Windows Security Mode Application Guide

People with frequent Windows operating systems may have heard that when Windows fails, Windows will provide a platform called "Safe Mode", where users can solve many problems -- Whether it is hardware (driver) or software. But will you use this safe mode?

Understanding the security mode To enter the Windows security mode, as long as you press F8 at startup, the option menu will appear, and then use the up and down cursor keys on the keyboard to select different boot modes. The options menu includes the following: 1. Safe Mode Use only basic files and drivers. Such as mouse (except USB serial mouse), monitor, keyboard, hard disk, basic video, default system service, etc., but no network connection. If you are unable to boot your computer successfully in Safe Mode, you may need to use the Recovery Console feature to repair your system. 2. Security mode with network connection Adds a network connection based on the normal security mode. However, some network programs may not work properly, such as MSN, and many self-starting applications do not automatically load, such as firewalls, anti-virus software, and so on. So in this mode, don't forget to load manually, otherwise malicious programs, etc. may invade in the process of repairing your computer. 3. Safe Mode with Command Line Prompt Use only basic files and drivers to launch. After logging in, the command prompt is displayed instead of the Windows graphical interface. Note: In this mode, if you accidentally close the Command Prompt window, the screen will be completely black. Press the key combination Ctrl+Alt+Del to bring up the “Task Manager”, click “New Task”, and then enter “C:WINDOWSexplorer.exe” after “Run” in the pop-up dialog box, you can start Windows XP immediately. The graphical interface is exactly the same as the interface in the above three security modes. If you type "c:windowssystem32cmd", you can open the command prompt window again. In fact, the Command Prompt window can be launched this way in other security modes or even during normal startup. 4. Enable boot log Starts in normal safe mode and logs all drivers and services loaded (or not loaded) by the system into a text file. This file is called ntbtlog.txt and is located in the %windir% (default is c:windows) directory. The startup log is useful for determining the exact cause of a system startup problem. 5. Enable VGA mode Start with the basic VGA driver. This mode is useful when a new video card driver that prevents Windows from starting properly is installed. In fact, no matter which form of security mode is used, it always uses the basic video driver. Therefore, in these modes, the resolution of the screen is 640 × 480 and cannot be changed. However, the driver can be reinstalled. 6. The last correct configuration is started using the registry information and drivers saved when Windows was last closed. Any changes made since the last successful start will be lost. Therefore, the last correct configuration is generally used only when the configuration is incorrect (mainly software configuration). However, it does not solve the problem caused by the driver or file being damaged or lost. 7. Directory Service Recovery Mode This is for the server operating system and is only used to recover the SYSVOL directory and the Active Directory directory service on the domain controller. 8. Debug mode Send debug information to another computer via a serial cable at startup. If you are installing or already installing Windows on your computer using the Remote Installation Service, you can see additional options related to restoring or restoring your system using Remote Installation Services. Realistic application 1. The author used an old monitor in the past, and it is a beginner. What do beginners love most, change the wallpaper, set the resolution and feel very fulfilling, I did not expect to mistake the resolution and The refresh rate is adjusted too high, and the screen will be screened the next time it is started, and the operating system will be reinstalled. Now think of it is really foolish at that time, just restart it to safe mode (the first four modes are OK), delete the graphics card driver, then restart the computer, restart (normal startup), the system will automatically scan With the graphics card and the driver installed, the screen will return to normal display. There are still some problems that can be handled in this way. For example, Windows XP automatically recognizes the hardware and installs the driver, but sometimes it is always dizzy and does not display an error message under Device Manager. But the work is not normal, the above network (the network card driver is wrong), the screen display is wrong (the graphics card driver is wrong), etc., you can also reinstall the driver in safe mode. 2. Pull out malicious self-starting programs or services. If there are some unpredictable errors on the computer, such as not being able to access the network, you can still find the problem according to the conventional idea. You can start to see the security mode with network connection. Here, it means that some self-starting programs or services affect the normal connection of the network. In the secure mode with network connection, use the command prompt tool TaskList >d:Anquan.txt with redirection to record the current process to the text file Anquan.txt in the D: root directory. Then, start the computer in the normal way, compare the process recorded in Anquan.txt with the process at this time, you will find that there are many more processes at this time, please end the extra process one by one and check the network connection. Is it normal? If the network connection is normal when ending up to a process, it means that the process that just ended is the culprit. Once detected, the process-related executables can be deleted. However, it should also be noted that since it is automatically run, after forcibly deleting, it may cause an error in the startup report "Cannot find a file", and all the settings related to self-starting must be cleared, including "system configuration." "Startup" of the utility, contents under "Win.ini", contents under the registry, contents under the startup script, contents under the "Start" menu "Startup", and the like. 3. Adjusting the partition Once, the author took the notebook and traveled on the way. He wanted to deal with the report file that was used off the bus, but he couldn't live up to it. God, go out, and don't bring any tools, fortunately, there is no way to go, you can boot into safe mode - there is a law, the command line tool Diskpart can do all the work of the partition magician (possibly There are still few friends who have heard about it.) Diskpart is very powerful. It works in an integrated environment. After inputting Diskpart, it displays the dedicated prompt shown in Figure 1 as Diskpart> (note: this is not a path). In this environment, you can input a lot of related files. It is also a dedicated subcommand. Let's demonstrate the expansion of the partition. Note first: The following operations were recorded on the desktop. 1 Boot to safe mode with a command prompt and enter the command Diskpart. Then enter the list partition to display the partition. Obviously, there are two primary partitions and two extended partitions. 2 Enter "Select Parttition 3" to make the third partition (the one of 5004MB), so that the partition has the focus attribute. Then enter "Delete Partition" to delete the partition. Please compare the values ​​of the first and second "List partition" commands in Figure 3. It is not difficult to see that the original partition 3 has indeed been deleted. 3 Enter "Select partition 1" to have the focus attribute, and then enter "Extend". The last allocated space that was just deleted by the deleted partition can be automatically added to the first partition. For partition expansion, this is the patent of the partition magic, "diskpart" can also be realized, it seems that Windows server 2003 does not support partition magic is reasonable. Then enter "List partition" to observe the capacity change of the first partition. Description: Expands the partition with focus to the nearest unallocated space. For normal partitions, the unallocated space must be on the same disk and must be followed by a partition with focus. If the partition to be expanded is in NTFS format, no data will be lost after the expansion. In the case of a non-NTFS file system format, this command will fail without any changes to the partition or data. You cannot extend the current system partition or boot partition, nor can you expand the partition that contains the page file. As can be seen from the figure, there are two primary partitions in my computer, and partition 5 is the active partition. Otherwise, partition 1 cannot be expanded. Syntax: extend [size=n] Parameter description: size=n : The size of the space (MB) added to the current partition. If you do not specify a size, the disk expands to occupy all of the nearest unallocated space. 4 No matter what changes have been made to the hard disk partition, including creation, deletion, expansion, etc., it does not need to restart the computer to take effect (this is what the partition magician can't do), but in "my computer" Can't see these partitions, why is this, originally, has not specified a drive letter (that is, a drive letter), how to specify the drive letter? The following is an example of specifying the drive letter of the first partition as an example. Make the first partition have the focus attribute, and then enter the command "Assign", Diskpart will automatically assign one to it. Of course, it can also be manually specified by the command “AssignLetter=X”. When manually specified, it cannot be the same as the existing drive letter such as C. After this processing, you can view these partitions under "My Computer". 5 Set partition 5 as the active partition, first use Select Parttition 5 to make it have the focus attribute and then activate it with Active. Finally, enter Exit to exit the Diskpart integration environment and let the computer restart automatically. Note: If you are used to DiskPart, you will feel that its design is in line with people's thinking habits. Generally, the focus is specified first, and then the operation is performed. During the operation, the partition status can be displayed to grasp the progress. Enter Help to view all the subcommands. When the input is wrong, it will automatically list the subcommand and a brief description to guide you to the right path. In addition, after installing Windows 2003, the partition magic (non-server version) that everyone is most familiar with is not working properly. Using Diskpart is really a good choice. As mentioned earlier, you must specify the focus before performing any operations under Diskpart, which indicates which object to operate on. This aspect makes my operation logic clear, but on the other hand, if the focus is incorrectly specified, it is executed. Destructive commands, such as deleting partitions, can cause irreparable damage. Therefore, please feel free to use the List command to view the status of each partition. There is an asterisk (*) mark before the focus partition. In addition, you can use the safe mode to complete the virus removal. For example, some anti-virus software can report viruses but can't clear or even quarantine and delete them. In this case, you can boot into safe mode and try to delete these virus files. Of course, here we only introduce some of the more common security mode uses, it is a brick-and-mortar, I hope that you can gradually experience more convenience in the actual computer use.