
User Accounts, 676
controlled ports, 877
Convert to Basic Disk command. See Disk Management snap-in
Convert to Dynamic Disk command. See Disk Management snap-in
Convert to GPT Disk command. See Disk Management snap-in
Convert to MBR Disk command. See Disk Management snap-in
Convert.exe
converting FAT volumes to NTFS, 590-591
converting volumes in use, 592-593
parameters, 591
safeguarding data, 594-595
syntax, 591
converting
basic disks to dynamic disks, 513-519
FAT32 to NTFS automatically, 99
file systems, 32, 588-595
GPT disks to MBR disks, 533
MBR disks to GPT disks, 533
partition styles, 513, 533
short file names to long, 99
storage types, 518
volumes to NTFS, 588-595
copy backups, 627
copy command, 790, 792, 1410
copying files or folders
between FAT and NTFS volumes, 576
compression effects on, 573-576
data stream effects on, 586
disk quota effects on, 564
sparse file effects on, 584
copyright protection for DVDs, 435
corporate management features, 1521
corporate security. See security
country codes, specifying, 163
CPS (Connection Point Services), 1048
crashes. See Stop messages
Creator Group built-in security principal, 715
Creator Owner built-in security principal, 715
credentials
blank password restrictions, 675
managing, 674-685
overview, 656
password management, 676-681
smart cards, 681-683
Stored User Names and Passwords, 677-679
credentials cache, 670
CryptoAPI, 771
cryptographic service provider (CSP), 771
cryptographic shared keys, 682
CSC (client side caching), 255
CSP (cryptographic service provider), 771
customizing
computers for accessibility, 1536-1539
desktops for accessibility, 1538
fonts, 1544
installations. See automating installations
IPSec policies, 852
language options, 95-97
mouse pointers, 1546
Recovery Console, 1404-1405
regional options, 95-97
RIS installations, 82-86
Sysprep installations, 76-81
unattended installations, 71-76
cvtarea parameter, 594
D
DACL (discretionary access control list), 725, 871
daily backups, 627
data decryption field (DDF), 775
data encryption, 1064-1065
Data Link Control (DLC) printing, 464
Data Protection API (DPAPI), 772
data recovery agents. See DRA (data recovery agents)
data recovery field (DRF), 775
data streams, multiple, 584-586
data structures, NTFS, 605-609
databases
dynamic disks, 510, 529
local computer policy, 760-763
Offline Files, 255-256
security configuration, 760-763
DATA_BUS_ERROR Stop message, 1343-1344
DCC (Direct Cable Connection), 1032
DDF (data decryption field), 775
deaf impairments, 1556-1557
Debugging Tools
Dr. Watson (DrWtsn32.exe), 1260, 1428-1429
installing, 1316, 1380
Kernel Debugger (Kd.exe), 1335, 1433
using, 1334-1335
WinDbg Debugger (Windbg.exe), 1335, 1433
decoding hardware, 437
decompressing files. See file compression
decryption. See encryption
Default Domain Group Policy object (GPO), 686
default user accounts. See user accounts
Defrag.exe
before using, 1164
compared with Disk Defragmenter snap-in, 1166
files that cannot be defragmented, 1167-1169
NTFS volumes, 595-596
optimizing NTFS performance, 598
optimizing startup times, 1167
overview, 1163-1164, 1463
tips for using, 1166
defragmenting tools. See Defrag.exe
del or delete command, 1411
delegating Group Policy, 749
denial-of-service attacks, 838
Dependency Walker (Depends.exe), 1425
deploying
See also installing
Connection Manager, 1047-1048
planning. See deployment planning
Remote Desktop, 342
Support Tools, 185-186
deployment planning
accessibility, 36-37
Active Directory, 7-8
application compatibility, 14-18
applications to install, 36
authentication strategies, 27-28
authorization strategies, 28-30
BIOS checking, 12
Check Upgrade Only mode, 18-19
clean installations vs. upgrading, 38-39
client administration and configuration strategies, 30-37
client connectivity strategies, 24-27
Client Service for NetWare, 27
configuration, assessing current, 11
defining project scope and objectives, 4
deployments, 5-6
desktop management strategies, 22-24
disk partitions, 34-35
disk space requirements for multilingual support, 150-151
Dynamic Update, 44-46
encryption, 30
environment, assessing current, 5
file systems, 31-34
Group Policy, 29-30
hardware devices, 31
hardware requirements and compatibility, 11-14
hardware requirements for multilingual support, 149-151
installation methods, 40-41
installations, planning, 37-47
IPX protocols, 26-27
language and regional requirements for multilingual deployments, 148-149
mapping Windows XP Professional to business needs, 7-11
Microsoft Services for NetWare, 27
multilingual options, 30-31, 148
multiple operating systems, 41-44
network infrastructure, 20-21
Novell Client, 27
NWLink, 27
overview, 3-6
portable computer configurations, 23-24
preferred client configurations, 21
regional builds for multilingual deployments, 153
roaming user needs for multilingual deployments, 151
security groups, 28-29
security strategies, 27-30
service pack deployments, 188-191
single global image for multilingual deployments, 152
specialized hardware needs for multilingual support, 151
TCP/IP networks, 25-26
Upgrade Report, 18-19
upgrading from earlier Windows versions for multilingual deployments, 151
upgrading vs. clean installations, 38-39
USMT, 39
WPA (Windows Product Activation), 46-47
desktop management
Active Directory overview, 211-212
administrative templates, 233-234
administrative templates in Group Policy, 223-225
assigning software to users and computers, 218-219
computer settings in Group Policy, 217
creating managed desktops, 240-241
default security templates in Group Policy, 226
default user configuration overview, 240
deployment strategies, 22-24
features, 10-11
Folder Redirection using Group Policy, 229
Folder Redirection using IntelliMirror, 215
GPO overview, 220
GPO processing order, 221
Group Policy, using, 219-230
Group Policy extensions, using, 222-229
Group Policy-based software distribution, 217-219
IEAK, 231
implementing IntelliMirror, 212-214
incremental security templates in Group Policy, 227
IntelliMirror, using, 214-219
IntelliMirror overview, 212
Internet Explorer Maintenance extension to Group Policy, 229
IPX for Novell NetWare, 239
LGPO, 237-238
linking GPOs to OUs in Active Directory, 213-214
logon scripts in Windows NT 4.0, 230
mobile users, 241-244
multi-user desktops, 245-246
My Documents redirection in Windows NT 4.0, 231
new users, 244-245
Novell environments, 238-239
Offline Files using IntelliMirror, 215
overview, 209
publishing software for users, 218-219
refreshing Group Policy from command line, 229-230
replacing computers, 247
roaming user profiles in IntelliMirror, 215
roaming user profiles in Windows NT 4.0, 230
RSoP snap-in in Group Policy, 222
scripts in Group Policy, 228
Security Settings extension to Group Policy, 225-227
SNMP for UNIX environments, 238
Software Installation extension to Group Policy, 227
standard configuration overview, 240
Synchronization Manager and IntelliMirror, 215
System Policy in Windows NT 4.0, 231-236
Telnet for UNIX environments, 238
UNIX environments, 238
user data, managing using IntelliMirror, 214-215
user settings, managing using IntelliMirror, 216-217
various network environments, 210-211
without Active Directory, 230
ZENworks, 239
detailed tracking events, 1492-1493
Device Driver Roll Back, 1246-1247, 1390-1391
Device Manager
driver signing, 1471
error codes, 1511-1518
opening, 361
overview, 361-364, 1425
resource settings, 402
rolling back drivers, 1246-1247, 1390-1391
troubleshooting connections, 1076
troubleshooting hardware, 416
troubleshooting startup, 1285
viewing hidden devices, 363
devices
AGP bus, 385
CardBus, 385
configuring communications resources, 410-411
configuring displays, 404-408
configuring scanners and cameras, 412
configuring settings, 401-402
Device Manager. See Device Manager
DFP monitors, 408
digital audio, 388-389
drivers. See drivers
DVD. See DVD (digital video disc)
EISA bus, 385
HID, 386-387
hot plugging, 368
IEEE 1394 (Firewire), 382-384, 424-425, 1033
installing, 397-400
internal adapters, 386, 416-418
ISA bus, 385
managing, 357
Mode Pruning, 407-408
modems. See modems
multiple monitors, 408-410
network adapters. See network adapters
PC Card, 385
PCI bus, 384
Plug and Play. See Plug and Play
POST, 408
power management. See power management
Primary Display, 408
Safely Remove Hardware application, 368-369
SCSI bus, 385
smart cards, 396-397, 681-683, 1062
still image, 389-394
surprise removal, 368
troubleshooting hardware using Device Manager, 416
USB. See USB (Universal Serial Bus)
Video Capture, 395-396
write caching policy, 368-369
Devmgmt.msc. See Device Manager
DFP (digital flat panel) monitors, 408
Dfrg.msc. See Disk Defragmenter snap-in
DHCP (Dynamic Host Configuration Protocol)
choosing, 971
configuring, 972-974
configuring clients, 974
configuring dynamic update, 1003-1004
ICS, using with, 1067-1068
lease process, 972-973
lease renewals, 974
overview, 969
restarting clients, 974
Dialup built-in security principal, 715
dial-up connections, 1038
dial-up modems, 1027
differential backups, 627
digital audio devices, 388-389
digital flat panel (DFP) monitors, 408
digital media
AC-3 audio, 433
AGP, 441
audio decoder, 434
audio renderer, 434
broadcasting presentations over intranets, 452-454
checking sound card configurations, 455
checking speaker connections, 456
checking volumes, 455
components overview, 428
configuring audio performance options, 443
configuring CD and DVD playback options, 443-444
configuring devices, 444-445
configuring drives to record CDs, 444
configuring preferred playback and recording devices, 442
configuring servers for broadcasting presentations, 453
configuring sound events and sound schemes, 442
configuring sounds, videos, and animation in Internet Explorer, 444
configuring sounds and video overview, 442
controlling bandwidth, 453
data transmissions, managing, 453-454
decoding hardware, 437
devices, managing, 445
DirectDraw, 435
DirectX 8.1, 428-430
DirectX Diagnostic Tool (Dxdiag.exe), 429, 1425-1428, 1471
DirectX Graphics HAL with VPE, 436
DirectX SDK, 430
DirectX VA, 437
DVD architecture, 431-437
DVD copyright protection, 435
DVD decoders, 436
DVD formats, 430
DVD kernel level, 434
DVD Navigator, 433
DVD overview, 430
DVD region codes, 435
DVD-ROM driver, 434
dynamic Web pages, creating, 451
enabling process throttling, 453
external MIDI devices, 447
GS Wavetable SW Synth, 447
Help and Support, viewing information in, 445
HTML+TIME, 451
Intelligent Streaming, 450
intelligent transmissions, 452
internal sound cards, 447
KS proxy, 434
Microsoft Producer, 439
MPEG-2, 433
multi-datarate encoding, 452
OpenGL, 429
optimizing broadcasts, 452
optimizing workstations, 441-445
playing audio from MIDI devices, 446-447
playing CDs, 445-446
playing overview, 445
recording, mixing, and editing audio, 448
recording CDs, 448-449
software synthesizer, 447
sound cards, 437
streaming content for Internet, creating, 449-450
subpictures, 433
third-party software DVD decoder, 434
troubleshooting audio CDs, 459-460
troubleshooting CD recordings, 460-462
troubleshooting DVDs, 458
troubleshooting MIDI files, 457-458
troubleshooting overview, 454
troubleshooting playback of WAV files, 456
troubleshooting playing problems, 455-456
UDF file system, 434
video cards, 437
video playback enhancement filter, 452
VMR, 434
VPM, 434
WDM audio, 435
WDM streaming class driver, 435
Windows Media Encoder, 450
Windows Media Player for Windows XP, 437-438
Windows Media Technologies, 437-441
Windows Media Technologies codecs, 450
Windows Media Tools, 440
Windows Movie Maker, 439
Digital Rights Management (DRM), 389
digital signatures, 370, 1468-1471
digital subscriber line (DSL), 1034
digital video disc. See DVD (digital video disc)
dir command, 728, 1411-1412
Direct Cable Connection (DCC), 1032
direct memory access (DMA) channels, 368
direct parallel cabling connections, 1033
DirectDraw, 435
directory services
access events, 1510
overview, 884
DirectInput, 428
DirectPlay, 428
DirectShow, 428
DirectSound Audio, hardware acceleration for, 403-404
DirectX 8.1, 428-430
DirectX Audio, 428
DirectX Diagnostic Tool (Dxdiag.exe), 429, 1425-1428, 1471
DirectX Graphics, 428
DirectX Graphics HAL with VPE, 436
DirectX SDK, 430
DirectX VA, 437
disabilities. See accessibility
disable command, 1412
disabling
applications and processes temporarily, 1247-1255
dynamic update, 1006
EFS, 818-819
hibernation mode, 297, 817
Mode Pruning, 408
NetBT, 1016-1017
network adapters, 1252
services temporarily, 1255-1262
services using Recovery Console, 1264
services using Services (Services.msc) snap-in, 1257
services using System Configuration Utility (Msconfig.exe), 1256-1257
startup programs for networked computers, 1251-1252
startup programs manually, 1252-1255
startup programs using Group Policy, 1249-1251
startup programs using SHIFT key, 1248-1249
startup programs using System Configuration Utility (Msconfig.exe), 1248
system restarts after Stop errors, 1336
write combining, 406
disaster recovery tools
Add or Remove Programs, 1401
ASR. See ASR (Automated System Recovery)
backup and restore. See Backup Tool (NTBackup.exe)
Device Driver Roll Back, 1246-1247, 1390-1391
Last Known Good Configuration, 1243-1244, 1386-1387
list of, 1384-1385
NTBackup.exe. See Backup Tool (NTBackup.exe)
overview, 1384
Recovery Console. See Recovery Console
safe mode, 1245, 1387-1390
System Restore. See System Restore
discretionary access control list (DACL), 725, 871
discretionary access to securable objects, 702
disk and maintenance tools, 1461-1467
Disk Cleanup (Cleanmgr.exe), 1370, 1463
Disk Defragmenter snap-in
before using, 1164
compared with command-line tool, 1166
files that cannot be defragmented, 1167-1169
NTFS volumes, 595-596
opening, 1165
optimizing NTFS performance, 598
optimizing startup times, 1167
overview, 1163-1164, 1463
running, 1164-1165
tips for using, 1166
disk groups, 510, 531
disk imaging, 58
disk management
adding new disks, 525-526
basic disks. See basic disks
basic volumes. See basic volumes
command-line, 538-543
converting partition styles, 513, 533
converting storage types, 518
dynamic disks. See dynamic disks
dynamic volumes. See dynamic volumes
enhancements, 504-505
GPT disks. See GPT disks
importing foreign disks, 529-531
importing spanned or striped volumes, 531
maintenance guidelines, 543
MBR disks. See MBR disks
moving disks, 526-529
overview, 503-508
partition styles, 507
remote, 538-543
storage types, 506-507
Disk Management snap-in
Change Drive Letter and Paths command, 523
cluster sizes, specifying, 554-555
Convert to Basic Disk command, 518
Convert to Dynamic Disk command, 518
Convert to GPT Disk command, 533
Convert to MBR Disk command, 533
disk status descriptions, 1172-1175
drive letters, 523, 531
EISA Configuration partitions, 515
Failed status, 1175
Foreign status, 1173
Healthy (At Risk) status, 1176
Healthy (EISA Configuration), 1176
Healthy status, 1172
Healthy (Unknown Partition) status, 1176-1177
identifying separate volumes, 514
Import Foreign Disks command, 529
importing foreign disks, 529-531
Initialize Disk command, 526, 1173
Missing status, 1173
Not Initialized status, 1173
OEM partitions, 1176
Offline status, 1173-1174
Online (Errors) status, 1174
Online status, 1172
opening, 505, 1172
overview, 505, 1464
Reactivate Disk command, 1173-1174, 1176
remote disk management, 538-543
Remove Disk command, 529, 1174
removing disks from dynamic disk databases, 529
Rescan Disks command, 1175
starting, 1172
Unknown status, 1177
Unreadable status, 1174
volume status descriptions, 1175-1177
disk quotas
Administrators group, 567
auditing disk space use, 569
cleanup operations on Windows NT 4.0 volumes, 601
deleting quota entries, 568
enabling, 564-565
exceeding limits, 567
implementations, 569
increasing quotas for individual users, 566-567
limits, 566
local implementations, 569
multiple boot configurations, 570
NTFS compatibility with Windows NT 4.0, 601
overview, 563-564
Quota Entries window, 566
remote implementations, 569
states, 565
warning levels, 566
WMI to script, using, 570-571
disk sectors, GPT disks
boot sectors, 1219
critical for startup, 1211
GPT headers, 1214-1216
GUID partition entry arrays, 1216-1219
Protective MBR, 1212-1213
disk sectors, MBR disks
Boot Indicator field, 1192
boot sectors, 1198-1211
CHS fields, 1193-1194
critical for startup, 1189
EBR, 1195-1197
master boot code, 1189-1190
MBR on basic disks, 1189-1197
MBR on dynamic disks, 1197-1198
partition table on basic disks, 1190-1192
Relative Sectors field, 1194
System ID field, 1192-1193
Total Sectors field, 1194
disk storage
basic disks. See basic disks
dynamic disks. See dynamic disks
list of types, 506-507
disk troubleshooting
ASR tool, 1169-1170
Autochk.exe, 1155-1158
boot sector viruses, 1178-1181
cables and connectors, 1188
Chkdsk.exe. See Chkdsk.exe
Chkntfs.exe. See Chkntfs.exe
CMOS problems, 1187-1188
Disk Defragmenter tools. See Defrag.exe
Disk Management snap-in. See Disk Management snap-in
disk sectors critical for startup, 1188
disk status descriptions, 1172-1175
DiskProbe, 1170-1171, 1184
Dmdiag.exe, 1171
enhancements, 1148
maintenance guidelines for virus avoidance, 1179-1180
MBR viruses, 1177-1181
overview, 1147
Recovery Console, 1169
Stop messages, 1186-1187
diskmgmt.msc. See Disk Management snap-in
DiskPart
converting basic disks to dynamic disks, 513
drive letters, 523
extend command, 509
list volume command, 514
overview, 538-539, 1464
retain command, 517-518
scripts, 539-543
diskpart command, 1412
DiskProbe, 1170-1171, 1184
disks
adding new, 526
basic. See basic disks
check. See Chkdsk.exe
dynamic. See dynamic disks
GPT. See GPT disks
importing foreign, 529-531
managing. See disk management
MBR. See MBR disks
moving, 526-529
status. See Disk Management snap-in
troubleshooting. See disk troubleshooting
display drivers, 405
distributed link tracking, 581-582
Distributed Link Tracking Client service, 581
Distributed Link Tracking Server service, 581
distribution folders
overview, 64
Setup Manager (Setupmgr.exe), 68
structure, 64-67
DLC (Data Link Control) printing, 464
DMA (direct memory access) channels, 368
Dmdiag.exe, 1171
DNS (Domain Name System)
Active Directory domains, 892-893
adding suffixes to queries, 991-993
caching, 999-1002
configuring name resolution settings, 982
configuring overview, 982-984
host names and NetBIOS names, 984-987
naming restrictions, 987-988
overview, 970
primary DNS suffixes, 985
query process, 988
querying servers, 993-999
registration, 840
server search order, 998
specifying servers, 993
troubleshooting name resolution, 1019-1021
docking portable computers, 290-291
domain environments, nesting groups in, 720
domain local security groups, 709, 714
Domain Name System. See DNS (Domain Name System)
domains
confirming membership, 915-917
manually joining, 914
nesting groups, 720
overview, 888
DPAPI (Data Protection API), 772
Dr. Watson (DrWtsn32.exe), 1260, 1428-1429
DRA (data recovery agents)
configuring data recovery policy, 805-806
considerations, 803-804
decryption process, 805
designating, 806
exporting and importing certificates and private keys, 806-809
overview, 802-803
removing, 806
DRF (data recovery field), 775
drive letters
assigning for imported dynamic volumes, 531
assigning methods of Setup, 522
assigning to removable disks during Setup, 523
changing, 523
system or boot volumes, changing, 524
drive paths, 578-579
Driver Query (Driverquery.exe), 1470-1472
Driver Signature Checking, 1470
Driver.cab, 375-376, 473
DRIVER_IRQL_NOT_LESS_OR_EQUAL Stop message, 1361
DRIVER_POWER_STATE_FAILURE Stop message, 1356-1357
Driverquery.exe (Driver Query), 1470-1472
drivers
Afd.sys, 842
display, 405
Driver.cab, 375-376, 473
EFS, 771
enterprise-wide updates, 373
installing, 399
known problem drivers database, 374
overview, 370
PostScript, 481
printer, 480-481, 489, 748
ranking, 373
search policy, 375
signing, 91, 370-371, 1468-1471
troubleshooting startup, 1246-1247
Universal, 480
Windows Driver Protection, 374-375
Windows Update, 371-373
DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS Stop message, 1360-1361
DRIVER_USED_EXCESSIVE_PTES Stop message, 1362
DRM (Digital Rights Management), 389
DrWtsn32.exe (Dr. Watson), 1260, 1428-1429
DSL (digital subscriber line), 1034
DVD (digital video disc)
AC-3 audio, 433
architecture, 431-437
audio decoder, 434
audio renderer, 434
copyright protection, 435
decoders, 436
decoding hardware, 437
DirectDraw, 435
DirectX Graphics HAL with VPE, 436
DirectX VA, 437
formats, 430
kernel level, 434
KS proxy, 434
MPEG-2, 433
overview, 387-388, 430
region codes, 435
sound cards, 437
subpictures, 433
third-party software decoder, 434
troubleshooting, 458
UDF file system, 434
video cards, 437
VMR, 434
VPM, 434
WDM audio, 435
WDM streaming class driver, 435
DVD Navigator, 433
DVD-ROM driver, 434
Dvorak keyboards, 1548
Dxdiag.exe (DirectX Diagnostic Tool), 429, 1425-1428, 1471
dynamic backlog, 842
dynamic device configuration, 290
dynamic disks
access restrictions, 515
converting from basic disks, 513-519
databases, 510, 529
disk groups, 510, 531
GPT disk partition requirements, 533
importing foreign disks, 529-531
installing Windows XP Professional, 524
MBR, 1197-1198
moving, 526-529
overview, 507, 510
portable computers, 519
Recovery Console limitations, 1402
status descriptions, 1173-1175
Windows XP Home Edition, not supported in, 519
Dynamic Host Configuration Protocol. See DHCP (Dynamic Host Configuration Protocol)
Dynamic Update
automating installations, 52-54
deployment planning, 44-46
overview, 182
Unattend.txt, 54
Windows Update Corporate Web site, 45
dynamic update
clients, 1005-1006
configuring, 1003-1007
disabling, 1006
dynamic volumes
creating during Setup, 524
deleting during Setup, 525
extending, 511, 516
formatting options, 518
maximum per disk group, 511
mirrored volumes, 512, 531
overview, 507, 511
RAID-5 volumes, 512
simple volumes, 511
spanned volumes, 511, 531
status descriptions, 1175-1177
striped volumes, 512, 531
E
EAP (Extensible Authentication Protocol)
802.1x standard, 329
overview, 1061
EAP-MD5, 330
EAP-TLS, 329
East Asian Language Collection
disk space requirements, 150
display problems, 176
installing, 154
language group IDs, 141-142
EBR (extended boot record), 1195-1197
effective permissions, 561, 723
EFI (Extensible Firmware Interface)
GPT disk boot sectors, 1219
GPT disk sectors, 1212
overview, 531
Protective MBR, 1212-1213
EFI System partitions, 535
EFS driver, 771
EFS (Encrypting File System)
See also encryption
3DES encryption algorithm, 771, 815-816
architecture, 770
benefits, 768
certificates, 792-797
clearing paging files at shutdown, 818
components, 770-772
configuring data recovery policy, 805-806
CryptoAPI, 771
CSP, 771
decryption overview, 772
decryption process, 777-778
deployment strategies, 30
determining encryption status, 783-784
disabling, 818-819
DPAPI, 772
DRA. See DRA (data recovery agents)
driver, 771
enabling options on shortcut menu, 782-783
encrypted file structure, 774-775
encryption overview, 772-778
encryption process, 775-776
enterprise certification authority, using to issue certificates, 794-795
error messages, 826
exporting certificates and private keys, 806-809
file and folder encryption overview, 773
file and folder encryption using cipher command, 781-782
file and folder encryption using My Computer, 779-781
FSRTL, 772, 817
hibernation mode, 817
implementation tips, 820-821
importing certificates and private keys, 806-809
local file operations, 788-789
multiple operating systems, 44
multi-user access to encrypted files, 797-801
Offline Files, 257-258, 773, 783
open encrypted files, increasing security, 817-818
overview, 562-563, 767-769
portable computers, 871
recovery precautions, 801-810
remote operations in file share environments, 785-790
remote operations in Web folder environments, 790-792
remote operations overview, 784-785
sharing files, 799-801
system file encryption, 773
troubleshooting, 822-826
virus checking files, 825
Web folders (WebDAV), 790-792
Win32 API, 772
EFS service, 770
EISA bus, 385
EISA Configuration partitions
converting to dynamic volumes, 515
OEM partitions, 1176
Eject PC command, 317
Emergency Repair Disk. See ASR (Automated System Recovery)
EMF (Enhanced Metafile), 494
enable command, 1413
enable compression option, 557
enabling
3DES, 815-816
APM, 295
auditing policies, 755-758
automatic connection during scheduled synchronization, 313
boot logging, 1423
compression, 571-578
devices to wake computers from hibernation or standby, 301
disk quotas, 564-565
encryption. See EFS (Encrypting File System)
IP address assignments, 970-980
Mode Pruning, 407
Remote Desktop, 342-343
startup key protection, 813-815
Stop message Event Log reporting, 1336
Encapsulating Security Payload (ESP), 848
encrypted files
backup and restore, 648, 809
encryption using cipher command, 781-782
encryption using My Computer, 779-781
increasing security for open, 817-818
multi-user access, 797-801
NTFS, 563
structure, 774-775
troubleshooting, 822-825
Encrypting File System. See EFS (Encrypting File System)
encryption
See also EFS (Encrypting File System)
802.11, 327-328
cleanup operations on Windows NT 4.0 volumes, 602
configuring data recovery policy, 805-806
deployment strategies, 30
determining status, 783-784
DRA. See DRA (data recovery agents)
files and folders, 773, 779-782
multi-user access to encrypted files, 797-801
NTFS, 562-563
NTFS compatibility with Windows NT 4.0, 601
Offline Files, 257-258, 316, 773, 783
process, 775-776
recovery precautions, 801-810
remote, 786-788, 791-792
Remote Desktop, 350-352
sharing files, 799-801
system files, 773
virus checking files, 825
Ending Cylinder, Head, and Sector fields, 1193-1194
Enhanced Metafile (EMF), 494
enhancements
See also features; new features
backup and restore, 626
disk management, 504-505
faxing, 464
file systems, 548-549
networking, 884-885
portable computers, 284-286
printing, 464
Setup, 182-183
troubleshooting disks and file systems, 1148
enterprise certification authorities (CA), 794-795
Enterprise Domain Controllers built-in security principal, 716
error codes, Device Manager, 1511-1518
error messages. See Stop messages
Error Reporting service
analyzing Stop errors, 1331-1332
overview, 1429-1430
troubleshooting startup, 1259
escape codes, 490-491
ESP (Encapsulating Security Payload), 848
ESS (extended service set), 324
Ethernet, 1030
Event Log, Stop message reporting, 1336
event messages, security. See security event messages
Event Query (Eventquery.vbs), 1430
Event Triggers (Eventtriggers.exe), 1430
Event Viewer
Application log, 758, 1430
overview, 758-759
Security log, 758, 1430
System log, 758, 1430
troubleshooting networking, 917-919
troubleshooting startup, 1262
Eventquery.vbs (Event Query), 1430
events
account logon, 1507-1510
detailed tracking, 1492-1493
directory service access, 1510
logon, 1484-1489, 1507-1510
object access, 1490-1491
policy change, 1494-1497
privilege use, 1491-1492
user management, 1498-1507
Eventtriggers.exe (Event Triggers), 1430
Eventvwr.msc. See Event Viewer
Everyone built-in security principal, 715
Everyone permissions, 736
exceeding disk quota limits, 567
exceptions defined, 1317
exit command, 1413
expand command, 1302, 1413
exporting EFS and DRA certificates and private keys, 806-809
$Extend, 589
extended boot record (EBR), 1195-1197
extended partition tables, 1195-1197
extended partitions
creating during Setup, 522-524
extending, 509
extending using Sysprep.exe, 122-125
GPT disks, 509
maximum per disk, 509
extended service set (ESS), 324
extending
basic volumes, 509
dynamic volumes, 511, 516
Extensible Authentication Protocol. See EAP (Extensible Authentication Protocol)
Extensible Firmware Interface. See EFI (Extensible Firmware Interface)
external MIDI devices, 447
extracting files from operating system CD, 1300-1302
Next
Last Updated: June 2, 2003
|
