Windows Setup and Configuration
Troubleshooting

How To Do A Clean Boot Using the System Configuration Utility

  1. Run MSCONFIG: Go to Start > Run, type msconfig.
  2. Hide Microsoft Services. Go to “System Configuration Utility” > “Services” tab, and then select the “Hide all Microsoft Services” check box.
  3. Click “Disable All”.
  4. Click “Startup” tab.
  5. Click “Disable All”.
  6. Click “Apply” then “Close”.
  7. Restart computer.

Restore your computer back.

  1. Run MSCONFIG: Got to Start > Run, type msconfig. Note: you can choose to do the following steps or just click “Normal Startup” on the General tab.
  2. In “System Configuration Utility”, click the “Services” tab, and then click “Enable All”
  3. Click “Startup” tab.
  4. Click “Enable” All
  5. Click “Apply” then Close
  6. Restart computer

How to run Control Panel as Administrator

C:\WINDOWS> runas /user:Machinename\Administrator "Control.exe"

How to Enable Administrator Login (Windows XP Home)

  • Run regedit.
  • Edit registry key
    HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ SpecialAccounts \ UserList
  • Create a new DWORD Value named Administrator, with content 1.
Optimization

Tune-up User Interface (Windows Vista)

  • Fastest: Use Windows Vista Basic.
    • Control Panel > Personalize > Window Color and Appearance.
    • From that Window Color and Appearance box, click “Open classic appearance properties for more color options”.
    • Choose Windows Vista Basic (you can click “Advanced” if you want to tweak the settings).
  • Faster: Use Windows Aero with transparency turned off.
    • Control Panel > Personalize > Window Color and Appearance.
    • Uncheck “Enable transparency”.
  • Fast: Use Windows Aero.
  • Slow: Use Windows Standard or Windows Classic. It is slow because it does not use the graphics card processor, but the main CPU.

Other tune-ups:

  • Control Panel > Performance and System Tools > Adjust visual effects.
  • Choose “Adjust for best performance”, or choose “Custom” and pick the effects you want to keep.

Disabling Startup Applications & Services

  • Run MSCONFIG (Start > Run As > MSCONFIG > Startup).
  • Disable startup applications that are not required by the system.

Disabling Non-Critical Services

These are services that can safely be disabled so that Windows can run faster:

  • COM+ Event System
  • Cryptographic Services
  • DFS Replication
  • Computer Browser
  • Distributed Link Tracking Client
  • IKE and AuthIP IPsec Keying Modules
  • IP Helper
  • IPsec Policy Agent
  • KtmRm for Distributed Transaction Coordinator
  • Offline Files
  • Remote Registry
  • Secondary Logon
  • SSDP Discovery
  • Tablet PC Input Service (Unless you have a Tablet PC)
  • Terminal Services
  • UPnP Device Host
  • Windows Error Reporting Service (no more asking you to notify Microsoft when there's a crash!)

Disabling Last Access Time Stamps

If you are using an NTFS file system, you can increase the performance of Enhanced Write Filter by disabling the last access date/time stamps. 1)

To disable Last Access timestamps

Create the following registry key on your run-time image:

  • Key Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
  • Name: NtfsDisableLastAccessUpdate
  • Type: REG_DWORD
  • Value: 1

Alternatively, use the fsutil command to set it:

C:\> fsutil behavior set disablelastaccess 1

Use the following command to query it:

C:\> fsutil behavior query disablelastaccess

NOTE: “Using the disablelastaccess parameter can affect programs such as backup and Remote Storage that rely on this feature.” 2)

Disable User Acces Control (UAC) for Windows Vista

Source: Daniel Petri3) <p>

Method 1

  • Run MSCONFIG.
  • Select Tools > Disable UAC > Launch. This operation will open a Command Line window. Just close it.
  • Reboot system.

Method 2

  • Using REGEDIT, edit registry HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System.
  • Change EnableLUA (DWORD) to 0.
  • Reboot system.

Method 3

  • Control Panel > User Accounts > Turn on/off User Account Control (UAC) to make your computer more secure

Enable 4GB RAM on a 32-bit Vista Computer

  • Enable increase in RAM available:
    • Open command line in Administrator mode (< WinKey > + R, then < Ctrl > < Shift > < Enter >)
    • Run BCDEDIT with these parameters:
      C:\> bcdedit /set increaseuserva 3072 
    • If needing to reset value back to default, use:
      C:\> bcdedit /deletevalue increaseuserva 
    • Review boot settings with:
      C:\> bcdedit 
Security

File Encryption

To protect files from other users, encrypt files:

  • Right-click folder to encrypt, then Properties.
  • Select <Advanced>.
  • Click on checkbox “Encrypt contents to secure data”.

To safeguard from a hard disk crash, you must export the keys to be able to read those encrypted files if copied elsewhere. Exporting keys 4):

  • To back up your certificates, follow these steps:
  • Start Microsoft Internet Explorer.
  • On the Tools menu, click Internet Options .
  • On the Content tab, in the Certificates section, click Certificates .
  • Click the Personal tab. Note: There may be several certificates present, depending on whether you have installed certificates for other purpose.
  • Select one certificate at a time until the Certificate Intended Purposes field shows Encrypting File System . This is the certificate that was generated when you encrypted your first folder.
  • Click Export to start the Certificate Export Wizard , and then click Next .
  • Click Yes, export the private key to export the private key, and then click Next .
  • Click Enable Strong protection , and then click Next .
  • Type your password. (You must have a password to protect the private key.)
  • Specify the path where you want to save the key. You can save the key to a floppy disk, another location on the hard disk, or a CD. If the hard disk fails or is reformatted, the key and the backup will be lost. (If you back up the key to a floppy disk or CD, you must store that disk or CD in a secure location.)
  • Specify the destination, and then click Next .

Running Application with Privileges

To run a command or program with Administrator privileges:

C:\> runas /?
RUNAS USAGE:
  RUNAS [ [/noprofile | /profile] [/env] [/savecred | /netonly] ] /user: program
  RUNAS [ [/noprofile | /profile] [/env] [/savecred] ] /smartcard [/user:] program 

  /noprofile specifies that the user's profile should not be loaded. This causes 
     the application to load more quickly, but can cause some applications to malfunction. 
  /profile specifies that the user's profile should be loaded. This is the default. 
  /env to use current environment instead of user's. 
  /netonly use if the credentials specified are for remote access only. 
  /savecred to use credentials previously saved by the user.
     This option is not available on Windows XP Home Edition and will be ignored. 
  /smartcard use if the credentials are to be supplied from a smartcard. 
  /user should be in form USER@DOMAIN or DOMAIN\USER
     program command line for EXE. See below for examples.

Examples:
> runas /noprofile /user:mymachine\administrator cmd
> runas /profile /env /user:mydomain\admin "mmc %windir%\system32\dsa.msc"
> runas /env /user:user@domain.microsoft.com "notepad \"my file.txt\""

NOTE: Enter user's password only when prompted.
NOTE: USER@DOMAIN is not compatible with /netonly.
NOTE: /profile is not compatible with /netonly.
NOTE: /savecred is not compatible with /smartcard.
Backup
Tips

Explorer

  • Set Explorer short to 'Computer':
    %windir%\explorer.exe /root,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}

Reset Environment Without Rebooting

After changing environment variables, these changes do not take place immediately when using the command line. To have them take effect right away without rebooting, perform these steps:

  • In a command prompt type:
     C:\> runas /user:myusername@mydomain cmd 

    or

     C:\> runas /user:mymachine/myusername cmd 
  • It will open up a new command prompt, then type:
     C:\> taskkill /f /im explorer.exe 
  • Type (or from Task Manager: File > Run new task):
     C:\> explorer.exe 
1)
“Disabling Last Access Time Stamps”, MSDN, Microsoft Corporation, 2006, http://msdn2.microsoft.com/en-us/library/ms940846.aspx
2)
“Microsoft Windows XP - Fsutil: behavior”, Microsoft Corporation, 2007, http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/fsutil_behavior.mspx?mfr=true
3)
Petri, Daniel, “Disable User Account Control in Windows Vista”, http://www.petri.co.il/disable_uac_in_windows_vista.htm
4)
“Network and Computer Security”, University of California - Irvine, http://www.nacs.uci.edu/security/New_Pages/EFSforWindows.html