advanced troubleshooting for general startup problems in windows xp.docx

Advanced troubleshooting for general startup problems in Windows XPArticle ID: 308041 - View products that this article applies to.

This article was previously published under Q308041To continue receiving security updates for Windows, make sure you're running Windows XP with Service Pack 3 (SP3). For more information, refer to this Microsoft web page: Support is ending for some versions of Windows

Expand all | Collapse all

INTRODUCTIONThis article describes how to troubleshoot difficulties that may occur when you try to start Windows XP. This article is intended for advanced computer users. If you are not comfortable with advanced troubleshooting, you might want to ask someone for help or contact support. For information about how to contact support, please visit the following Microsoft Web site:http://support.microsoft.com/contactus/

Back to the top | Give Feedback

MORE INFORMATION

You receive an error message when you start your computer

If you receive an error message when you start your computer, follow the steps that are described in the following two sections. If you do not receive an error message when you start your computer, go to the "Your computer stops responding when you try to start Windows XP" section.

Configure Windows not to load the file or the service that is mentioned in the error message

If the error message refers to a file or service, the file or service may be listed on one of the tabs in the System Configuration Utility (Msconfig.exe). If the file or service is listed, turn it off by following the procedure that is outlined in the article below. If the file or service is not listed, continue with the next troubleshooting step in this article.

For more information about how to turn off a file or service by using the System Configuration Utility, click the following article number to view the article in the Microsoft Knowledge Base:310353 How to configure Windows XP to start in a "clean boot" stateFor more information about how to turn off services by using Computer Management, click the following article number to view the article in the Microsoft Knowledge Base:310602 How to disable a service or device that prevents Windows from startingContact the manufacturer of the faulty service for more assistance.

Note For more information about the file or service that is causing the problem, contact a

http://support.microsoft.com/kb/308041#top

Microsoft Product Support Services professional for help. For information about how to contact a Support Services professional, visit the following Microsoft Web site:http://www.microsoft.com/supportIf the original equipment manufacturer (OEM) of your computer installed Windows XP for you, call them for help with this issue.

Determine if a new program was recently installed on your computer

If you recently removed a program or a Windows component from your computer by deleting it manually, related information that is still on your computer may be causing the problem. To remove the program or component, first reinstall it, and then use the Add or Remove Programs tool, or follow the manufacturer's instructions.

To remove a program from your computer, follow these steps:1. Click Start, click Control Panel, and then click Add or Remove Programs.2. In the list of programs, click the one that you want to remove, and then

click Change/Remove.3. Click Yes when you are prompted with the question "Do you want to remove the

program?"If the program is not listed in the Add or Remove Programs tool, contact the manufacturer to obtain instructions for removing it.

Your computer stops responding when you try to start Windows XP

If your computer stops responding when you try to start Windows XP, see the articles that are listed in the following sections, or follow the steps in the following sections.

Start your computer in Safe mode

For additional information about how to troubleshoot Windows XP by using Safe mode, click the following article numbers to view the articles in the Microsoft Knowledge Base:315222 A description of the Safe mode boot options in Windows XPFor information about how to disable a service or a device that prevents Windows from starting, see article 244905 in the "Recommended Knowledge Base articles" section.

Use Device Manager to determine if the problem is related to a device driver

You can use Device Manager to examine and change software-configurable devices. If your hardware device uses jumper pins or dip switches, you must configure the device manually.

For additional information about how to troubleshoot device conflicts by using Device Manager, see article 310126 in the "Recommended Knowledge Base articles" section. For additional information about how to troubleshoot unknown devices that are listed in Device Manager, see article 314464 in the "Recommended Knowledge Base articles" section.

Use the System Restore tool to restore the operation of Windows XP

You can use the System Restore tool to return your computer to a previous working state. System Restore takes a "snapshot" of critical system files and some program files and stores this information as restore points. You can use these restore points to return Windows XP to

a previous state.

For additional information about how to use the System Restore tool, see article 305084 in the "Recommended Microsoft Knowledge Base articles" section.

For additional information about System Restore, click Help and Support on the Start menu. In the Search box, type system restore, and then click OK.

Use the Last Known Good Configuration tool to restore the operation of Windows XP

If Windows does not start, try to restore operation of Windows XP by using the Last Known Good configuration. To do this, follow these steps:

1. Start the computer, and then press the F8 key when Windows begins to start. The Windows Advanced Options menu appears.

2. Use the ARROW keys to select Last Known Good Configuration (your most recent settings that worked), and then click OK.

3. If a start menu appears, use the ARROW keys to select Microsoft Windows XP, and then click OK

Windows XP starts your computer by using the registry information that was saved at the last shutdown.

Perform an in-place upgrade to repair your installation of Windows XP

Try to repair your installation of Windows XP by doing an in-place upgrade. Running the Setup program from the Windows CD-ROM frequently repairs a damaged Windows installation.

For additional information about how to perform an in-place upgrade of Windows XP, click the following article number to view the article in the Microsoft Knowledge Base:315341 How to perform an in-place upgrade (reinstallation) of Windows XP

Confirm that your CMOS/BIOS settings are correct

Confirm that your CMOS/BIOS settings are correct.

Warning This procedure may involve changing your CMOS settings and changing your BIOS. Incorrect changes to the BIOS of your computer can result in serious problems. Microsoft cannot guarantee that problems resulting from changes to your BIOS can be solved. Change your CMOS settings at your own risk. Incorrect or corrupted CMOS and BIOS settings can cause startup problems or shutdown problems.

Microsoft cannot provide specific instructions for changing your CMOS and BIOS settings because they are specific to your computer. For information about the correct CMOS and BIOS settings for your computer and how to check and change these settings, see your computer documentation or contact the manufacturer of your computer.

Note An insufficiently charged or damaged internal battery may corrupt the CMOS or BIOS settings.

Confirm that your hard disk or file system is not damaged

Confirm that your hard disk or file system is not damaged. Start your computer from the Windows XP CD-ROM, load Microsoft Recovery Console, and then use the Chkdsk command-line utility. This may solve your problem.

Important We recommend that advanced users or administrators use the Recovery Console. You have to know the Administrator's password to use the Recovery Console.

For additional information about how to check and repair a damaged hard disk by using Chkdsk, see the "Using the Recovery Console" and "Using the Recovery Console command prompt" sections in the following article:307654 How to install and use the Recovery Console in Windows XPNote If the Chkdsk command reports that it cannot gain access to your hard disk, you may have a hardware failure. Examine all cable connections and any jumper settings on your drive. For more assistance, contact a computer repair professional or the manufacturer of your computer.

If the Chkdsk command reports that it cannot fix all hard disk problems, your file system or Master Boot Record (MBR) may be damaged or no longer accessible. Try appropriate Recovery Console commands such as Fixmbr and Fixboot, contact a data recovery service, or repartition and reformat your hard disk.

Important For more help, contact your computer manufacturer or a Microsoft Product Support Services professional.

Allow only qualified personnel to repair your computer. Computer repair that is performed by non-qualified personnel may nullify your computer's warranty.

If you repartition and reformat your hard disk, you lose all the information on the disk.

After an upgrade, programs that previously loaded during startup no longer start

After you upgrade your computer from Microsoft Windows 95, Microsoft Windows 98, or Microsoft Windows Millennium Edition to Windows XP, the programs that previously loaded during the startup process may not be listed in the notification area (at the far right of the taskbar), and they do not start automatically when you start your computer.

Advanced troubleshooting for shutdown problems in Windows XPArticle ID: 308029 - View products that this article applies to.



On This Page

INTRODUCTIONThis article describes how to troubleshoot difficulties that may occur when you try to shut down Windows XP. This article is intended for advanced computer users. If you are not comfortable with advanced troubleshooting, you might want to ask someone for help or contact support. For information about how to contact support, visit the following Microsoft Web site:http://support.microsoft.com/contactus/Note Before you begin, make sure that the latest Service Pack and updates are installed on your computer. For more information about how to obtain the latest Windows XP service pack and updates, click the following article number to view the article in the Microsoft Knowledge Base:322389 How to obtain the latest Windows XP service pack


MORE INFORMATION

You receive an error message when you shut down or restart the computer

To resolve this issue, use either of the methods.

Method 1: Configure Windows so that it does not load the file or the service mentioned in the error message

If the error message refers to a file or service, the file or service may be listed on one of the tabs in the System Configuration utility (Msconfig.exe). If the file or service is listed, follow the procedure outlined in the second article mentioned in this section to turn it off. If the file or service is not listed, continue with the next troubleshooting step in this article.

For more information about disabling a file or service using the System Configuration utility, click the following article number to view the article in the Microsoft Knowledge Base:310353 How to perform a clean boot in Windows XPFor more information about how to turn off services using Computer Management, click the following article number to view the article in the Microsoft Knowledge Base:310602 How to disable a service or device that prevents Windows from startingContact the manufacturer of the faulty service for more information.

Note For more information about the file or service that is causing the problem, contact a Microsoft Customer Support Services professional for help. For information about how to contact a Support Services professional, visit the following Microsoft Web site:http://support.microsoft.comIf the OEM of your computer installed Windows XP, contact this manufacturer for help with this issue.

Method 2: See whether a program has recently been removed from the computer

If you recently removed a program or a Windows component from the computer by deleting it manually, related information that is still on your computer may be causing the problem. Reinstall the program or component, and then either use the Add or Remove Programs tool


or follow the manufacturer's instructions to remove it.

To remove a program from the computer:1. Click Start, click Control Panel, and then click Add or Remove Programs.2. In the list of programs, click the program that you want to remove, and then

click Change/Remove.3. Click Yes when you are prompted to confirm if you want to remove the program.

If the program is not listed in the Add or Remove Programs tool, contact the manufacturer to obtain instructions for removing it.

The computer stops responding when you try to shut down or restart the computer

To resolve this problem, use any of the methods that are described in the following sections.

Method 1: Try to shut down or restart the computer from safe mode

For more information about troubleshooting Windows XP by using safe mode, click the following article numbers to view the articles in the Microsoft Knowledge Base:315222 A description of the safe mode boot options in Windows XP310602 How to disable a service or device that prevents Windows from startingNote If you can shut down or restart your computer from safe mode, continue to the next section to troubleshoot possible driver issues.

Method 2: Use Device Manager to determine if the problem is related to a device driver

You can use Device Manager to examine and change devices that are configured by software. Note that if the hardware device uses jumper pins or dip switches, you must configure the device manually.

For more information, click the following article numbers to view the articles in the Microsoft Knowledge Base:310126 Troubleshooting device conflicts with Device Manager314464 How to troubleshoot unknown devices listed in Device Manager

Method 3: Try to restore operation of Windows XP by using System Restore

You can use the System Restore tool to return your computer to a previous working state. System Restore takes a "snapshot" of critical system files and some program files and stores this information as restore points. You can use these restore points to return Windows XP to a previous state.

For more information about using the System Restore tool, click the following article number to view the article in the Microsoft Knowledge Base:306084 How to restore the operating system to a previous state in Windows XPFor additional information about System Restore, click Help and Support on the Start menu. In the Search box, type system restore, and then press ENTER.

Method 4: Try to restore operation of Windows XP by using the Last Known Good Configuration functionality

If Windows does not start, restart Windows by using the Last Known Good Configuration functionality:

1. Start the computer, and when Windows begins to start, press F8 to make the Windows Advanced Options menu appear.

2. Use the arrow keys to select Last Known Good Configuration (your most recent settings that worked), and then press ENTER.

3. If a Boot menu appears, use the arrow keys to select Microsoft Windows XP, and then press ENTER.

Windows XP starts your computer by using the registry information that was saved at the last shutdown.

Method 5: Try to repair your installation of Windows XP by performing an in-place upgrade

You can repair a damaged Windows installation if you run Windows Setup from the Windows XP CD-ROM.

For more information about how to perform an in-place upgrade of Windows XP, click the following article number to view the article in the Microsoft Knowledge Base:315341 How to perform an in-place upgrade (reinstallation) of Windows XP

Method 6: Confirm that the CMOS/BIOS settings are correct

Warning This procedure may involve changing the complementary metal oxide semiconductor (CMOS) settings and modifying the basic input/output system (BIOS) settings. Incorrect changes to your computer's BIOS can result in serious problems. Microsoft cannot guarantee that problems resulting from changes to your BIOS can be solved. Change your CMOS settings at your own risk.

Incorrect or corrupted CMOS and BIOS settings can cause startup and shutdown problems. Microsoft cannot provide specific instructions to change your CMOS and BIOS settings, because these settings are specific to your computer.

For information about the correct CMOS and BIOS settings for your computer and about how to check and change these settings, see your computer documentation or contact the manufacturer of your computer.

Note A damaged or insufficiently charged internal battery can corrupt CMOS or BIOS settings.

Method 7: Confirm that your hard disk or file system is not damaged

You may be able to resolve the problem if you start your computer from the Windows XP CD-ROM, load the Microsoft Recovery Console, and then use the Chkdsk command line utility.

Important Microsoft recommends that only advanced users or administrators use the Recovery Console. You must know the administrator's password to use the Recovery Console.

For more information about how to check and repair a damaged hard disk using Chkdsk, see

the 'Using the Recovery Console' and 'Using the Recovery Console Command Prompt' sections in the following article, click the following article number to view the article in the Microsoft Knowledge Base:307654 How to install and use the Recovery Console in Windows XPNote If the Chkdsk command reports that it cannot access your hard disk, you may have a hardware failure. Check all of your cable connections and any jumper settings on your drive. Ask either a computer repair professional or the manufacturer of your computer for more help.

If the chkdsk command reports that it was unable to fix all hard drive problems, your file system or Master Boot Record (MBR) may be damaged or be no longer accessible. Explore appropriate Recovery Console commands such as fixmbr and fixboot, contact a data recovery service, or repartition and reformat your hard disk.

Note If you repartition and reformat your hard disk, you will lose all of the information on the disk.

Important For more help with this issue, contact either your computer manufacturer or a Microsoft Product Support Services professional.

Microsoft recommends that you ask only qualified personnel to repair your computer. Computer repair performed by non-qualified personnel can void your computer's warranty.

The computer restarts unexpectedly or restarts when you try to shut down the computer

For more information about unexpected restarts in Windows XP, click the following article number to view the article in the Microsoft Knowledge Base:320299 Windows XP restarts unexpectedly or restarts when you shut down the computer

How to configure Windows XP to start in a "clean boot" stateArticle ID: 310353 - View products that this article applies to.



On This Page

SummaryIf your computer is not starting normally, or if you receive errors when you start your computer that you cannot identify, you could consider performing a "clean boot." This operation starts the computer by using a minimal set of drivers and startup programs. This can help you troubleshoot the problem.

This article describes how to configure Windows XP to start by using a clean boot and then how to return Windows XP to a Normal startup type.

After you configure Windows XP to use a clean boot, some programs may not work as expected. When you return Windows XP to a Normal startup type, the programs work again.

This article is intended for a beginning to intermediate computer user.

You may find it easier to follow the steps if you print this article first.Back to the top | Give Feedback

Start Windows XP by using a clean bootThere are two methods to start Windows XP by using a clean boot:

Method 1: Use the Guided Help Method 2: Manually starting XP with a clean boot (advanced user only)

Start with the first method. If it does not work and you are comfortable trying a more advanced method, try the second.

Method 1: Guided Help

Before you start

Before you start to install and use Guided Help: You must be running Windows XP Home Edition, Windows XP Professional,

Windows XP Media Center Edition, or Windows XP Tablet PC Edition to install Guided Help.

You must be logged on as an administrator or a member of the Administrators group to configure Windows XP to start by using a clean boot.

For more information about how to log on to Windows, click the following article number to view the article in the Microsoft Knowledge Base:321305 How to log on to Windows XP if you forget your password or your password expires

You can use Guided Help to clean-boot your computer or to restore your computer from a clean-boot state. Guided Help can guide you through the steps, or can automatically perform the steps for you.

Notice that the actions that Guided Help performs can be undone after Guided Help is finished. To undo the actions, run Guided Help again. When you are prompted by Guided Help, click the Normal startup option or the Clean bootoption.

For more information about Guided Help, click the following article number to view the article in the Microsoft Knowledge Base:

915092 Description of Guided Help for Microsoft Knowledge Base articles

To start, download Guided Help. To start, click the following link:

Download Guided Help


If the guided tour helped you start in a clean-boot state, you are finished with this article. If you have to return your computer to a normal startup state, go to "Steps to configure Windows to use a Normal startup state." If the guided tour did not help, you can try method 2 if you are comfortable trying an advanced method. If you are not comfortable with the advanced steps, go to the "Next Steps" section.

Method 2: Manually starting XP with a clean boot (advanced user only)

This section is intended for advanced computer users. If you are not comfortable with advanced troubleshooting, you might want to ask someone for help or contact Support. For information about how to contact Microsoft support, visit the following Microsoft Web site:http://support.microsoft.com/contactus/To manually start Windows XP with a clean boot, follow these steps:

Step 1: Start the System Configuration Utility

1. Click Start, click Run, type msconfig, and then click OK.2. The System Configuration Utility dialog box is displayed.

Step 2: Configure selective startup options

1. In the System Configuration Utility dialog box, click the General tab, and then click Selective Startup.

2. Click to clear the Process SYSTEM.INI File check box.3. Click to clear the Process WIN.INI File check box.4. Click to clear the Load Startup Items check box. Verify that Load System

Services and Use Original BOOT.INI are checked.5. Click the Services tab.6. Click to select the Hide All Microsoft Services check box.7. Click Disable All, and then click OK.8. When you are prompted, click Restart to restart the computer.

Step 3: Log on to Windows

1. If you are prompted, log on to Windows.2. When you receive the following message, click to select the Don't show this

message or launch the System Configuration Utility when Windows start check box, and then click OK.

Noteso You have used the System Configuration Utility to make changes to the way

Windows starts.o The System Configuration Utility is currently in Diagnostic or Selective Startup

mode, causing this message to be displayed and the utility to run every time Windows starts.

o Choose the Normal Startup mode on the General tab to start Windows normally and undo the changes you made using the System Configuration Utility.

Step 4: Optional step to disable features

If the clean boot fixed the error, you do not have to perform this step.

Important If your problem is not fixed and you do have to follow this step, it permanently removes all restore points from your computer. The System Restore feature uses restore points to restore your computer to an earlier state. If you remove the restore points, you can no longer restore Windows to an earlier state.

This step temporarily disables Microsoft features such as Plug and Play, networking, event logging, and error reporting.

1. Click Start, click Run, type msconfig, and then click OK.The System Configuration Utility dialog box is displayed.

2. Click the General tab, click to clear the Load System Services check box, and then click OK.

3. When you are prompted, click Restart to restart the computer.If these steps helped you start your computer in a clean-boot state, you are finished. If these steps did not help, go to the “Next Steps” section. If you have to return your computer to a normal startup state, go to “Steps to configure Windows to use a Normal startup state”.

Steps to configure Windows to use a Normal startup state

After you used the clean boot to resolve your problem, you can follow these steps to configure Windows XP to start normally.

1. Click Start, and then click Run.2. Type msconfig, and then click OK.

The System Configuration Utility dialog box is displayed.3. Click the General tab, click Normal Startup - load all device drivers and

services, and then click OK.4. When you are prompted, click Restart to restart the computer.

How to Disable a Service or Device that Prevents Windows from Starting

SYMPTOMSIf a service or device driver is started automatically and is incompatible with the current version of Windows, the service or device driver may not allow Windows to remain running long enough for you to shut down the service or disable the outdated device driver.


CAUSEThis behavior can occur if hardware or software is installed that installs a device or service that is incompatible with Windows.


RESOLUTION



To resolve this issue, start Recovery Console and log on to the computer:1. Start your computer with the Windows boot disks, or with the Windows CD-ROM

if your computer supports starting from the CD-ROM drive.2. When the Welcome to Setup dialog box is displayed, press R to repair, and

then press C to start Recovery Console.3. Choose to install Windows and log on to your computer with the Administrator

account.4. From the %SystemRoot%\System32 folder at the command prompt,

type listsvc, and then press ENTER.5. Locate the service or driver that is causing the problem in the list that is

provided.

NOTE: If you select the wrong service or device, you may experience more problems.

6. Type disable servicename (where servicename is the name of the service), and then press ENTER.

NOTE: The disable command prints the old start_type of the service before resetting it to SERVICE_DISABLED. You should record the old start_type, in case you need to re-enable the service.

7. Type exit, and the computer restarts automatically. Allow the computer to boot normally.

Troubleshooting Device Conflicts with Device ManagerArticle ID: 310126 - View products that this article applies to.

This article was previously published under Q310126Expand all | Collapse all

SUMMARYThis article provides steps that you can use to troubleshoot hardware configuration problems by using Device Manager. You can use Device Manager to examine and change software-configurable devices. Note that if your hardware device uses jumper pins or dip switches, you must configure the device manually.


MORE INFORMATIONTo start Device Manager:

1. Click Start, and then click Control Panel.2. Click Performance and Maintenance, and then click System.3. Click the Hardware tab, and then click Device Manager.

Troubleshooting Information

If there is a problem with a device, it is listed in the hardware tree. Also, the problem device has a symbol that indicates the type of problem:


o A black exclamation point (!) on a yellow field indicates the device is in a problem state. Note that a device that is in a problem state can be functioning.

o A problem code explaining the problem is displayed for the device.o A red "X" indicates a disabled device. A disabled device is a device that is

physically present in the computer and is consuming resources, but does not have a protected-mode driver loaded.

o A blue "i" on a white field on a device resource in Computer properties indicates that the Use automatic settingsfeature is not selected for the device and that the resource was manually selected. Note that this does not indicate a problem or disabled state.

o A green question mark "?" in Device Manager means that a compatible driver for this device is installed, indicating the possibility that all of the functionality may not be available. Note that this applies only to Windows Millennium Edition (Me).

NOTE: Some sound cards and video adapters do not report all of the resources that they use to Windows. This can cause Device Manager to show only one device in conflict, or no conflicts at all. This can be verified by disabling the sound card, or by using the standard VGA video driver to see if the conflict is resolved. Note that this is a known problem with S3 video adapters and 16-bit Sound Blaster sound cards, or those sound cards that are using Sound Blaster emulation for Sound Blaster compatibility.

When you double click a specific device in Device Manager, you see a property sheet. The property sheet has a Generaltab.

NOTE: Some devices may have other tabs besides the General tab. Not all property sheets have the same tabs; some devices may have a Resources tab, Driver tab, and Settings tab, or some combination of these.

At the top of the property sheet, there is a description of the device. When you click the Resources tab, the window in the middle of the tab indicates which resource types are available for the selected device.

The list box at the bottom contains a Conflicting device list. This list indicates a conflict with an error code.

Note the Use automatic settings check box. If Windows successfully detects a device, this check box is selected, and the device should function correctly. However, if the resource settings are based on Basic Configuration <n> (where <n> is any number from 0 to 9), it may be necessary to change the configuration by selecting a different basic configuration from the list. If the particular configuration you want for the device is not listed as a basic configuration, it may be possible to click the ChangeSetting button to manually adjust the resource values.

For example, to edit the Input/Output Range setting:1. Click the Use automatic settings check box to clear it.2. Click Change Setting.3. Click the appropriate I/O range for the device.

NOTE: To disable a device in Device Manager, right-click the device, and then click Disable.

If the issue continues to occur, you may need to contact the manufacturer of your computer or motherboard to inquire about how to obtain and install a BIOS update for your computer.

How to manage devices in Windows XPArticle ID: 283658 - View products that this article applies to.



On This Page

SUMMARYThis article describes how to use Device Manager to manage devices in Microsoft Windows XP.

Managing devices with Device Manager

Device Manager provides a graphical view of the hardware that is installed on the computer, as well as the device drivers and resources associated with that hardware. Using Device Manager provides a central point to change the way the hardware is configured and interacts with the computer's microprocessor.

Using Device Manager to manage devices and their drivers require the following permissions, all of which are granted to Administrators:

The Load\Unload Drivers privilege. The permissions needed to copy files to the system32\drivers directory. The permissions needed to write settings to the registry.

Device Manager allows the following functionality: Determine if the hardware on your computer is working properly. Change hardware configuration settings. Identify the device drivers that are loaded for each device and obtain

information about each device driver. Change advanced settings and properties for devices. Install updated device drivers. Disable, enable, and uninstall devices. Reinstall the previous version of a driver. Identify device conflicts and manually configure resource settings. Print a summary of the devices that are installed on your computer.

Typically, Device Manager is used to check the status of computer hardware and update device drivers on the computer. If you are an advanced user, and you have a thorough understanding of computer hardware, you can use Device Manager's diagnostic features to resolve device conflicts, and change resource settings.

To access Device Manager, use any of the following methods: Click Start, click Run, and then type devmgmt.msc. Right-click My Computer, click Manage, and then click Device Manager. Right-click My Computer, click Properties, click the Hardware tab, and then

click Device Manager. Type the following command at a command prompt:

start devmgmt.mscIf you want to access Device Manager on a local or remote computer:

1. Click Start, click Run, and then type mmc.2. Click Add/Remove Snap In on the File menu (or press CTRL+M), click Add,

and then click Device Manager.When you use this procedure, a shortcut to Device Manager is created that you can use to open Device Manager.

Viewing information about a device driver

To get information about the driver for a device, perform the following steps:1. Double-click the type of device you want to view.2. Right-click the specific device and then click Properties.3. On the Driver tab, click Driver Details.

To view information about the device driver

This information helps determine the file version of the device driver. An icon appears next to device drivers that are digitally signed.

Windows device drivers and operating system files have been digitally signed by Microsoft to ensure their quality. A Microsoft digital signature is an assurance that a particular file is from that manufacturer, and that the file has not been altered or overwritten by another program's installation process.

Depending on how your computer is configured, Windows either ignores device drivers that are not digitally signed, displays a warning when it detects device drivers that are not digitally signed (the default behavior), or prevents you from installing device drivers without digital signatures.

Views and characteristics

The views and their characteristics are available in the following options with descriptions: Devices by Type displays devices by the type of device installed, such as

Monitor or Mouse. The connection name is listed below the type. Devices by Connection displays devices by how they are connected in your

computer. Each device is listed under the hardware to which it is connected. For example, if a small computer system interface (SCSI) card is listed, the devices attached to the SCSI card will be listed beneath it.

Resources by Type displays the status of all allocated resources by the type of device using these resources. The resources are direct memory access (DMA), channels, input/output ports (I/O ports), interrupt request (IRQ), and memory addresses.

Resources by Connection displays the status of all allocated resources by connection type. The resources are: DMA channels, I/O ports, IRQ, and memory addresses.

Show Hidden Devices includes non-Plug and Play devices (devices with earlier Windows device drivers).

Updating or changing a device driver

Ensure the latest device driver for each of the devices is loaded in Windows XP. Manufacturers frequently update their drivers to fix problems and take advantage of operating system features. These drivers are usually available from the manufacturer's Web site, and Microsoft also maintains driver files for many devices on its Web sites.

Upon downloading drivers, read the manufacturer's instructions before attempting to use the files to update the device. Often, downloaded driver files are compressed into a self-executing file that needs to be extracted in order to use the driver. In the Hardware Update Wizard, click to select the Have Disk option, then click the Browse button to locate the driver files.

How to install a new driver from Device Manager

1. Double-click the type of device you want to update or change.2. Right-click the specific device driver you want to update or change.3. Click Update Driver to open the Hardware Update Wizard. Follow the wizard

instructions.

Rolling back to a previous version of a driver

Use this feature if you encounter problems after you install a driver, such as error messages when you access the device, faulty behavior of the device, or even the inability to start Windows.

Windows XP provides this roll back to a previous, working, device driver:1. Right-click the device for which the previous version of the driver is desired and

then click Properties.2. Click the Drivers tab.3. Click Roll Back Driver.

Troubleshooting

If the status is Disabled, that is usually the result of user action, and does not necessarily mean that the device has a problem. However, sometimes users disable a device because it was causing a problem, and you should try enabling it to see if it impacts another device negatively.

If the device is experiencing a problem, the Device Status box displays the type of problem. You may see a problem code, or number (or both) and a suggested solution. If you call a support line, this number can be useful for determining and diagnosing the problem.

Troubleshooting a device requires steps specific to that device. If the Device Status box displays a problem, click Troubleshootto launch the Windows XP troubleshooter for this device type. Supply information and answer questions as prompted.

If you cannot resolve the problem with the troubleshooter, contact the manufacturer.

How to Configure Device Manager to Display Detailed InformationArticle ID: 304514 - View products that this article applies to.


SUMMARYIf you require additional device information that is not typically displayed in Device Manager, you can configure Device Manager to show detailed information.

MORE INFORMATIONTo configure Device Manager to show details:

1. Click Start, click Run, type cmd.exe, and then press ENTER.2. Type set DEVMGR_SHOW_DETAILS=1, and then press ENTER.3. Type start devmgmt.msc, and then press ENTER. In Device Manager the

properties for a device should now provide aDetails tab that contains additional information about the device.

You can view the Details tab to see the following device information: Device Instance ID Hardware IDs Compatible IDs Matching Device ID Service Enumerator Capabilities Devnode Flags Config Flags CSConfig Flags Ejection Relations Removal Relations Bus Relations Device Upper Filters Device Lower Filters Class Upper Filters Class Lower Filters Class Installer Class Coinstallers Device Coinstallers Firmware Revision Current Power State Power Capabilities Power State Mappings

NOTE: Not all of these properties will be populated for a given device. In other words, although all of these properties are listed, some may not contain information when viewing a particular device.

How to restore Windows XP to a previous stateArticle ID: 306084 - View products that this article applies to.

This article was previously published under Q306084

http://support.microsoft.com/kb/306084#appliesto

If you are a Small Business customer, find additional troubleshooting and learning resources at the Support for Small Business site.

To continue receiving security updates for Windows, make sure you're running Windows XP with Service Pack 3 (SP3). For more information, refer to this Microsoft webpage: Support is ending for some versions of Windows


On This Page

INTRODUCTION

This article describes how to use the System Restore tool to return your computer to a previous state. System Restore takes "snapshots" of critical system files and some program files and registry settings, and then it stores this information as restore points. If your computer is not functioning correctly, you can use these restore points to return Windows XP to a previous state when your computer was functioning correctly. It can also change scripts, batch files, and other kinds of executable files on your computer.

This article is for a beginning to intermediate computer user.

Note System Restore does not affect personal files, such as email messages, documents, or photos. You can only restore files that you have deleted if you have made backups of those files.


More information

Note To perform the System Restore, you must be logged on to Windows as an administrator. If your computer is part of a network, you might have to ask the system administrator for help. To verify that you are logged on to Windows as an administrator, follow these steps:

Click here to view or hide step-by-step instructions with pictures

How to use System Restore to restore Windows XP to a previous state


http://support.microsoft.com/kb/306084#survey


http://windows.microsoft.com/en-us/windows/help/end-support-windows-xp-sp2-windows-vista-without-service-packs

http://smallbusiness.support.microsoft.com/


How to undo a system restoration after you perform a System Restore



NEXT STEPS

If these methods did not work for you, you can use the Microsoft Customer Support Services website to find other solutions to your problem. Services that the Microsoft Customer Support Services websites provide include the following:

Searchable Knowledge Base : Search technical support information and self-help tools for Microsoft products.

Solution Centers : View product-specific frequently asked questions and support highlights.

Microsoft Customer Support Newsgroups : Contact other customers, peers, and Microsoft Most Valuable Professionals (MVPs).

Other Support Options : Use the web to ask a question, contact Microsoft Customer Support Services, or provide feedback.

How to start the System Restore tool by using the safe mode option with the Command prompt in Windows XPArticle ID: 304449 - View products that this article applies to.



On This Page

INTRODUCTIONThis article describes how to start the System Restore tool in safe mode by using the Command prompt (SAFEBOOT_OPTION=Minimal(AlternateShell)). This option is used when you cannot start Windows XP.

System Restore is a tool that automatically monitors and records any changes that are made to the core Windows system files and to the registry. If a change causes your system to become unstable, System Restore can undo (or "roll back") the system to a point in time when your computer was known to function correctly.


http://support.microsoft.com/default.aspx?pr=csshome

http://www.microsoft.com/communities/newsgroups/default.mspx

http://support.microsoft.com/select/?target=hub

http://support.microsoft.com/search/?adv=1

http://support.microsoft.com/kb/306084#survey




MORE INFORMATION

How to start System Restore by using the Command prompt

Note You must be logged on to Windows with a user account that is a computer administrator to complete these steps. To verify that you are logged on to Windows with a user account that is a computer administrator, visit the following Microsoft Web site:http://support.microsoft.com/gp/adminIf a new program has made your computer behave unpredictably, and uninstalling the new program did not help, you can try the Windows XP System Restore tool.

Important If you have not previously set a restore point in System Restore, you cannot restore your computer to a previous state. If you are not sure, or if you have not previously set a restore point, contact Support.

To start System Restore using the Command prompt, follow these steps:1. Restart your computer, and then press and hold F8 during the initial startup to

start your computer in safe mode with a Command prompt.2. Use the arrow keys to select the Safe mode with a Command prompt option.3. If you are prompted to select an operating system, use the arrow keys to select

the appropriate operating system for your computer, and then press ENTER.4. Log on as an administrator or with an account that has administrator credentials.5. At the command prompt, type %systemroot%\system32\restore\rstrui.exe,

and then press ENTER.6. Follow the instructions that appear on the screen to restore your computer to a

functional state.Note To start the System Restore tool using another safe mode option, visit the Microsoft Help and Support Web site and see the article "A description of the Safe Mode Boot options in Windows XP." For additional information about the Safe mode with a command prompt, click the following article number to view the article in the Microsoft Knowledge Base:

Troubleshooting steps for issues when you try to use the System Restore tool in Windows XPArticle ID: 302796 - View products that this article applies to.



IntroductionThis article describes how to perform troubleshooting steps for issues that may occur when you try to use the System Restore tool in Windows XP.



Where to startIf System Restore does not start, follow these steps:

1. Run Windows Update to check for and to install any system updates. Visit the following Microsoft Web site to check for updates:http://update.microsoft.com

2. If you are prompted, restart the computer.3. After the computer restarts, click Start, click All Programs, click Accessories,

click System Tools, and then click System Restore.If System Restore did not start, you can use the "Advanced troubleshooting" section to try to resolve your issue. If you are not comfortable with advanced troubleshooting, you might want to ask someone for help or contact support. For information about how to do this, visit the following Microsoft Web site:http://support.microsoft.com/contactus/


Advanced troubleshootingThis section is intended for advanced computer users. If you are not comfortable with advanced troubleshooting, you might want to ask someone for help or contact support. For information about how to do this, visit the following Microsoft Web site:http://support.microsoft.com/contactus/

Method 1: Make sure that the System Restore service is running

To do this, use one of the following methods: Look in Control Panel. To do this, follow these steps:

1. Click Start, click Run, and then type compmgmt.msc in the Open box, and then press Enter.

2. Expand Services, and then click System Restore Services..

If the Status of System Restore Service is not Started, click Start on the toolbar to start it.

Open a Command Prompt window. To do this, follow these steps:1. Click Start, click Run, type CMD in the Open box, and then press Enter.2. Type Net Start at the command prompt to make sure that the System

Restore Service is up and is running.

If the System Restore Service is not listed, type net start "System Restore Service", and then press Enter.

Method 2: Make sure that System Restore is enabled on the drives where you want System Restore enabled

To do this follow these steps:1. Click Start, right-click My Computer, and then click Properties.2. Click the System Restore tab.3. If the System Restore is enabled, the Status column of a drive will

show Monitoring. If not, you can clear to clear the Turn off System Restore on all drives, and then click OK to enable it.


Method 3: Make sure that you have sufficient disk space on all the drives where System Restore is enabled

To do this, follow these steps:1. To check for free disk space, click Start, click Run, type diskmgmt.msc and

then press Enter. Look at each drive System Restore is monitoring for free space.

2. If the free space on any partition system restore is monitoring falls lower than 50 MB, System Restore will suspend and remove all restore points to free disk space. You should have already received a low free disk space message by now. System Restore will resume monitoring when free disk space reaches 200 MB.

Note In most cases you do not have to have System Restore monitor Partitions/drives other than the one Windows is installed on. System Restore does not monitor data files.

Method 4: View the event logs to investigate System Restore service errors

To do this, follow these steps:1. Click Start, click Run, type eventvwr.msc /s in the Open box, and then press

Enter.2. Click the System category.3. Click the Source tab to sort by name, and then look for "sr" or "srservice."

Double-click each of these services, and then evaluate the event description for any indication of the cause of the problem.

Method 5: Boot in safe mode and run the System Restore tool

To boot in safe mode follow these steps:1. Restart the computer. Immediately after the screen goes blank for the first time,

or after the BIOS post ends, start taping the F8 key repeatedly. The Windows Advanced Options menu appears.

If the menu does not appear, restart the computer and try again.2. Select Safe Mode, and then press ENTER. As files load they will scroll down the

screen.

Note Safe mode uses a minimal set of device drivers and services to start Windows. The default Microsoft VGA driver is used for display at 640 X480 resolution and in 16 colors.

3. Log on to the Administrator account. If a password was never set, leave the password blank and press ENTER or click the green arrow.

4. Click No in the safe mode information screen to start System Restore.5. Select Restore my computer to an earlier time, and then click Next to

proceed to select a date with restore points available.6. Click Next to begin restoring the system to a previous state.

System Restore "restore points" are missing or deleted

Article ID: 301224 - View products that this article applies to.


SYMPTOMSWhen you start the System Restore tool and view the "Select a Restore Point" page, some of your restore points may be missing.


CAUSEThe deletion of restore points may be caused by any one of the following by-design conditions:

You run out of disk space on the system drive or on any one of the available non-system drives, and System Restore stops responding and stops monitoring your system.

This behavior causes the system to delete all restore points in an attempt to free up disk space. However, you have probably already received a warning about running low in disk space prior to this point. In this case, when sufficient disk space is freed, System Restore starts to monitor the system again. At this point, it creates an automatic System Checkpoint.

Note If you have a multiple-partition computer with a drive that has almost no free space, this drive may cause System Restore to stop responding all across the system and to delete restore points. However, this only occurs if you have reached the minimum disk space that is allowed and if you perform operations on monitored file types. Examples of such operations are upgrading, uninstalling or installing programs, moving, and deleting or renaming files. If your drive has almost no free space but you only perform operations on non-monitored files, System Restore does not stop responding.

You manually turn System Restore off.o If you manually turn System Restore off on the system drive, all restore

points are deleted, and you receive the following warning message:You have chosen to turn off System Restore. If you continue, all existing restore points will be deleted, and you will not be able to track and undo changes to your computer. Do you want to turn off System Restore?Yes No

o If you manually turn System Restore off on any non-system drive, all restore points on that specific drive are deleted, and you receive the following warning message:You have chosen to turn off System Restore on this drive. If you continue, you will not be able to track or undo harmful changes on this drive.Do you want to turn off System Restore on this drive?Yes No

When you turn System Restore on again on the system drive, it immediately creates a System Checkpoint. When you turn System Restore on again on a non-system drive, it does not immediately create a restore point on that drive, but monitoring resumes immediately on the drive.


You upgrade from one operating system to another or you reinstall the operating system. The upgrade might be from Microsoft Windows Millennium Edition to Windows XP or from Windows XP to Windows XP.

After you run the Setup program, you will have to run System Checkpoint, but the restore points you had under the previous operating system are gone. Windows does not let you return to an older version of the operating system by using System Restore.

Note When you upgrade, you might still see some restore point files and folders in the <drive letter>:\System Volume Information in Windows XP or under the <System Drive>:\_RESTORE folder in Windows Millennium Edition. However, these restore points are obsolete and cannot be used as they do not appear on the Select a Restore Point list on the System Restore page.

If you start the Disk Cleanup utility and you click the Disk Cleanup tab, a System Restore: Obsolete Data Stores entry is available. These are files that were created before Windows was reformatted or reinstalled. They are obsolete and you can delete them. If you choose to clean up and delete these files, you will no longer see them under the folders that are mentioned earlier in this article, and the option to delete obsolete data stores will no longer appear on the Disk Cleanup utility.

You start the Disk Cleanup utility, click the More Options tab, and then click Clean up under System Restore. When you do this, all restore points (except the most recent one) are deleted.

You are running low on disk space, but not so low that System Restore stops performing. System Restore deletes some of the restore points, but not all of them. This occurs because System Restore uses a First In First Out (FIFO) process to decrease the size of the data store to approximately 75 percent of its maximum size when the data store reaches approximately 90 percent of its maximum size. The maximum size may be the default size, or it may be set by the user. System Restore performs this deletion regardless of how much disk space you have.

A restore point reaches an age of 90 days. The restore point is then deleted because 90 days is the default time to live.

You manually reduce the data store size. This triggers the FIFO process to delete some restore points to accommodate the newly-resized data store.

The System Restore Utility May Be Suspended on a System Drive Even Though There Is Enough Disk SpaceArticle ID: 299904 - View products that this article applies to.


SYMPTOMS

When you examine the settings for the System Restore utility, you may observe that System Restore is suspended even though you have enough free disk space on the system drive. If you attempt to start System Restore, you may receive the following message:System Restore is suspended because there is not enough disk space available on the system drive (drive letter). To restart System Restore, ensure at least 200 megabytes (MB) of free disk space are available on this drive.

Do you want to start Disk Cleanup to free more disk space now?Yes No


CAUSEThis behavior can occur when the following conditions are true:

A drive that is not a system drive that has System Restore enabled on it has reached less than 50 MB of free disk space.

A copy, delete, modify operation was made to a file that is monitored by System Restore on such drive.

This will cause System Restore to suspend across the system.Back to the top | Give Feedback

RESOLUTIONTo work around this behavior, use either of the following two methods:

Method 1

If the drive that is running low on disk space does not need to be monitored, disable System Restore on that drive:

1. On the System Properties dialog box, click the System Restore tab.2. Under Drive Settings, click Available drives to select the appropriate drive.3. Click Settings.4. Click to select the Turn off System Restore on this drive check box.5. Click OK, and then click OK on the System Properties dialog box.

Method 2

Start the Disk Cleanup tool and free up to 200 MB of space on the drive that has caused the problem. You can also free that space by deleting unnecessary files, folders, or programs from the drive.

If you have freed at least 200 MB of disk space, the status of System Restore may be displayed as "Suspended" on the System Restore user interface. This behavior is by design as System Restore, by default, waits for 15 minutes after you have freed the disk space before System Restore restarts. After you have freed up the disk space, you can start System Restore to immediately restore its monitoring function on your computer if you click Start, point to Programs, point to Accessories, click System Tools, and then click System Restore.

How the System Restore Tool Handles Hard-Disk Space Usage



Article ID: 300044 - View products that this article applies to.


On This Page

SUMMARYThis articles describes how the System Restore tool handles hard-disk space usage, particularly where low disk-space issues are concerned.


MORE INFORMATIONBy default, System Restore is enabled on all hard-disk partitions upon the completion of Windows XP Home Edition and Windows XP Professional Setup. However, after installation of the operating system, System Restore is automatically suspended when there is less than 200 megabytes (MB) of free hard-disk space on the system drive. The service automatically resumes its monitoring activities at the next system idle time -- as soon as 200 MB of hard-disk space is available. The same behavior is expected after Windows XP installation if any of the partitions become low on available hard-disk space.

Additionally, if disk-space use encroaches on the data store size, with non-monitored files for example, System Restore always yields its data store space to the system. This is because the data store size is not a reserved space and is always calculated aseffective size. For example, if the data store size is configured to 500 MB, of which 200 MB is already used, and the current free hard-disk space is only 150 MB, the effective size is 350 MB (200 + 150), not 500 MB. In other words, the data store size is always limited by the available free hard-disk space. Specifically, note the following conditions:

When a given hard disk has less than 80 MB of remaining free disk space, System Restore purges the data store down to 75 percent of its size, or purges at least one restore point (this is the case if the data store is already below 75 percent). System Restore does not stop restore point creation. It continues to create idle time check points as time demands, and keeps purging on a first in, first out (FIFO) basis, as space demands.

When a disk has less than 50 MB of remaining free disk space, System Restore purges the data store completely and suspends System Restore on all drives (consistent freeze) until the minimum disk space (200 MB) is created again. Then, System Restore restarts monitoring.

NOTE: 200 MB is required on the system drive only.If any disk is suspended, System Restore is suspended on all disks. If you check the System Restore Properties user interface (UI), it shows the drives as suspended. The reason for this behavior is that, if System Restore performs an independent suspension (freeze), and then you perform a restore, you would restore some drives but not others if the end user did not explicitly disable those drives. This scenario would place the system in a very inconsistent state, especially if you are installing programs on a non-system drive. If you try to start System Restore when it is in the suspended state, you receive the following warning message:System Restore is suspended on Drive drive letter because there is not enough disk space available. To restart System Restore, free at least 200 MB of disk space. Do you want to start Disk Cleanup to free more disk space now?When the computer begins to get low on disk space, you receive a pop-out balloon warning in the System Tray (Systray), alerting you that your computer is running low, or is out of, disk space, as the thresholds are approached (which are 200 MB, 80 MB, and 50 MB,


respectively). If you click the balloon, the Disk CleanUp utility (DCU) is automatically started in an attempt to free up additional disk space. If the space freed is not sufficient, you receive one of the warning messages listed in the following sections of this article. At that point, you have the opportunity to start the Add/Remove Programs utility to uninstall some programs and create more space on the hard disk.

You receive "low disk space" warning messages from Disk Cleanup when your disks become low on space and System Restore protection is at risk. If you choose to ignore the messages at the 200 MB threshold and become critically low on disk space, you will continue to receive the messages and warning messages at approximately 80 MB and 50 MB of free disk space.

On non-system drives, you receive the warning, but not the additional warnings, after starting DCU.

Balloon Messages

You will receive various balloon messages regarding disk space. These include the following.Back to the top | Give Feedback

At 200 MB of free disk space:Low Disk Space

You are running out of disk space on Local Disk (drive letter). To free space on this drive by deleting old or unnecessary files, click here...At 80 MB and 50 MB of remaining free disk space:Low Disk Space

You are running very low on disk space on Local Disk (drive letter). To free space on this drive by deleting old or unnecessary files, click here...

Warning Messages

You will receive various warning messages regarding disk space. These include the following.

At 200-MB threshold of free disk space:Your Windows drive has only (amount MB) of free disk space available. It is recommended to have at least a minimum of 200 MB free on your Windows drive to ensure system reliability. You can free even more disk space by removing programs that you do not use.

Would you like to do that now?Back to the top | Give Feedback

At 80-MB threshold of free disk space:Your Windows Drive has only (amount MB) of free disk space available. This is a critically low amount of disk space. If you do not free at least 200 MB, on this drive, System Restore may not be able to track or undo harmful changes to your computer. You can free even more disk space by removing programs that you do not use. Would you like to do that now?


Note If the system reaches less than 80 MB of free hard-disk space, and you try to start System Restore, you receive the following message:




System Restore

You do not have sufficient free disk space on the system drive (drive letter:\) to perform a restore. Please free at least 80 MB of disk space on this drive.Do you want to start Disk Cleanup to free more disk space now?At the 50-MB threshold of free disk space:Your Windows Drive has only (amount MB) of free disk space available. This is a critically low amount of disk space. System Restore has suspended tracking changes to your computer because there is not enough disk space available. This means that System Restore will not be able to undo harmful changes if they occur. To reactivate System Restore, free at least 200 MB of disk space. You can free even more disk space by removing programs that you do not use. Would you like to do that now?


Note If you ignore the warning, the next time that you try to start System Restore, you receive the following message:System Restore is suspended because there is not enough disk space available on the system drive (drive letter). To restart System Restore, ensure that at least 200 MB of free disk space are available on this drive.Do you want to start Disk Cleanup to free more disk space now?

How To Use the Group Policy Editor to Manage Local Computer Policy in Windows XP

Uses of Group Policy

In Microsoft Windows XP, you use Group Policy to define user and computer configurations for groups of users and computers. You create a specific desktop configuration for a particular group of users and computers by using the Group Policy Microsoft Management Console (MMC) snap-in. The Group Policy settings that you create are contained in a Group Policy Object (GPO), which is in turn associated with selected Active Directory containers, such as sites, domains, or organizational units (OUs). With the Group Policy snap-in you can specify policy settings for the following:

Registry-based policies.These include Group Policy for the Windows XP operating system and its components and for programs. To manage these settings, use the Administrative Templates node of the Group Policy snap-in.

Security options.These include options for local computer, domain, and network security settings.

Software installation and maintenance options.These are used to centrally manage program installation, updates, and removal.

Scripts options.These include scripts for computer startup and shutdown, and user logon and logoff.

Folder redirection options. These allow administrators to redirect users' special folders to the network.

With Group Policy, you can define the state of users' work environment once and rely on the system to enforce the policies that you define.


How to Start the Group Policy Editor

To start the group policy editor, follow these steps.

NOTE: You must be logged on to the computer using an account that has administrator privileges in order to use Group Policy Editor.

1. Click Start, and then click Run.2. In the Open box, type mmc, and then click OK.3. On the File menu, click Add/Remove Snap-in.4. Click Add.5. Under Available Stand-alone Snap-ins, click Group Policy, and then click Add.6. If you do not want to edit the Local Computer policy, click Browse to locate the group

policy object that you want. Supply your user name and password if prompted, and then when you return to the Select Group Policy Object dialog box, click Finish.

NOTE: You can use the Browse button to locate group policy objects linked to sites, domains, organizational units (OU), or computers. Use the default Group Policy Object (GPO) (Local Computer) to edit the settings on the local computer.

7. Click Close, and then in the Add/Remove Snap-in dialog box, click OK.

The selected GPO is displayed in the Console Root.

How to Use the Group Policy Editor

The Group Policy snap-in contains the following major branches: Computer Configuration

Administrators can use Computer Configuration to set policies that are applied to computer, regardless of who logs on to the computers. Computer Configuration typically contains sub-items for software settings, Windows settings, and administrative templates.

User ConfigurationAdministrators can use User Configuration to set policies that apply to users, regardless of which computer they log on to. User Configuration typically contains sub-items for software settings, Windows settings, and administrative templates.

To use the group policy editor, follow these steps:1. Expand the GPO that you want. For example, Local Computer Policy.2. Expand the configuration item that you want. For example, Computer

Configuration.3. Expand the sub-item that you want. For example, Windows Settings.4. Navigate to the folder that contains the policy setting that you want. The policy items

are displayed in the right pane on the Group Policy Editor snap-in.

NOTE: If no policy is defined for the selected item, right-click the folder that you want and then on the shortcut menu that appears, point to All Tasks, and then click the command that you want. The commands that are displayed on theAll Tasks submenu are context sensitive. Only those commands that are applicable to the selected policy folder appear on the menu.

5. In the Setting list, double-click the policy item that you want.

NOTE: When you work with policy items in the Administrative Templates folder,

click the Extended tab in the right pane of the MMC if you want to view more information about the selected policy item.

6. Edit the settings of the policy in the dialog box that appears, and then click OK.7. When you are finished, quit the MMC.

Example

The following example illustrates the use of the Group Policy Editor to customize the Windows XP user interface. In this example, we will use the Group Policy Editor to temporarily remove the Turn Off Computer button from the Start menu. To do this, follow these steps:

1. Start the Group Policy Editor and open the Local Computer policy by using the steps provided in the How to Start the Group Policy Editor section of this article.

NOTE: You can start the Group Policy Editor snap-in from the command line. This automatically loads the Local Computer GPO. To do this, follow these steps:

a. Click Start, and then click Run.b. In the Open box, type Gpedit.msc, and then click OK.

2. Expand User Configuration (if it is not already expanded).3. Under User Configuration, expand Administrative Templates.4. Click Start Menu and Taskbar.5. In the right pane, double-click Remove and disable the Turn Off Computer

button.6. Click Enabled, and then click Apply.7. Click Start.

Notice that the Turn Off Computer button is no longer displayed.8. Select the Remove and disable the Turn Off Computer button Properties dialog

box.9. Click Not Configured, then click Apply, and then click OK.10. Click Start.

Notice that the Turn Off Computer button is again displayed on the Start menu.11. Quit the Group Policy Editor snap-in.

How To Use Computer Management in Windows XP

This article describes how to use the Computer Management tool in Microsoft Windows XP.

Computer Management Overview

Computer Management is a collection of Windows administrative tools that you can use to manage a local or remote computer. The tools are organized into a single console, which makes it easy to view administrative properties and to gain access to the tools that are necessary to perform your computer-management tasks.

The Computer Management Console

The Computer Management console consists of a window divided into two panes. The left pane contains the console tree; the right pane contains details. When you click an item in the console tree, information about that item is displayed in the details pane. The information that is displayed is specific to the item that you select.

The administrative tools in Computer Management are grouped into the following three categories in the console tree:

System Tools Storage Services and Applications

Each category includes several tools or services.

System Tools

Event Viewer

Use the Event Viewer tool to manage and view events that are recorded in the Application, Security, and System logs. You can monitor the logs to track security events and to identify possible software, hardware, and system problems.

Shared Folders

Use the Shared Folders tool to view connections and resource in use on the computer. You can create, view, and manage shares, view open files and sessions, and close files and disconnect sessions.

Local Users and Groups

Use the Local Users and Groups tool to create and manage your local user accounts and groups. Local Users and Groups is available only in Windows XP Professional.

Performance Logs and Alerts

Use the Performance Logs and Alerts tool to configure performance logs and alerts to monitor and collect data about your computer's performance.

Device Manager

Use Device Manager to view the hardware devices installed in your computer, update device drivers, modify hardware settings, and troubleshoot device conflicts.

Storage

Removable Storage

Use the Removable Storage tool to track your removable storage media and manage the libraries, or data-storage systems, that contain them.

Disk Defragmenter

Use the Disk Defragmenter tool to analyze and defragment volumes on your hard disks.

Disk Management

Use the Disk Management tool to perform disk-related tasks such as converting disks or creating and formatting volumes. Disk Management helps you manage your hard disks, and the partitions or volumes that they contain.

Services and Applications

Services

Use Services to manage services on local and remote computers. You can start, stop, pause, resume, or disable a service.

WMI Control

Use WMI Control to configure and manage the Windows Management Instrumentation (WMI) service.

Indexing Service

Use Indexing Service to manage the Indexing service, and to create and configure additional catalogs to store index information.

NOTE: The actual set of tools and services that is listed in Computer Management depends on the services that are installed on the host computer.

How to Use Computer Management on the Local Computer

NOTE: You must be logged on as Administrator or as a member of the Administrators group view and modify most properties and perform most computer-management tasks.

To start and use Computer Management on the local computer:1. Click Start, and then click Control Panel. Click Performance and Maintenance,

click Administrative Tools, and then double-click Computer Management.

The Computer Management window for the local computer is displayed. "Computer Management (Local)" is displayed at the root of the console tree.

2. In the console tree, expand System Tools, Storage, or Services and Applications to view the tools and services in each of these containers.

3. Click the item that you want (for example, Event Viewer) to use the tool, and then view the information that is associated with it.

How to Use Computer Management on a Remote Computer

NOTE: You must be logged on as Administrator or as a member of the Administrators group to view and modify most properties and perform most computer-management tasks.

To connect to and use Computer Management on another computer:1. Click Start, and then click Control Panel. Click Performance and Maintenance,

click Administrative Tools, and then double-click Computer Management.2. Right-click Computer Management (Local), and then click Connect to another

computer.3. Click Another Computer, and then type the name of the computer that you want to

manage remotely, or click Browse to locate the computer. Click OK and then click OK to return to the Computer Management window. The Computer Management

window of the remote computer is displayed. The name of the remote computer is displayed at the root of the console tree.

4. In the console tree, expand System Tools, Storage, or Services and Applications to view the tools and services in each of these containers.

5. Click the item that you want (for example, Event Viewer) to use the tool, and then view the information that is associated with it.

How to Use Help in Computer Management

To use Computer Management Help or to use the Help files for any of the individual administrative tools that are contained in Computer Management:

1. Start Computer Management.2. Use either of the following steps:

o In the console tree, right-click the item that you want (for example, Computer Management or Device Manager), and then click Help.

o Click the item in the console tree (for example, Device Manager or Computer Management), and then click Helpon the Action menu.

How to view and manage event logs in Event Viewer in Windows XPArticle ID: 308427 - View products that this article applies to.



On This Page

SUMMARYThis article describes how to use Event Viewer to view and manage event logs in Microsoft Windows XP.


MORE INFORMATION

Event Viewer

In Windows XP, an event is any significant occurrence in the system or in a program that requires users to be notified, or an entry added to a log. The Event Log Service records application, security, and system events in Event Viewer. With the event logs in Event Viewer, you can obtain information about your hardware, software, and system components, and monitor security events on a local or remote computer. Event logs can help you identify and diagnose the source of current system problems, or help you predict potential system problems.

http://support.microsoft.com/kb/308427/EN-US#top

Event Log Types

A Windows XP-based computer records events in the following three logs: Application log

The application log contains events logged by programs. For example, a database program may record a file error in the application log. Events that are written to the application log are determined by the developers of the software program.

Security log

The security log records events such as valid and invalid logon attempts, as well as events related to resource use, such as the creating, opening, or deleting of files. For example, when logon auditing is enabled, an event is recorded in the security log each time a user attempts to log on to the computer. You must be logged on as Administrator or as a member of the Administrators group in order to turn on, use, and specify which events are recorded in the security log.

System log

The system log contains events logged by Windows XP system components. For example, if a driver fails to load during startup, an event is recorded in the system log. Windows XP predetermines the events that are logged by system components.

How to View Event Logs

To open Event Viewer, follow these steps:1. Click Start, and then click Control Panel. Click Performance and

Maintenance, then click Administrative Tools, and then double-click Computer Management. Or, open the MMC containing the Event Viewer snap-in.

2. In the console tree, click Event Viewer.

The Application, Security, and System logs are displayed in the Event Viewer window.

How to View Event Details

To view the details of an event, follow these steps:1. Click Start, and then click Control Panel. Click Performance and


2. In the console tree, expand Event Viewer, and then click the log that contains the event that you want to view.

3. In the details pane, double-click the event that you want to view.

The Event Properties dialog box containing header information and a description of the event is displayed.

To copy the details of the event, click the Copy button, then open a new document in the program in which you want to paste the event (for example, Microsoft Word), and then click Paste on the Edit menu.

To view the description of the previous or next event, click the UP ARROW or DOWN ARROW.

How to Interpret an Event

Each log entry is classified by type, and contains header information, and a description of the event.

Event Header

The event header contains the following information about the event: Date

The date the event occurred. Time

The time the event occurred. User

The user name of the user that was logged on when the event occurred. Computer

The name of the computer where the event occurred. Event ID

An event number that identifies the event type. The Event ID can be used by product support representatives to help understand what occurred in the system.

Source

The source of the event. This can be the name of a program, a system component, or an individual component of a large program.

Type

The type of event. This can be one of the following five types: Error, Warning, Information, Success Audit, or Failure Audit.

Category

A classification of the event by the event source. This is primarily used in the security log.

Event Types

The description of each event that is logged depends on the type of event. Each event in a log can be classified into one of the following types:

Information

An event that describes the successful operation of a task, such as an application, driver, or service. For example, an Information event is logged when a network driver loads successfully.

Warning

An event that is not necessarily significant, however, may indicate the possible

occurrence of a future problem. For example, a Warning message is logged when disk space starts to run low.

Error

An event that describes a significant problem, such as the failure of a critical task. Error events may involve data loss or loss of functionality. For example, an Error event is logged if a service fails to load during startup.

Success Audit (Security log)

An event that describes the successful completion of an audited security event. For example, a Success Audit event is logged when a user logs on to the computer.

Failure Audit (Security log)

An event that describes an audited security event that did not complete successfully. For example, a Failure Audit may be logged when a user cannot access a network drive.

How to Find Events in a Log

The default view of event logs is to list all its entries. If you want to find a specific event, or view a subset of events, you can either search the log, or you can apply a filter to the log data.

How to Search for a Specific Log Event

To search for a specific log event, follow these steps:1. Click Start, and then click Control Panel. Click Performance and



3. On the View menu, click Find.4. Specify the options for the event that you want to view in the Find dialog box,

and then click Find Next.The event that matches your search criteria is highlighted in the details pane. Click Find Next to locate the next occurrence of an event as defined by your search criteria.

How to Filter Log Events

To filter log events, follow these steps:1. Click Start, and then click Control Panel. Click Performance and



3. On the View menu, click Filter.4. Click the Filter tab (if it is not already selected).5. Specify the filter options that you want, and then click OK.

Only events that match your filter criteria are displayed in the details pane.

To return the view to display all log entries, click Filter on the View menu, and then click Restore Defaults.

How to Manage Log Contents

By default, the initial maximum of size of a log is set to 512 KB, and when this size is reached, new events overwrite older events as needed. Depending on your requirements, you can change these settings, or clear a log of its contents.

How to Set Log Size and Overwrite Options

To specify log size and overwrite options, follow these steps:1. Click Start, and then click Control Panel. Click Performance and


2. In the console tree, expand Event Viewer, and then right-click the log in which you want to set size and overwrite options.

3. Under Log size, type the size that you want in the Maximum log size box.4. Under When maximum log size is reached, click the overwrite option that

you want.5. If you want to clear the log contents, click Clear Log.6. Click OK.

How to Archive a Log

If you want to save your log data, you can archive event logs in any of the following formats: Log-file format (.evt) Text-file format (.txt) Comma-delimited text-file format (.csv)

To archive a log, follow these steps:1. Click Start, and then click Control Panel. Click Performance and


2. In the console tree, expand Event Viewer, and then right-click the log in which you want to archive, and then click Save Log File As.

3. Specify a file name and location where you want to save the file. In the Save as type box, click the format that you want, and then click Save.

The log file is saved in the format that you specified.

advanced troubleshooting for general startup problems in windows xp.docx

Documents

following article number

windows component

service pack

faulty service

windows xp section

computer management

following microsoft

advanced computer users