Wolf.Index.qxd 5/28/03 7:24 PM Page 673

Index

Symbols and Numbers alcdiag , 453–455 backup and recovery, 494 #DIV?0!, Excel error codes, 191 dcdiag tool, 460–463 #N/A, Excel error codes, 191 Directory Services Restore Mode, 152 #NAME, Excel error codes, 191 Domain and Trusts snap-in, 457–458 #NULL!, Excel error codes, 191 domain controllers, 480–484 #NUM!, Excel error codes, 191 GPOs, 487–491 #REF!, Excel error codes, 191 gpresult command, 463–464 #VALUE!, Excel error codes, 191 gpupdate command, 464–465 [ ] (optional parameter), 51 nltest command, 465–466 | (pipe symbol), 51 ntdsutil tool. see ntdsutil tool < > (required parameter), 51 RAS servers, 428 1394 port, 219–220, 503 replication, 484–487 “4-5 Rule”, 214 Replmon, 476 Resultant Set of Policy, 476–480 A Schema snap-in, 458–460, 492–493 Sites and Services snap-in, 458 ABRs (area border routers), 436 trusts, 493 Access control lists (ACLs), 453, 497–498 Users and Computers snap-in, 456–457 Access errors, 183–188 Windows 2003 enhancements, Compact and Repair tool, 184–185 452–453 database tables, 187–188 , architecture, 443–453 macros or modules, 187 domain controllers, 447–448 manual repairs, 185–187 domains, 444–446 overview of, 183–184 forests, 444–446 reports, 186–187 functional levels, 449–452 ACK (acknowledgement), 68 GPOs, 449 ACLs (access control lists), 453, 497–498 organizational units, 446 acldiag tool, 453–455, 497–498 sites, 446–447 ACPI (advanced configuration and power Active Directory Domains and Trusts, interface), 625 457–458, 493 Active Directory, 453–480

673 Wolf.Index.qxd 5/28/03 7:24 PM Page 674

674 Index

Active Directory Schema, 458–460, Analysis, defragmentation vs., 638 492–493 Analysis Report, Diskeeper, 639, 641 Active Directory Sites and Services, 458 Antivirus , 35–36 Active Directory Users and Computers APIPA (Automatic Private IP Addressing) overview of, 456–457 NAT servers, 432 RIS server management, 389 overview, 26–27 troubleshooting DFS roots, 387 DHCP, 324 troubleshooting Terminal Services, Application Failure Rating (AFR), 383–386 TechTracker ITX, 663 Active Network Monitor Application Recovery tool, 173–174 collecting diagnostic information, 654 Applications. see also Network services installing, 653–654 analyzing current environment, 36–37 overview of, 652–653 compatibility, 169–171 Active Ports, SmartLine, 654–655 disabling during startup, 132–133 Active Registrations folder, WINS snap-in, logs, 111 303 overview, 5–6 Active Server Watcher, SmartLine, printing, 380–381 656–657 process-oriented corrective action for, Add Driver (prndrvr.vbs-a) command, 43 366–367, 590–591 , 158 Add or Remove Program Licenses Wizard, terminal server sessions, 386 645–647 uninstalling with msicuu, 133–134 Address Resolution Protocol (ARP), uninstalling with , 59–60, 498–499 145–149 addsw command, , 218–219, ARC (Advanced RISC Computing), 501–502 213–216 Administrators Architecture application compatibility and, 169 Active Directory. see Active Directory, device model numbers, 163 architecture Network Monitor and, 75–78 DHCP. see DHCP (Dynamic Host printer configuration, 379 Configuration Protocol), architecture RIS server authorization, 352 disk subsystems. see Disk Subsystems, takeown (taking file ownership), 98–99, architecture 602 DNS. see DNS (Domain Name Service), terminal server session problems, 386 architecture command, 90 RRAS. see RRAS (Routing and Remote Advanced configuration and power inter- Access Service), architecture face (ACPI), 625 WINS, 297–302 Advanced RISC Computing (ARC), Area border routers (ABRs), 436 213–216 ARP (Address Resolution Protocol), Advanced tab, DNS server properties, 59–60, 498–499 260–262 arp command, 59–60, 498–499 Advanced TCP/IP , WINS, ASBR (autonomous system boundary 313–315 router), 436 AFR (Application Failure Rating), ASR (Automated System Recovery), TechTracker ITX, 663 127–129 Alerts, 104–107, 526–529 Asynchronous backups, 343 Wolf.Index.qxd 5/28/03 7:24 PM Page 675

Index 675

ATM (asynchronous transfer mode), firmware problems, 37–38 399–402, 499–501 shutdown failures, 158 atmadm command, 399–402, 499–501 viewing version with MSinfo32, 112 Audit logging, 330–337 viewing version with systeminfo, 107 authoritative restore command, 468–469, Block inheritance, 489–490 494 blue-screen of death. see Stop errors (blue Authorization failure, 332–333, 337 screens) AutoCorrect Backup utility, 204–208 Boot devices Automated System Recovery (ASR), inaccessible, 625–626 127–129 Stop 0x0000007B error, 249–250 Automatic Private IP Addressing. see Unmountable Boot Volume (Stop APIPA (Automatic Private IP 0x000000ED), 631 Addressing) boot information negotiation layer (BINL), Automatic Recovery, 174–175 390 Autonomous system boundary router Boot logging (ASBR), 436 enabling, 151 and, 155–156 shutdown failure and, 158–159 B Boot sector, 213, 241–242 B-node (Broadcast node), 23 Boot-Time Defragmentation, Diskeeper, Backups 640–641 Active Directory, 494 bootcfg commands, 217–225 Automated System Recovery, 128 addsw, 218–219, 501–502 DHCP, 324 , 219, 502 recovering Access database from, 183 dbg1394, 219–220, 503 recovering DHCP database from, , 220–221, 503–504 343–346 default, 221, 504 recovering WINS database from, delete, 222, 504–505 319–322 editing boot.ini after failure with, 216 shadow copies vs., 143 ems, 222–223, 505 WINS, 309 overview of, 217–218 BACP (Bandwidth Allocation Control query, 223, 506 Protocol), 395 raw, 223–224, 506 BAP (Bandwidth Allocation Protocol), 395 reference guide, 501 Bare metal restores, 128 rmsw, 224–225, 506–507 Basic disks, 212, 239–240, 538 , 225, 507 Basic Input Output System. see BIOS boot.ini file, 213–217 (Basic Input Output System) BOOTP forwarding behavior command, fsutil, 216, 226–229, DHCP discover packets and, 26 529–530 DHCP relay agents vs., 342 Best compression, TightVNC Viewer, 123 DHCP server not responding, 337 Binary conversion, 13–14 BOOTP. user class, 328 BIND servers, 262, 292–293 Broadcast node (B-node), 23 BINL (boot information negotiation layer), Broadcasts 390 DHCP, 26, 342 BIOS (Basic Input Output System) DNS, 19, 22 analyzing settings, 32 Browse function, WINS, 313 Wolf.Index.qxd 5/28/03 7:24 PM Page 676

676 Index

BSOD (blue-screen of death). see Stop Client and Gateway Services for NetWare, errors (blue screens) 353–356 Client-servers, 127–149 application compatibility, 169–171 C Automated System Recovery, 127–129 Caching devices, 159–164 caching-only servers, 254 displays, 166–167 clearcache DNS command, 268–269 driverquery command, 129–131 command, 95–97, 507–509 faxes, 164–166 Canonical Name (CNAME) records, 254 Internet Connection Sharing, 167–169 Capture Buffer, Network Monitor, 77–78 command, 131–133 Capture Filter, Network Monitor, 78 msicuu command, 133–134 Capture, Network Monitor, 77 Online Crash Analysis, 134–135 Capture Trigger, Network Monitor, 78 OS installation, 156–157 Case sensitivity, command switches, 62 Recovery Console, 152–156 Cell error codes, Excel, 191 Remote Assistance, 139–140 Challenge Handshake Authentication Remote Desktop, 135–139 Protocol (CHAP), 394 , 141–145 change command, pagefileconfig, 80–81, System Restore, 145–149 581–582 system shutdown, 157–159 Change Journal, 236–239, 536–537 system startup, 149–152 Chaos class, DNS records, 277 WINS, 299 CHAP (Challenge Handshake Client Services for NetWare. see CSNW Authentication Protocol), 394 (Client Services for NetWare) check command, wins server, Clients 307–308, 567–568 DNS, 252, 262, 287–288 check database command, 307–308, 567 NAT, 431 check version command, 308, 567 RIS, 352–353 command WINS, 313–315 chkntfs disabling, 52, 510 Clients, DHCP Data Bus Error (Stop 0x0000002E), 622 alternate configuration feature, 324 overview of, 51–53 leases, 337 reference guide, 509 overview of, 334–336 Stop 0x00000023/Stop 0x00000024 RAS server and, 340–341 errors, 246, 621 Clients, RAS chkntfs command connections, 426 overview of, 52–53 RAS server, 428 reference guide, 510 RAS server network, 429 Circular troubleshooting, 41 command, 422–424 Classes, AD schema, 492 RRAS snap-in, 424 Classes, DHCP CM (Connection Manager) tracing features of, 324 enabling/disabling, 406 user, 328 generating RAS Diagnostic Report, vendor, 327 408–409 Classful addressing, 15 showing status of, 406 clean command, dfsutil, 356–357, 515 CNAME (Canonical Name) records, 254 clearcache command, 268–269 Wolf.Index.qxd 5/28/03 7:24 PM Page 677

Index 677

Codes, error. see , error ctrl key, 452 codes Custom.dic files, 207 COM add-ins, 203 Command Prompt, with, 151 compact command, init, 309, 319, 321, 569 D Compaction DACL (discretionary access control), Compact and Repair tool, 184–185 95–97, 507–509 recovering WINS databases, 309, Data Registry key, 201 319–322 dbg1394 command, bootcfg, 219–220, 503 Compression dcdiag tool Ghost vs. RIS, 352 overview of, 460–463 TightVNC Viewer, 123 reference guide, 510–513 Computer Management snap-in troubleshooting domain controllers, 480 Disk Management access, 56–57 DCPromo, 481 status, 484 debug command, bootcfg, 220–221, overview of, 110 481–482, 503–504 Computers, comparing settings on, 38 Debugging Configurations tab, TechTracker ITX, 663 dbg1394 command, 219–220, 503 Configure Database Wizard, Sitekeeper, debug command, 220–221, 481–482, 644 503–504 Conflict detection, 328–329, 343 debug logging, 263, 264–265 Connection Manager. see CM (Connection set d2 subcommand, 278 Manager) tracing nslookup set debug subcommand, 278 Connection monitoring default command, bootcfg, 221, 504 , 68 Default gateways, 17 ping, 71–72, 586–587 Defragmentation TCP/IP ports with portqry, 420–422, defrag command, 54–56, 228–229, 513 588–589 Disk Defragmenter, 57–58 Connections Diskeeper, 638–641 DHCP clients, 335 Delegation, DNS zones network printers, 379–380 overview of, 260 Outlook configuration, 194 troubleshooting with dnslint, 270–272 WINS clients, 313 verifying with nslookup, 284–285 Consistency checks, 307–308 Delegation, subdomains, 289–290 to Values command, 190 delete command copy command, bootcfg, 219, 502 bootcfg, 222, 504–505 copy command, Recovery Console, 155 pagefileconfig, 82–83, 583 Corrupt files, 181 Recovery Console, 155 Counters, System Monitor, 92–93 Delete Driver (prndrvr.vbs-d), 367–368, CPUs, stop error message, 627 591–592 Crash Log tag, TechTracker ITX, 663 Delete Volume command, Disk create command, pagefileconfig, 81–82, Management, 244 582 Demand-dial routing, 433–435 CSNW (Client Services for NetWare) Desktops, remote access, 350–351 NWLink (IPX/SPX) protocol, 11–13 Detect and Repair, 209 overview of, 353–354 fonts, 208 troubleshooting integration, 391–392 overview of, 175–176 Wolf.Index.qxd 5/28/03 7:24 PM Page 678

678 Index

Word applications, 206 Code 19 (wrong configuration), Device drivers. see also Device Manager 611–612 Attempted Write to Read Only Memory Code 22 (disabled device), 612 (Stop 0xBE), 628 Code 24 (device not working properly), demand-dial routing, 433–434 612 disabling with Recovery Console, Code 28 (drivers not installed), 612–613 152–156 Code 29 (device disabled by firmware), displays, 167 613 Driver IRQL... (Stop 0x000000D1), 629 Code 31 (driver cannot be loaded), 613 Driver Power State Failure (Stop Code 32 (current driver disabled), 0x0000009F), 627 613–614 Driver Unloaded... (Stop 0x000000CE), Code 33 (unable to determine 629 resources), 614 error messages. see Device errors Code 34 (unable to determine settings), faxes, 165 614 Hardware Interrupt Storm (Stop Code 35 (insufficient information on 0x000000F2), 631–632 firmware), 614 Inaccessible Boot Device (Stop Code 36 (PCI interrupt error), 614–615 0x0000007B), 625–626 Code 37 (initialization problem), 615 IRQL Not Less or Equal (Stop Code 38 (unable to load driver), 615 0x0000000A), 619 Code 39 (unable to load driver), KMode Exception Not Handled (Stop 615–616 0x0000001E), 620 Code 40 (service key problem), 616 No System PTES (Stop Code 41 (cannot hardware device), 0x0000003F), 622–623 616 printers. see Printer drivers Code 42 (unable to load driver), recovery checkpoints, 146 616–617 recovery from startup failure, 150 Code 43 (service stopped due to shutdown failure problems, 158 reported problems), 617 Status Image Checksum Mismatch Code 44 (application/service has shut (Stop 0x00000221), 633–635 down device), 617 Status System Process Terminated (Stop Code 45 (device not connected), 0x0000021A), 632–633 617–618 troubleshooting with driverquery, Code 47 (unable to use device), 618 101–102, 523–524 Code 48 (device blocked from starting), viewing with MSinfo32, 112 618 Device errors, 607–619 Code 49 (system hive too large), 618 about, 607–608 Device Manager, 159–164 Code 1 (wrong configuration), 608 accessing, 159 Code 3 (corrupted driver), 608–609 device status, 161–162 Code 10 (device unable to ), 609 disabling devices, 164 Code 12 (conflicting devices), 609–610 error codes. see Device errors Code 14 (reboot instruction), 611 fax problems and, 165 Code 16 (incomplete configuration), overview of, 159–161 611 rolling back drivers, 150, 162 Code 18 (reinstall different driver), 611 uninstalling devices, 163–164 updating drivers, 162–163 Wolf.Index.qxd 5/28/03 7:24 PM Page 679

Index 679

DFS (Distributed ) DNS server, 289 deleting reparse point references, 235 RIS clients, 390 overview of, 351–352 tools, 330–334 troubleshooting, 386–389 WINS integration, 317–319 DFS links, 352 DHCP leases DFS roots overview, 24–25 inaccessible, 387 RAS integration, 339–340 overview of, 351–352 renewing, 337 troubleshooting. see dfsutil utility scope migration, 338–339 DFS snap-in, 355, 386 verifying, 338–339 dfsutil utility, 355–361, 514–519 DHCP Offer, 25 clean command, 356, 515 DHCP options, 26 export command, 357, 515 DHCP relay agents import command, 357–358, 515–516 DHCP-RAS integration, 341 importroot command, 358–359, 516 netsh routing ip relay, 412–413, pktflush command, 359, 517 557–558 purgemupcache command, 360, 517 overview, 26 purgewin2kstaticsitetable command, RAS server network, 429 360, 517 RRAS servers, 412–413, 432–433 showwin2kstaticsitetable command, troubleshooting, 342–343 360, 518 DHCP reservations, 25 spcflush command, 361, 518 DHCP scopes switches, 356, 514 common problems, 337 troubleshooting with, 386 defined, 25 unmapftroot command, 361, 518 migration, 338–339 updatewin2kstaticsitetable command, multicast, 326–327 361, 518–519 reconciling after restoring database, DHCP Allocator 345–346 NAT clients, 431 standard, 325 NAT servers, 432 superscopes, 325–326 netsh routing commands, 411–412, verifying current leases in, 338–339 556–557 VPN resource access problems, 440 DHCP broadcasts, 26, 342 DHCP servers, 336–346 DHCP Client Service, 336 accessing RAS resources, 340–341 DHCP Discover, 24–25, 342–343 audit logging, 330–333, 336–337 DHCP (Dynamic Host Configuration DHCP relay agents, 342–343 Protocol), architecture, 323–329 dhcploc command, 334, 519 classes, 327–328 dynamic updates, 252 conflict detection, 328–329 overview of, 336–337 enhancements to, 324 Properties dialog box, 328–329 overview of, 323–324 RAS integration, 339–340 scopes, 325–327 recovering corrupted database, 343 terminology, 24–27 recovering from backup, 343–346 DHCP (Dynamic Host Configuration scope migration, 338–339 Protocol), troubleshooting DHCP snap-in clients, 334–336 audit logging, 330–333 DNS integration, 291–292 database recovery, 344–345 Wolf.Index.qxd 5/28/03 7:24 PM Page 680

680 Index

initiating DHCP backup from, 343–344 bootcfg/ copy command, 219 overview of, 330 bootcfg/ dbg1394 command, 219–220 reconciling scopes after restoring data- bootcfg/ debug command, 220–221 base, 345–346 bootcfg/ default command, 221 troubleshooting DCHP servers, 337 bootcfg/ delete command, 222 dhcploc command, 334, 519 bootcfg/ ems command, 222–223 Diagnostic tools. see monitoring/diagnostic bootcfg/ query command, 223 tools bootcfg/ raw command, 223–224 Dial-in properties, 396 bootcfg/ rmsw command, 224–225 Dial-Out Hours, 434 bootcfg/ timeout command, 225 Dictionaries, 207 bootcfg tool, 217–218 Digital signatures, 627 common stop messages, 246–250 Digital Video Disks (DVDs) dmdiag command, 225–226 Troubleshooting Wizard, 115 fsutil behavior command, 226–229 command, Recovery Console, 155 fsutil command, 226 Directories fsutil dirty command, 229 Directory Consolidation, 640 fsutil file command, 229–230 Directory Services Restore Mode, 152 fsutil fsinfo command, 230–231 systeminfo providing location of, 107 fsutil hardlink command, 231–232 Dirty bits fsutil objectid command, 232–233 chkdsk, 53 fsutil quota command, 233–234 fsutil dirty command, 229 fsutil reparsepoint command, 234–235 querying with fsutil dirty, 530 fsutil sparse command, 235–236 dirty command, fsutil, 229, 530 fsutil USN command, 236–239 disable command, 154–155, 164 fsutil volume command, 239 discretionary access control (DACL), ftonline command, 239–240 95–97, 507–509 command, 240–241 Utility, 620 using Disk Management, 242–246 Disk Defragmenter, 57–58 Disk subsystems, architecture, 211–217 Disk Management, 242–246 basic and dynamic disks, 212 dynamic disks with RAID errors, 244 boot sector, 213 failed mirrored volumes, 245 boot.ini file, 213–216 failed RAID 5 volumes, 246 GPT disks, 217 failed spanned or striped volumes, , 212–213 244–245 Master File Table, 216 overview of, 56–57 Disk Volume Scheduler, Diskeeper, 639 status indications, 243 diskfree option, fsutil volume command, Disk management tools, 51–58 239 chkdsk command, 51–52 dismount option, fsutil volume command, chkntfs command, 52–53 239 defrag command, 54–56 Display Filter, Network Monitor, 78 Disk Defragmenter, 57–58 Display tab, Remote Desktop Connection, Disk Management, 56–57, 242–246 138 Disk quotas, 233–234 Displays Disk subsystems, 211–250 Display Troubleshooting Wizard, 115 boot sector/MBR problems, 241–242 Program Compatibility Wizard test, 170 bootcfg/ addsw command, 218–219 troubleshooting, 166–167 Wolf.Index.qxd 5/28/03 7:24 PM Page 681

Index 681

Distributed File System. see DFS recursion and iteration, 252–253 (Distributed File System) resource records, 254–255 #DIV?0!, Excel error codes, 191 round robin, 261–262 dmdiag command, 225–226, 519–520 terminology, 19–22 DNS (Domain Name Service) enhancements, AD uninstallation, 483 263 clearcache command, 268–269 zone delegation, 260 clients, 287–288 DNS proxy debug logging, 264–265 netsh routing ip dnsproxy, 414, 559 DHCP integration, 324 troubleshooting NAT server, 432 DNS snap-in, 263–264 DNS Security Extensions (DNSSEC), 263 dnscmd command, 267–268, 520–522 DNS snap-in dnslint command, 270–272, 522–523 debug logging, 264–265 domain controllers, 481–482 event logging, 265–266 event logging, 265–266 monitoring, 267–268 command, 274 overview of, 263–264 hierarchy, 255–256 updating DNS zone data, 289 ls command, 274–276 DNS suffix, 281, 294 lserver command, 276–277 DNS zones monitoring, 267 common error events, 294 nslookup command, 272-274, 283–287, configurations, 258–259 574–581 delegation, 260, 270–272, 284–285 Outlook configuration, 194 displaying with ls command, 274–275 proxy configuration, 413 overview of, 258–260 query types, 22 resource records, 254–255 RAS server, 427 transfers, 259–260, 292–293 RAS server network, 429 troubleshooting DNS clients, 288 replication, 485–486 types of, 258 server subcommand, 277 updating data, 289 servers, 289–294 dnscmd command set subcommand, 277–282 clearcache command, 268–269 statistics operation, 269–270 overview of, 267–268 view command, 282 reference guide, 520–522 VPN resource access, 440 statistics operation, 269–270 WINS clients, 313–315 dnslint command, 270–272, 522–523 DNS (Domain Name Service), architecture, Document Recovery, 174, 176 251–263 Documentation, 31–34, 38–39 advanced features, 260–262 Domain controllers BIND secondaries, 262 Active Directory Sites and Services caching-only server, 254 snap-in and, 458–459 client considerations, 262 metadata cleanup, 472–474 DNS hierarchy, 255–256 nltest, 465–466, 573–574 DNS zones, 258–260 overview of, 447–448 dynamic updates, 252 renaming, 452 forwarders, 253 troubleshooting, 480–484 name resolution process, 256–258 Domain DFS root, 351 netmask ordering, 262 Wolf.Index.qxd 5/28/03 7:24 PM Page 682

682 Index

Domain Name Service. see DNS (Domain testing servers with dnslint, 255 Name Service) E-mail Accounts dialog box, Outlook, 194 Domain naming master FSMO, 448 /e switch, 96 Domains EAP (Extensible Authentication Protocol), Active Directory Domains and Trusts 394 snap-in, 457–458 Request messages functional levels, 450–451 command, 69 metadata cleanup, 472–474 ping command, 71–72 overview of, 444–446 tracert command, 73 renaming, 452 EFI (Extensible Firmware Interface), 38 Drag-and-drop, AD, 452 EFS (), 97–98, Driver Rollback, Device Manager, 162 524–525 Driverquery command efsinfo command, 97–98, 524–525 options, 129 Emergency Management Services (EMS), overview of, 101–102 222–223, 505 reference guide, 523–524 Emergency Repair Disks (ERDs), 128–129 sample output, 130–131 Emergency Undelete, Executive Software, Drivers. see Device drivers 642 Drives ems command, bootcfg, 222–223, 505 Drives and Network Adapters EMS (Emergency Management Services), Troubleshooting Wizard, 115 222–223, 505 retrieving info with fsutil fsinfo, Enable Boot Logging option, 158–159 230–231, 532 enable command, Recovery Console, 153 Duct tape mentality, 42–43 Encrypting File System (EFS), 97–98, dump command, Netsh RAS Diagnostics, 524–525 403, 550 Encryption dump command, netsh wins command, RAS methods, 394–395 306, 317, 566–567 repairing OS installation and, 156–157 DVDs (Digital Video VPNs for, 396–397 Disks)Troubleshooting Wizard, 115 Enterprise Admins group, 337, 352 Dynamic disks, 212, 244 Environment Dynamic Host Configuration Protocol. see analyzing, 34–38 DHCP (Dynamic Host Configuration displaying with dump command, 403 Protocol) Environment tab, AD Users and Dynamic updates Computers, 384–385 DHCP audit events, 332 ERDs (Emergency Repair Disks), 128–129 DHCP options for, 291–292 Error messages. see also Device errors; DNS clients, 288 Stop errors (blue screens) overview of, 252 Access databases, 183, 184 replication, 485–486 AD replication, 485–486 audit logging, 331–333 boot sector, 241 E disk-related stop messages, 246–250 E-mail DNS, 293–294 Outlook configuration, 192–195 DNS clients, 288 Remote Assistance, 139 domain controllers, 481–482 screenshots of error messages, 33 MBR, 241 Wolf.Index.qxd 5/28/03 7:24 PM Page 683

Index 683

nslookup, 273–274 Extensible Authentication Protocol (EAP), PowerPoint, 195 394 printing, 378 Extensible Firmware Interface (EFI), 38 RAS client connections, 425 External network numbers, NWLink, 13 reading, 31 External trusts, 445 screenshot of, 33 WINS clients, 313–314 Word, 206 F Error Reporting, 134–135 Fast compression, TightVNC Viewer, 123 Evaluate Formula, Excel, 192 Fast User Switching, 169 Event logging FAT file systems eventquery, 102–104, 525–526 checking with fsutil behavior, 226–227, overview of, 265–266 529–530 troubleshooting with, 32–33 FAT File System (Stop 0x00000023), WINS, 304–305 621 Stop 0x00000023 error, 246–247 overview of, 110–111 Fault tolerance recovering DHCP database, 343 ftonline command, 239–240, 538 troubleshooting with, 32 WINS enhancements, 298 eventquery command, 102–104, 525–526 Fax Console, 165–166 Events Faxes, 164–166, 427 DNS error, 293–294 FAZAM 2000, 648–652 eventquery, 102 GP Administrator, 649–650 eventtriggers command, 104–107, 526–529 GP Auditing and Diagnostics, 650 Excel, 188–192 GP Policy and Planning, 650 cell error codes, 191 GP Repository, 649 corrupted spreadsheets, 188–190 installing, 650–651 invalid formulas, 191–192 overview of, 648–649 Open and Repair, 176–178 tool access, 651–652 Executive Software, Diskeeper, 637–642 File and Print Sharing Troubleshooting Analysis Report, 639 Wizard, 115 analysis vs. defragmentation, 638 file command, fsutil, 229–230, 531 defragmentation modes, 639–640 File Replication Service. see FRS (File fitting pieces together, 638 Replication Service) Frag Guard, 641 File System Utility. see fsutil command getting the most from, 641 Files Graphic Analysis Display, 639 fsutil file command, 229–230, 531 measuring fragmentation, 638 fsutil sparse, 235–236, 535–536 Executive Software, Sitekeeper, 643–648 ownership of, 98–99, 602 hardware inventory, 647–648 recovering with recover command, 598 license compliance, 645–647 recovering with Undelete, 642 PushInstaller, 644–645 Status System Process Terminated (Stop Executive Software, Undelete, 642 0x0000021A), 632–633 exit command, nslookup, 274, 575 system protected, 600 Experience tab, Remote Desktop viewing, 282, 581 Connection, 139 files command, ntdsutil tool, 469–472 export command, dfsutil, 357, 515 Filtered status, portqry output, 421 Wolf.Index.qxd 5/28/03 7:24 PM Page 684

684 Index

Filters DNS clients, 287 eventquery, 103, 526 DNS mapping IP addresses to, 19–22 RIP, 435 NAT servers, 432 taskkill, 87, 603, 605 NetBIOS names vs., 18 , 89 servers, 381 WINS enhancements to, 298 printer connection problems, 380 FIN messages, 68 RAS servers, 427 Finger service scans, 670 Frag Guard, Diskeeper, 641 Firmware Fragmentation, 638–639, 641 analyzing currently installed, 37–38 Frame types, NWLink (IPX/SPX), 12 Attempted Write to Read Only Memory Freeware, 117–124 (Stop 0xBE), 628 FRS (File Replication Service) Code 29 error, 613 overview of, 351 Code 35 error, 614 status of, 484 Code 43 error, 617 troubleshooting with health_chk, Hardware Interrupt Storm (Stop 362–364, 541–542 0x000000F2), 631–632 fsinfo command, fsutil, 230–231, 532 KMode Exception Not Handled (Stop FSMOs (Flexible Single-Master 0x0000001E), 620 Operations) shutdown failures and, 158 defined, 447 fixboot command, 241–242 transferring and seizing roles, 474–475 fixmbr command, 241–242 troubleshooting domain controllers, 481, Flexible Single-Master Operations. see 483 FSMOs (Flexible Single-Master fsutil commands, 528–529 Operations) behavior, 216, 226–229, 529–530 Floppy disks, 242 dirty, 229, 530 Follow up, 44 file, 229–230, 531 Fonts, 208 fsinfo, 230–231, 532 Forests hardlink, 231–232, 533 functional levels, 451–452 objectid, 232–233, 533–534 operations master roles, 448 quota, 233–234, 534 overview of, 444–446 reparsepoint, 234–235, 535 Windows Server 2003 enhancements, sparse, 235–236, 535–536 453 USN, 236–239, 536–537 Formulas volume, 239, 538 isolating and resolving errors, 191–192 ftonline command, 239–240, 538 recovering Excel spreadsheet data, 190 FullArmor. see FAZAM 2000 Forward lookup zones fully-qualified domain names. see FQDNs configuring, 258–259 (fully-qualified domain names) defined, 258 Functional levels, AD, 449–452 verifying with nslookup, 283 Forwarders, DNS name resolution process, 256, 258 G overview of, 253 Gateway Services for NetWare. see GSNW Windows Server 2003 enhancements, (Gateway Services for NetWare) 263 getmac command, 60, 538–539 FQDNs (fully-qualified domain names) Ghost Wolf.Index.qxd 5/28/03 7:24 PM Page 685

Index 685

compression features of, 352 shutdown failures, 158–159 reimaging with, 42 Hard links, 231–232, 533 Global catalogs, AD Hard page faults defined, 444 monitoring with pfmon, 83–85, forest functional levels, 451–452 585–586 Windows Server 2003 enhancements, monitoring with System Monitor, 85 453 hardlink command, fsutil, 231–232, 533 Globally Unique Identifier Partition Table Hardware (GPT) disks, 217 Attempted Write to Read Only Memory GPOs ( Objects) (Stop 0xBE), 628 block inheritance vs. No Override, Bad Pool Caller (Stop 0xC2), 629 489–490 Data Bus Error (Stop 0x0000002E), common problems and solutions, 490 621–622 FAZAM 2000 management of, 648–651 Device Manager and, 159–164 gpupdate, 464–465, 540–541 disk-related stop messages, 246–250 loopback processing, 488–489 display problems, 167 overview of, 449 Executive Software’s Diskeeper, RSoP, 463–464, 476–480, 539–540 647–648 troubleshooting, 482–483, 487–491 fax problems, 165 gpresult command, 463–464, 539–540 firmware problems, 37–38 GPT (Globally Unique Identifier Partition Hardware Interrupt Storm (Stop Table) disks, 217 0x000000F2), 631–632 gpupdate command, 464–465, 540–541 inventorying with Sitekeeper, 647–648 Grammar files, Detect and Repair, 209 Kernel Data Inpage Error (Stop Graphic Analysis Display, Diskeeper, 638, 0x0000007A), 625 639 MSinfo32 and, 112 Groups shutdown failures, 158 domain functional level comparisons, hardware abstraction layer (HAL) error 450–451 message, 625 failure to change membership, 483 Hardware Compatibility List (HCL), 165 Support Tools installation MSI file, 48 Hardware Troubleshooting Wizard, 115 GSNW (Gateway Services for NetWare) Hardware Update Wizard, 163 NWLink (IPX/SPX) protocol, 11–13 HCL (Hardware Compatibility List), 165 overview of, 353–354 health_chk commands, 362–364, 541–542 troubleshooting integration, 391–392 Heartbeat, 90 and Support Center, 49–50, 75 History, documenting, 31–34 H Home Networking Troubleshooting H-node (Hybrid node), 23 Wizard, 115 Hackers, 113 Host (A) records HAL (hardware abstraction layer) error defined, 254 message, 625 DNS clients, 287–288 Hard disks. see also chkdsk command forward lookup zones containing, 258 configuration info, 225–226, 519–520 RAS server networks, 428 Data Bus Error (Stop 0x0000002E), RAS servers, 427 621–622 round robin and, 261–262 defragmenting, 54–56, 513 Host ID, 14–16 Wolf.Index.qxd 5/28/03 7:24 PM Page 686

686 Index

hostname command, 60, 543 Inter-Site Transports folder, 458–459 Hosts file Interfaces. see also show interface com- defined, 19 mand LMHosts file vs., 22 DHCP relay agents, 433 overview of, 21 NAT server, 432 Hotfixes, 35, 107 RAS server, 427 Hotmail, 35 routing, 420 Hub-and-spoke replication topology, 301 RRAS snap-in, 424 Hung sessions, 65–67 Internal network numbers, 12–13 Hybrid node (H-node), 23 Internet Authentication Services (IAS), 402–403, 543 Internet Connection Sharing (ICS), 116, I 167–169 I/O transfer error, 622–623 , 112, 116 IAS (Internet Authentication Services), Internet Group Management Protocol 402–403, 543 (IGMP), 413–416, 559–561 iasparse command, 402–403, 543 Internet Mail Access Protocol (IMAP), - ICS (Internet Connection Sharing), 116, sion 4, 255 167–169 Internet Packet Exchange/Sequenced ICS Troubleshooting Wizard, 167–169 Packed Exchange (IPX/SPX) protocol, / id switch, 221, 222 11–13 IGMP (Internet Group Management interrupt request level (IRQL), 619, 629 Protocol), 413–416, 559–561 Interrupt storm errors, 631–632 IMAP (Internet Mail Access Protocol), ver- IP addresses sion 4, 255 APIPA and, 26–27 import command, dfsutil, 357–358, arp command, 59 515–516 conflict detection, 328–329 Import Objects dialog box, 186 DHCP clients, 335 importroot command, dfsutil, 358–359, 516 DHCP leases, 24–25 Inaccessible Boot Device error, 249–250 DHCP-RAS integration, 339–341 Incremental Zone Transfer (IXFR), 260 DHCP relay agents, 26, 342–343 InetOrgPerson object, 450–451 DHCP reservations, 25 iNetTools, 670–672 DHCP scopes, 25, 338–339 Infrastructure master FSMO, 448, 483 DHCP server problems, 337 init backup command, 309, 568–569 DNS clients, 287–288 init commands, netsh wins server, 309–311, DNS error events, 293–294 568–570 DNS name resolution, 19–22 compact, 309, 319, 321, 569 exclusions, 25 pull, 310, 569 Outlook configuration, 194 push, 310, 569–570 RAS server, 427 replicate, 310, 570 round robin, 261 restore, 310, 570 structure of, 13–16 Input Devices Troubleshooting Wizard, 116 TCP/IP routing, 17–18 Inside Active Directory (Kouti and WINS clients, 313 Seitsonen), 444 WINS resolving NetBIOS names to, Installed Software tab, TechTracker ITX, 23–24 663 WINS servers, 316 Wolf.Index.qxd 5/28/03 7:24 PM Page 687

Index 687

IP routing Link Control Protocol (LCP) extensions, demand-dial routing, 434 395 NAT server, 432 Linked value replication, Active Directory, overview of, 430 451–452 RAS server network, 428–429 List Drivers (prndrvr.vbs-l), 368–369, RRAS snap-in, 424 592–593 VPN connections, 438, 440 Listen mode, TightVNC Viewer, 123 IP Security logs, 408–409 Listening status, portqry output, 421 IP Subnet Calculator, 118–119 listsvc command, 153 command LKGC (Last Known Good Configuration), analyzing network configuration, 36 150, 167 APIPA and, 27 LMHosts file, 19, 22 DHCP clients, 335 Load balancing, 261 DHCP-RAS integration, 340–341 Local Resources tab, Remote Desktop DHCP relay agents, 342 Connection, 138 domain controllers, 482 Log files resolver cache, viewing, 20 AD, 469–472 IPMonitor, Tsarfin, 665–667 Event Viewer, 111 IPX frame types, 391–392 RAS Diagnostic Report on, 408–409 ipxroute command, 364–365, 544 RAS tracing, 404–405 IRQL (interrupt request level), 619, 629 recovering Excel spreadsheet data, 190 Iterative queries, 22, 252–253, 256–257 Setup, 182–183 IXFR (Incremental Zone Transfer), 260 Sitekeeper, 643–644 Log on domain controllers and, 482–483 K recovery from startup failure, 150 Keep It Simple Stupid (KISS) rule, 41 updating timestamps, 450–451 Kernel data, 248, 249, 624 Logging KISS (Keep It Simple Stupid) rule, 41 audit, 330–333 boot, 151, 158–159 status of Connection Manager, 406 L Loopback processing, 488–489 L-S-D-OU rule, 488 LPD (line printer daemon) service, 365, L2TP (Layer 2 Tunneling Protocol), 397, 545 438–439, 441 lpq command, 365, 545 LAN routing, 430, 432, 434 LPR (line printer remote) service, 365 Last Known Good Configuration (LKGC), ls command, nslookup, 274–276, 575–576 150, 167 lserver command, nslookup, 276–277, 576 LCP (Link Control Protocol) extensions, 395 M .ldb files, 184–185 Leases. see DHCP leases M-node (Mixed node), 23 Licensing, 645–647, 650–651 MAC (Media Access Control) address line printer daemon (LPD) service, 365, arp, 59–60 545 DHCP leases, 24–25 line printer remote (LPR) service, 365 DHCP reservations, 25 getmac, 60–61, 538–539 Wolf.Index.qxd 5/28/03 7:24 PM Page 688

688 Index

Macros, 187 Software Installation (MSI) files, 174 Mail Exchange (MX) records, 255 Systems Management Server (SMS), 76 Mail servers, 194–195, 272 Windows 2000. see Windows 2000 Manage Documents permission, 350 Windows Advanced Option menu, 149 Manage Printers permissions, 350 Windows Backup program, 128 Manual Defragmentation, Diskeeper, 639 , 182–183 Mapping, dependency diagrams, 38–39 Windows Licensing Agreement, 157 MBR (Master Boot Record), 212–213, Windows NT, 449 241–242 Windows Server 2003. see Windows Media Access Control. see MAC (Media Server 2003 Access Control) address Windows servers, 10 Memory, errors Word. see Word Bad Pool Caller (Stop 0xC2), 628–629 Migrate-on, 316 Data Bus Error (Stop 0x0000002E), Migration, 338–339 621–622 Mirrored volumes (RAID 1), 212, 245 Driver Used Excessive PTES (Stop MIT Athena Hesiod class, DNS records, 0x000000D8), 630 277 Kernel Data Inpage Error (Stop Mixed mode domains, AD, 449–450 0x0000007A), 625 Mixed node (M-node), 23 KMode Exception Not Handled (Stop MMCs (Microsoft Management Consoles) 0x0000001E), 620 Active Directory Domains and Trusts, No More System PTES (Stop 457–458 0x0000003F), 622–623 Active Directory Sites and Services, Stop 0x00000050, 247–248 458–459 Stop 0x00000077, 248–249 Active Directory Users and Computers, Memory, monitoring 456–457 memsnap, 79, 545 configuring, 49 System Monitor, 92–93 DHCP snap-in, 330 systeminfo, 107 DNS snap-in, 263–264 memsnap command, 79, 545 RRAS snap-in, 342, 424–425 metadata cleanup commands, ntdsutil, Terminal Services Manager snap-in, 376 472–474 WINS snap-in, 303 MFT Defragmentation, Diskeeper’s Boot- Modem Troubleshooting Wizard, 116 Time Defragmentation, 640, 641 Modems MFT (Master File Table), 216, 227–229 demand-dial routing, 433–434 MFT Zone, 216, 227–229 enabling/disabling tracing, 410 Microsoft event logging, 409 CHAP (MS-CHAP), 394 fax problems and, 165 CHAP v2 (MS-CHAP v2), 394 RAS client connections, 426 Client Services for NetWare, 11 RAS Diagnostic Reports, 408–409 Gateway Services for NetWare, 11 RAS servers, 427 Hardware Compatibility List, 629 Modules, 187 Management Consoles. see MMCs Monitoring/diagnostic tools (Microsoft Management Consoles) disk management. see disk management MSN Messenger, 139 tools newsgroups, 40 freeware, 117–124 Remote Installation Service, 42 Wolf.Index.qxd 5/28/03 7:24 PM Page 689

Index 689

network monitoring. see Network moni- configuration, 416, 561 toring/troubleshooting tools DHCP Allocator settings, 411–412, , 47–51 556–557 performance monitoring. see DNS proxy configuration, 414, 559 Performance monitoring overview of, 399 security management. see Security routing on RRAS servers, 430–432 system management. see System man- Native mode domains, Active Directory, agement tools 449–450 troubleshooting wizards, 115–117 nbstat command, 61–62, 546 more command, Recovery Console, 155 Neighbors tab, RIP, 435 Motherboards, 621–622, 627 Nesting groups, 450–451 Mouse problems, 206 continue command, 64, 548 MS-CHAP (Microsoft CHAP), 394 net pause command, 64, 548 msconfig command, 131–133 Net Services commands, 64–67 msicuu command, 133–134, 158 net session, 66–67 MSinfo32, 38, 111–113 net start | stop | pause | continue, 64 MSN Messenger, 139 net statistics, 65–66 MSO####.acl files, 207–208 net view, 67 multi, disk management, 214 net session command, 66–67, 549 Multicast addresses, 326–327 net start command, 64, 548 Multicast scopes, 326–327 net statistics command, 65–66, 548–549 Multilink, 395 net stop command, 64, 548 Multimedia and Games Troubleshooting net view command, 67, 549–550 Wizard, 116 NetBIOS cache, 22 Multinet, 325 NetBIOS Enhanced User Interface MUP (multiple UNC provider) cache, 360 (NetBEUI), 10 MX (Mail Exchange) record , 255 NetBIOS name resolution FQDNs vs., 18 nbstat, 62 N WINS, 23–24 #N/A, Excel error codes, 191 WINS servers, 315–316 #NAME, Excel error codes, 191 NetBT (NetBIOS over TCP/IP), 61–62, Name resolution 546 broadcasts, 19, 22 Netclient program, 119–121 DNS, 19–22, 256–258 netdiag command DNS clients, 262, 287–288 domain controllers, 481–482 failures, 290 overview of, 62–64 hosts file, 19, 21 reference guide, 547–548 LMHosts file, 19, 22 NetInfo, Tsarfin, 665–667 NetBIOS, 18, 23–24 Netmask ordering, 252, 262 nslookup, 272–273 Netperf, 119–121 Outlook configuration, 194 Netserver program, 119–121 overview of, 18–19 netsh diag gui command, 75 ping verification of, 71–72, 586–587 netsh (Netshell) commands, 298 WINS, 23–24 Netsh RAS Diagnostics, 402–411 Name Server (NS) record type, 255 dump command, 403, 550 NAT (network address translation) overview of, 549–550 Wolf.Index.qxd 5/28/03 7:24 PM Page 690

690 Index

set cmtracing command, 406, 551 Network address translation. see NAT (net- set modemtracing command, 410, 555 work address translation) set rastracing command, 410, 555 Network Associates Sniffer Pro, 75 set securityeventlog command, 410, 556 Network Diagnostics, 75 set tracefacilities command, 411, 556 Network ID, 14–16 show all command, 404–405, 550–551 Network interface cards (NICs) show cmtracing command, 406, 551 internal network numbers and, 12 show configuration command, 406–407, troubleshooting RIS, 389 552 Network Load Balanced (NLB) clusters, show installation command, 407–408, 261 553 Network Monitor show logs command, 408–409, 554 Active Network Monitor vs., 652–654 show modemtracing command, 409, 555 overview of, 75–78 show rastracing command, 410, 555 Network Monitor Driver, 76–77 show securityeventlog command, 410, Network monitoring/troubleshooting tools, 555 58–75 show tracefacilities command, 411, 556 arp command, 59–60 netsh routing commands, 411–420, getmac command, 60 556–565 hostname command, 60 netsh routing ip autodhcp, 411–412, nbtstat command, 61–62 556–557 Net Services commands, 64–67 netsh routing ip dnsproxy, 414, 559 netdiag command, 62–64 netsh routing ip igmp, 414–416, netstat command, 67–69 559–561 Network Diagnostics, 75 netsh routing ip nat, 416, 561 Network Monitor, 75–78 netsh routing ip ospf, 416–418, 562–563 pathping command, 69–70 netsh routing ip relay, 412–413, ping command, 71–72 557–558 telnet command, 72–73 netsh routing ip rip, 418–420, 564–565 tracert command, 73–74 netsh routing ip routerdiscovery, 420, Network protocols, 9–19 565 accessing network configuration set- overview of, 411, 556 tings, 9–10 netsh wins command, 305–306, 566–567 DHCP overview, 24–27 netsh wins server commands, 306–313 DNS, 19–22 check, 307–308, 567–568 NetBEUI, 10 dump, 306, 566–567 NWLink (IPX/SPX), 11–13 init, 309–311, 568–570 TCP/IP basics, 13–19 overview of, 566 WINS, 23–24 show, 311–313, 570–572 Network Scheduler, Diskeeper, 639–640 netstat command, 67–69, 572–573 Network services, 347–392 NetWare Client Services. see CSNW advanced settings, 349–350 (Client Services for NetWare) Client and Gateway Services for NetWare Gateway Services. see GSNW NetWare, 353–356 (Gateway Services for NetWare) DFS, 351–352, 386–389 Network DFS snap-in, 355 configuration, 36 dfsutil utility, 355–361 Office setup, 180–181 health_chk commands, 362–364 Wolf.Index.qxd 5/28/03 7:24 PM Page 691

Index 691

ipxroute command, 364–365 view command, 282, 581 NetWare integration, 391–392 zone delegation, 284–285 overview of, 5–6, 347 nslookup set commands print services, 348–349 set all command, 277, 577 printer permissions, 350 set class command, 277–278, 577 prndrvr.vbs commands, 365–370 set cmtracing command, 406, 551 query commands, 371–374 set d2 command, 278, 578 Remote Installation Services, 352–353, set debug command, 278, 578 389–390 set defname command, 279, 578 reset session command, 375 set domain command, 279, 578 Terminal Services, 350–351, 383–386 set ignore command, 279, 578–579 Terminal Services Manager snap-in, 376 set port command, 279, 579 Network throughput, 119–121 set querytype, 280, 579 Networking, 9–28. see also network proto- set recurse, 280, 579 cols set retry, 280–281, 579 DHCP, 24–27 set root, 281, 580 DNS name resolution, 19–24 set search, 281, 580 network resources, 27–28 set srchlist, 281, 580 Safe Mode, 151 set timeout, 282, 580 Newsgroups, Microsoft, 40 set vc, 282, 580–581 NICs (network interface cards), 12, 389 Ntbtlog.txt file, 151 NLB (Network Load Balanced) clusters, ntdsutil tool, 467–476 261 authoritative restore, 468–469 nltest command files command, 469–472 domain controllers, 482 group membership changes, 483 overview of, 465–466 metadata cleanup, 472–474 reference guide, 573–574 overview of, 467 uninstalling Active Directory, 483 roles menu, 474–475 No Override, 490 semantic database analysis, 476 Nonauthoritative restore, Active Directory, uninstalling Active Directory, 483 494 NTFS Change Journal, 236–239 Normal.dot Global Template, 202–203 NTFS file systems Not Listening status, portqry output, 421 fsutil behavior, 227, 529–530 NS (Name Server) record type, 255 NTFS File System (Stop 0x00000024), nslookup 621 error messages, 273–274 process-oriented corrective action, 43 exit command, 274, 575 Stop 0x00000024 error, 246–247 forward lookup zones, 283 #NULL!, Excel error codes, 191 ls command, 274–276, 575–576 #NUM!, Excel error codes, 191 lserver command, 276–277, 576 NWLink (IPX/SPX) protocol, 11–13 name resolution, 272–273 external network number, 13 overview of, 272–274, 574–575 frame type, 12 recursive queries, 280 internal network number, 12–13 resource records, 280 overview of, 11 reverse lookup zones, 283 troubleshooting NetWare integration, server command, 277, 576–577 391–392 troubleshooting with, 283–287 Wolf.Index.qxd 5/28/03 7:24 PM Page 692

692 Index

O Operations, net statistics command, 65–66 Operators Object Identifiers (OIDs), 232–233, eventquery, 103, 526 533–534 taskkill, 87, 603 objectid command, fsutil, 232–233, tasklist, 89, 605 533–534 Optimism, 29–30 Octets, 13 optional parameter ([ ]), 51 Office XP, 173–210 Options Registry key, 203–204 Access databases and, 183–188 OSPF Complete Implementation (Moy), Application Recovery, 173–174 435 Automatic Recovery, 174–175 OSPF (Open Shortest Path First) Detect and Repair, 175–176 diagnosing routing, 435–437 Document Recovery, 176 key features of, 398 Excel, 188–192 troubleshooting routers, 416–418, installing/uninstalling with 562–563 PushInstaller, 644 OUs (organizational units), 446 license compliance, 645–646 Outlook, 192–195 Open and Repair, 176–178 (Messaging) Outlook, 192–195 Troubleshooting Wizard, 116 PowerPoint, 195–199 Ownership, 98–99, 602 Setup, 178–183 Word. see Word OIDs (Object Identifiers), 232–233, P 533–534 P-node (Peer node), 23 Online Crash Analysis, 134–135 -p switch, 120 Online Help, 49–50, 556 Packet filtering Open and Repair demand-dial routing, 434 Excel spreadsheets, 189–190 DHCP relay agents, 433 overview of, 176–178 NAT servers, 432 Word applications, 206 RAS server network, 428 Open Shortest Path First. see OSPF (Open router-to-router VPN connections, 441 Shortest Path First) VPN resource access, 440 Operating systems. see also Client-servers VPN server connection, 438 analyzing current environment, 35 Packets boot.ini file, 221, 504 monitoring networks with pathping, default, 222, 504–505 69–71, 584–585 documenting, 31–34 monitoring with Network Monitor, fax compatibility, 164–165 75–78 installation repair, 156–157 truncation errors, 279 monitoring and diagnostic tools, 47–51 Page faults Program Compatibility Wizard test, 170 monitoring with pfmon, 83–85 Remote Installation Services, 352–353 monitoring with System Monitor, 85 versions, viewing with MSinfo32, 112 Page Fault in Nonpaged Area (Stop versions, viewing with systeminfo, 107 0x00000050), 623–624 Operations master, Active Directory Stop 0x00000050 error, 247–248 defined, 447 Page Table Entries (PTEs), 622–623, 630 forests, 448 pagefileconfig commands types of, 448 Wolf.Index.qxd 5/28/03 7:24 PM Page 693

Index 693

change, 80–81, 581–582 Performance, WINS-DHCP integration, create, 81–82, 582 318 delete, 82–83, 583 Permissions. see also Print permissions query, 83, 583–584 DACL and, 96 Pagefiles DFS, 388–389 configuring and managing, 80 Office Setup, 181 Status Image Checksum Mismatch process-oriented corrective action, 43 (Stop 0x00000221), 633–635 Replication Synchronization, 485 Paging File Defragmentation, Diskeeper’s Pessimism, 29–30 Boot-Time Defragmentation, 640, 641 pfmon command, 83–85, 585–586 PAP (Password Authentication Protocol), PIDs, 88–89 394 ping command Partition Knowledge Table (PKT), DFS, Active Directory replication, 484 359 DNS clients, 287 Password Authentication Protocol (PAP), network printer connections, 380 394 Outlook configuration, 194 Passwords overview of, 71–72 configuring domain level, 488 print servers, 381 InetOrgPerson objects and, 450–451 reference guide, 586–587 RIP, 435 WINS replication, 317 router-to-router VPN connections, 441 Ping Scan, iNetTools, 671–672 VPN server connections, 438 pipe symbol (|), 51 pathping command PKT (Partition Knowledge Table), 359 Active Directory replication, 484 pktflush command, dfsutil, 359, 517 overview of, 69–70 pmon command reference guide, 584–585 KMode Exception Not Handled (Stop tracert command vs., 73–74, 606 0x0000001E), 620 WINS replication, 317 overview of, 86 PCI interrupts, 614–615 reference guide, 588 PDC emulator FSMO Point-to-Point Protocol (PPP), 394 overview of, 448 Point-to-Point Tunneling Protocol. see replication, 485–486 PPTP (Point-to-Point Tunneling trusts, 493 Protocol) PDC (primary domain controller), 447 Pointer (PTR) records, 254, 258 Peer node (P-node), 23 Policies, Remote Access, 395 Perfmon (System Monitor), 92–93 POP (Post Office Protocol), version 3, 255 Performance monitoring, 79–94 portqry command, 420–422, 588–589 DHCP, 324 Ports memsnap command, 79 Active Ports, 654–655 pagefileconfig command, 80–83 debugging with bootcfg /dbg1394, pfmon command, 83–85 219–220, 503 pmon command, 86 DNS errors, 294 System Monitor, 92–93 iNetTools, 670 , 94 Netserver, 120 taskkill command, 86–88 netstat monitoring, 67–70, 572–573 tasklist command, 88–89 portqry, 420–422, 588–589 uptime command, 90–91 printer, 348 Wolf.Index.qxd 5/28/03 7:24 PM Page 694

694 Index

Remote Assistance connections, 139 shared printers, 379 set port command, 279 Printers, 376–383 Telnet sessions, 73 advanced settings, 349–350 Terminal Services server connections, all-in-one, 164–166 383 common problems, 377–378 VPN, 439 defined, 348–349 zone transfers, 292–293 driver management, 365–369 Post Office Protocol (POP), version 3, 255 errors when printing in Word, 206 PowerPoint, 195–199 listing, 369–370, 593 PPP (Point-to-Point Protocol), 394 pausing and resuming, 370–371 PPTP (Point-to-Point Tunneling Protocol) permissions, 350 router-to-router VPN connections, 441 Printing Troubleshooting Wizard, 116 VPN and, 397 prnqctl.vbs, 370–371, 594 VPN server connections, 438–439 problems with network, 378–383 Presentations, PowerPoint, 195–199 terminology, 348–349 primary domain controller (PDC), 447 test pages, 370–371, 377 Primary restore, Active Directory, 494 prndrvr.vbs commands, 365–369, 589–593 Primary zones, DNS, 258 overview of, 365–366, 589–590 Print devices prndrvr.vbs-a (Add Driver), 366–367, common problems, 378 590–591 defined, 348 prndrvr.vbs-d (Delete Driver), 367–368, printing jobs, 383 591–592 servers, 382 prndrvr.vbs-l (List Drivers), 368–369, Print permissions 592–593 common problems, 378 prndrvr.vbs-x(Remove All Unused defined, 350 Drivers), 369, 593 print servers, 381 prnmngr.vbs command, 369–370, 593 shared printers, 379 prnqctl.vbs command, 370–371, 594 Print pooling, 348 Process activity, 86–88 Print queues process command, query commands, defined, 348 371–372, 595 prnqctl.vbs, 370–371 Process exception code, 626 spool folder location, 381–382 Process-oriented corrective action, 43–44 status checks, 365, 545 Processes, troubleshooting, 30–31 Print servers Processor type, 107 defined, 348 Product IDs, 107 network printer connections, 379–380 Program Compatibility wizard, 170–171 networking problems with, 381 Program name installation, 146 problems sending job to print device, Programs tab, Remote Desktop 382 Connection, 139 Printer drivers Protected files, 108–109 common problems, 378 Proxy, WINS, 302 errors when printing in Word, 206 PTEs (Page Table Entries), 622–623, 630 installing additional, 379 PTR (Pointer) record type, 254, 258 managing with prndrvr.vbs, 365–369, pull command, init, 310, 569 589–593 Pull replication print devices and, 348 manually initiating, 310 Wolf.Index.qxd 5/28/03 7:24 PM Page 695

Index 695

overview of, 299 Unexpected Kernel Mode Trap (Stop show pullpartnerconfig command, 312, 0x0000007F), 626–627 572 RAS (Remote Access Server) showing list/properties of partners, accessing resources on/beyond, 340–341 311–312 integration with DHCP, 339–340 troubleshooting, 317 troubleshooting, 427–429 purgemupcache command, dfsutil, 360, 517 VPN server connection problems, 439 purgewin2kstaticsitetable command, dfsu- raw command, bootcfg, 223–224, 506 til, 360, 517 rdisk utility, 129, 214 push command, init, 310, 569–570 Readme files, 40 Push replication Reconcile All Scopes dialog box, 345 manually initiating, 310 records, WINS, 298 overview of, 299 recover command, 178, 240–241, 598 show pushpartnerconfig command, 312, Recover Formulas command, 190 572 Recovery showing list/properties of partners, Active Directory, 494 311–312 client-initiated, 145 troubleshooting, 317 recover command, 178, 240–241, 598 PushInstaller, Executive Software, 644–645 server-initiated, 143–144 Undelete command, 642 Recovery Bin, Executive Software, 642, Q 643 Queries, DNS, 22, 289–290 Recovery Console, 152–156 query commands, 371–374, 594–597 accessing, 155–156 bootcfg commands, 223, 506 boot sector/MBR errors, 241–242 pagefileconfig commands, 83, 583–584 disable command, 154–155 process, 371–372, 595 disabling services/drivers, 152–156 session, 372–373, 596 display problems, 167 termserver, 373–374, 596–597 enable command, 153 user, 374, 597 listsvc command, 153 quota command, fsutil, 233–234, 534 Mismatched HAL (Stop 0x00000079), 625 other commands, 155 R overview of, 152 RAID, 212, 244–246 shutdown failure and, 159 RAM Recursive queries Data Bus Error (Stop 0x0000002E), defined, 22 621–622 name resolution process, 256–257 MSinfo32, 112 nslookup for, 280 Page Fault in Nonpaged Area (Stop overview of, 252–253 0x00000050), 623–624 #REF!, Excel error codes, 191 pfmon, 83–85 Refresh Interval, DNS zones, 289 Status Image Checksum Mismatch Registry (Stop 0x00000221), 633–635 Code 19 device error, 611–612 Stop 0x00000050 error, 247–248 options tool, 204–205 System Monitor, 92–93 RAS Diagnostic Report, 407–408 rebooting system after using fsutil, 226 Wolf.Index.qxd 5/28/03 7:24 PM Page 696

696 Index

system hive errors, 618–619 Replication Partners folder, WINS snap-in, Reimaging, 42 303 Relationships, WINS, 299–301 Replication Synchronization permission, Relay Agents. see DHCP relay agents 485 Remote Access Policies Replication, WINS overview of, 395 configuring, 299–301 RRAS snap-in, 425 enhancements, 298 VPN server connection problems, 439 netsh wins server commands, 570–572 Remote Access Profiles, 396 push/pull, 310–312, 317 Remote Access Server. see RAS (Remote Replmon, 476, 484–487 Access Server) Reports, Access, 186–187 Remote access VPNs, 437, 438–440 required parameter (< >), 51 Remote Assistance Reservations, DHCP, 25 defined, 135 Reset session command, 375 overview of, 139–140 Resolver cache, 20–21 remotely configuring pagefiles, 80 resource kit tools. see RK (resource kit) Remote Desktop tools connecting to remote system, 137–139 Resource records connections, 136–137 nslookup, 280 defined, 135 queries, 274–276 Terminal Services and, 350–351, 376 types, 254–255 TightVNC compared with, 124 verifying presence of SRV, 283–284 Remote Desktop Connection dialog box, Resources 138 IP subnetting tutorial, 16 Remote Install tab, Remote Installation Microsoft newsgroups, 40 Services, 389 networking fundamentals, 27–28 Remote Installation Services. see RIS Restarts, 90–91 (Remote Installation Services) restore command, init, 310, 570 Remote Installation Services Setup Wizard, Restores 352, 389 conflict detection following, 328–329 Remote Storage Service (RSS), 235 System Restore, 146–149 Remote Task Manager. see RTM (Remote Windows 2003 DHCP enhancements, Task Manager) 324 Remove All Unused Drivers (prndrvr.vbs- Resultant Set of Policy. see RSoP x), 369, 593 (Resultant Set of Policy) reparsepoint command, fsutil, 234–235, Reverse lookup zones 535 configuring, 258–259 replicate command, init, 310, 570 defined, 258 Replication, Active Directory nslookup, 283 forest functional levels, 451–452 WINS, 287 Replmon, 476 RID master FSMO, 448, 483–484 sites boundaries, 447 RIP routing protocols troubleshooting, 484–487 key features, 398 Windows Server 2003 enhancements, routing on RRAS servers, 435 453 troubleshooting, 418–419, 564–565 Replication Partners dialog box, WINS, version 2, 398 316 RIS (Remote Installation Services) Wolf.Index.qxd 5/28/03 7:24 PM Page 697

Index 697

overview of, 352–353 portqry command, 420–422 reimaging with, 42 RAS, 425–429 troubleshooting, 389–390 RIP, 435 RK (resource kit) tools route command, 422–424 installing, 48–49 RRAS snap-in, 424–425 Support Tools compared to, 48 VPN access, 437–441 tools included in, 47 WINS enhancements, 298 tracking with uptime, 90–91 RRAS (Routing and Remote Access rmsw, bootcfg commands, 224–225, Service), architecture, 393–399 506–507 LCP extensions, 395 roles menu, ntdsutil tool, 474–475, 483 multilink, 395 Root names, 281 NAT, 399 Root zone, DNS, 256–258, 290, 294 Remote Access Policies, 395 Round robin, 261–262, 263 Remote Access Profiles, 396 route command, 422–424, 599–600 Remote Access Server, 394–395 Router-to-router VPNs, 437, 440–441 routing protocols, 398–399 Routing User Dial-in properties, 396 Internet Connection Sharing, 167 VPNs, 396–397 NetBEUI limitations, 10 RRAS snap-in netsch routing. see netsh routing com- DHCP relay agents, 342, 433 mands overview of, 424–425 pathping command, 69–70, 584–585 RAS servers, 427 protocols, 398–399 RSoP (Resultant Set of Policy) route command, 599–600 FAZAM 2000 vs., 648 RRAS. see RRAS (Routing and Remote GPO troubleshooting with, 490 Access Service) gpresult, 463–464, 539–540 TCP/IP, 17–18 loopback processing with, 489 tracert command, 73–74, 606 overview of, 476–480 Routing and Remote Access Service. see RSoP Wizard, 477–479 RRAS (Routing and Remote Access RSS (Remote Storage Service), 235 Service) RTM (Remote Task Manager) Routing tables installing, 658–659 ipxroute, 364–365, 544 overview of, 658 TCP/IP routing, 17 querying state of remote systems, 660 troubleshooting, 430 remotely installing, 659–660 RRAS (Routing and Remote Access Service), 429–437 atmadm command, 399–402 S demand-dial routing, 433–435 Safe Mode DHCP relay agents, 432–433 with Command Prompt, 151 DHCP user class for, 328 display problems and, 167 general problems, 429–430 with networking, 151 iasparse command, 402–403 opening Support.dot template in, 200 NAT, 430–432 overview of, 150–151 Netsh RAS Diagnostics, 402–411 testing Office Setup in, 181 netsh routing commands, 411–420 sc command, 484 OSPF, 435–437 Schedule Scan Wizard, Sitekeeper, 644 Wolf.Index.qxd 5/28/03 7:24 PM Page 698

698 Index

Schema, Active Directory, 444, 459–460 domain controllers, 481 Schema cache, updating, 492 OS state, 35 Schema master FSMO, 448, 492 uptime, 90–91 schtasks command, 55 Service (SRV) record type, 255 Scopes. see DHCP scopes Services. see also Applications Screenshots, 33 disabling, 132, 152–156 Scripts, 80 enabling, 132 scsi, disk management, 214 shutdown failures and, 158 SCSI stop errors, 625, 625–626 viewing configuration with MSinfo32, Secondary zones, DNS, 258 112 Security SEs (system engineers), 111–112 cacls command, 95–97 session command, query commands, domain controllers and, 447 372–373, 596 efsinfo command, 97–98 Sessions Event Viewer, 111 net session command, 66–67, 549 logging, 410 net statistics command, 65–66, 548–549 management tools, 95–101 set all command, nslookup, 277, 577 principals, 483–484 set class command, nslookup, 277–278, RAS Diagnostic Report, 408–409 577 RAS server logging, 410 set cmtracing command, nslookup, 406, Security Configuration and Analysis 551 tool, 99–101 set d2 command, nslookup, 278, 578 Security Templates, 101 set debug command, nslookup, 278, 578 Status System Process Terminated (Stop set defname command, nslookup, 279, 578 0x0000021A), 632–633 set domain command, nslookup, 279, 578 takeown command, 98–99 set ignore command, nslookup, 279, Telnet service and, 73 578–579 Security Configuration and Analysis tool, Set It and Forget It, Diskeeper, 639, 641 99–101 set modemtracing command, 410, 555 Semantic database analysis tool, ntdsutil, set port command, nslookup, 279, 579 476 set querytype command, nslookup, 280, Serial Line Interface Protocol (SLIP), 394 579 Server-initiated recovery, Shadow Copy, set rastracing command, 410, 555 143–144 set recurse command, nslookup, 280, 579 Server Status, WINS snap-in, 303 Set Registry Option dialog box, 204–205 Servers. see also Domain controllers set retry command, nslookup, 280–281, Active Server Watcher, 656–657 579 DHCP. see DHCP servers set root command, nslookup, 281, 580 DNS, 289–294 set search command, nslookup, 281, 580 NAT, 431–432 set securityeventlog command, 410, 556 net statistics, 65–66, 548–549 set srchlist command, nslookup, 281, 580 route command, 422–424 set subcommand, 277–282 session management, 66–67, 549 set timeout command, nslookup, 282, 580 WINS. see WINS servers set tracefacilities command, 411, 556 zone transfers, 260 set type command, 280 Service key error, 616 set vc command, nslookup, 282, 580–581 Service packs Setup, 178–183 Wolf.Index.qxd 5/28/03 7:24 PM Page 699

Index 699

setup command, 180–181 show info command, netsh wins server, Setup.exe log, 182–183 311, 570–571 sfc command, 108–109, 600 show installation command, Netsh RAS Shadow Copy, 141–145 Diagnostics, 407–408, 553 client-initiated recovery, 145 show interface command overview of, 141–143 netsh routing ip autodhcp, 412, 557 server-initiated recovery, 143–144 netsh routing ip dnsproxy, 414, 559 Share-level permissions, 43 netsh routing ip igmp, 559 Shared resources netsh routing ip nat, 416, 561 managing with DFS, 351–352 netsh routing ip ospf, 417–418, 562–563 net view command for, 67, 549–550 netsh routing ip relay, 412, 557 Shadow Copy, 141–145 netsh routing ip rip, 419, 564 troubleshooting with DFS, 387–388 netsh routing ip routerdiscovery, 420, Shift key, 452 565 Shiva PAP (SPAP), 394 show logs command, Netsh RAS Shortcut trusts, 445, 493 Diagnostics, 408–409, 554 Shortcuts, restoring, 175 show modemtracing command, Netsh RAS show all command, Netsh RAS Diagnostics, 409, 555 Diagnostics, 404–405, 550–551 show partner command, netsh wins server, show area command, netsh routing ip ospf, 311, 571 418, 563 show partnerproperties command, netsh show cmtracing command, Netsh RAS wins server, 312, 571 Diagnostics, 406, 551 show protofilter command, netsh routing ip show command, netsh wins server, ospf, 418, 563 311–313, 317, 570–572 show proxygrouptable command, netsh show configuration command, Netsh RAS routing ip igmp, 415–416, 561 Diagnostics, 406–407, 552 show pullpartnerconfig command, netsh show flags command, netsh routing ip rip, wins server, 312, 572 419, 564 show pushpartnerconfig command, netsh show global command wins server, 312, 572 netsh routing ip autodhcp, 557 show rasgrouptable command, netsh rout- netsh routing ip dnsproxy, 414, 559 ing ip igmp, 415, 560 netsh routing ip igmp, 560 show rastracing command, Netsh RAS netsh routing ip nat, 416, 561 Diagnostics, 410, 555 netsh routing ip ospf, 416–417, 562 show routefilter command, netsh routing ip netsh routing ip relay, 413, 558 ospf, 418, 563 netsh routing ip rip, 419, 564 show securityeventlog command, Netsh show grouptable command, 560 RAS Diagnostics, 410, 555 netsh routing ip igmp, 415 show server command, netsh wins server, show ifbinding command, 565 312, 572 netsh routing ip rip, 420 show tracefacilities command, Netsh RAS show ifstats command Diagnostics, 411, 556 netsh routing ip igmp, 415, 560 show virtif command, netsh routing ip ospf, netsh routing ip relay, 413, 558 417, 562 netsh routing ip rip, 419–420, 564–565 showwin2kstaticsitetable command, dfsutil, show iftable command, netsh routing ip 360, 518 igmp, 415, 560 Shutdowns. see system shutdown Wolf.Index.qxd 5/28/03 7:24 PM Page 700

700 Index

SID history, 450–451 ICS, 167–169 Simple Mail Transfer Protocol (SMTP), NetBIOS used in, 10 255 TCP/IP routing and, 17–18 Simple recovery, DHCP, 344–345 Sound Troubleshooting Wizard, 116 Site links, replication, 486 Spanned volumes, 212, 244–245 Sitekeeper, Executive Software, 643–644 SPAP (Shiva PAP), 394 Sites, Active Directory sparse command, fsutil, 235–236, 535–536 Active Directory Sites and Services Sparse files, 235–236, 535–536 snap-in, 458–459 spcflush command, dfsutil, 361, 518 overview of, 446–447 Specify Permissions Wizard, Sitekeeper, slow replication, 486–487 644 Slide Design window, 198 Spelling files, Detect and Repair, 209 Slide Finder dialog box, 197–198 Spool folders, 378, 381–382 Slides. see PowerPoint Spreadsheets, Excel, 188–190 SLIP (Serial Line Interface Protocol), 394 SRV resource records, 255, 283–284 small office/home offices. see SOHO ST (Support Tools) (small office/home office) acldiag tool, 497–498 Smart Scheduling, Diskeeper, 640, 641 dcdiag tool, 460–463 SmartLine, 652–660 defined, 47 Active Network Monitor, 652–654 dfsutil utility, 355–361, 514–519 Active Ports, 654–655 dhcploc command, 334, 519 Active Server Watcher, 656–657 dmdiag command, 519–520 Remote Task Manager, 658–660 dnscmd command, 267–268, 520–522 SMS (Systems Management Server), 76 dnslint command, 270–272, 522–523 SMTP (Simple Mail Transfer Protocol), efsinfo command, 86, 524–525 255 ftonline command, 239–240, 538 Snap-ins. see MMCs (Microsoft health_chk commands, 362–364, Management Consoles) 541–542 Snapshots, Shadow Copy, 141 iasparse command, 543 SOA (Start of Authority) records, 255, memsnap command, 79, 545 259–260 MSI file installation, 47–48 Soft page faults, 84 msicuu command, 133–134 Software netdiag command, 62–64 antivirus, 35–36 nltest command, 573–574 comparing settings on two computers, pfmon command, 83–85, 585–586 38 pmon command, 86, 588 firmware problems, 37–38 portqry command, 588–589 GPO problems and solutions, 490 Replmon, 476 hot lines/vendor’s sites, 40, 41–42 resource kit tools compared to, 48 installing/uninstalling with Stability tab, TechTracker ITX, 663 PushInstaller, 644 Standalone DFS root, 351 MSinfo32, viewing with, 112 Standard scopes, 325, 325–326 Stop 0x00000050 error, 247 Start of Authority (SOA) records, 255, Unexpected Kernel Mode Trap (Stop 259–260 0x0000007F), 627 StartType, enable command, 153 Software tab, TechTracker ITX, 663 Startup, system. see system startup SOHO (small office/home office) Startup, Word, 200–204 Wolf.Index.qxd 5/28/03 7:24 PM Page 701

Index 701

Static load balancing, 261 Status System Process Terminated (Stop Static mapping, 302, 313, 316 0x0000021A), 632–633 Static routes, 434 Thread Stuck in Device Driver (Stop Statistics 0x000000EA), 631 net statistics command, 65–66 tracking with uptime, 90–91 Network Monitor, 75–78 Unexpected Kernel Mode Trap (Stop Statistics operation, 269–270 0x0000007F), 626–627 Stop errors (blue screens), 619–636 Unmountable Boot Volume (Stop Attempted Write to Read Only Memory 0x000000ED), 631 (Stop 0xBE), 628 Storage virtualization, 351 Bad Pool Caller (Stop 0xC2), 628–629 Striped volumes, 212, 244–245 Data Bus Error (Stop 0x0000002E), Stub zones 621–622 dnslint command, 270–272 disk-related, 246–250 overview of, 260 Driver IRQL... (Stop 0x000000D1), 629 Windows Server 2003, 263 Driver Power State Failure (Stop Subnet masks 0x0000009F), 627 DHCP scopes and, 25 Driver Unloaded... (Stop 0x000000CE), IP address structure and, 15–16 629 IP Subnet Calculator and, 118–119 Driver Used Excessive PTES (Stop TCP/IP routing and, 17–18 0x000000D8), 630 Superscopes, 325–326, 338–339 FAT File System (Stop 0x00000023), Support 621 Microsoft, 40 Hardware Interrupt Storm (Stop tools. see ST (Support Tools) 0x000000F2), 631–632 using hot lines/ vendor sites, 41–42 Inaccessible Boot Device (Stop Support.dot template, 199–206 0x0000007B), 249–250, 625–626 AutoCorrect Backup, 204–206 IRQL Not Less or Equal (Stop installing, 200 0x0000000A), 619 Registry options, 204 Kernel Data Inpage Error (Stop Troubleshoot Utility, 200–204 0x0000007A), 625 using, 200 Kernel Stack Inpage Error (Stop SUPTOOLS.msi file, 48 0x00000077), 248, 249, 624 Switches KMode Exception Not Handled (Stop ARC operating system, 215–216 0x0000001E), 620 bootcfg command, 217–218 Mismatched HAL (Stop 0x00000079), dfsutil, 356, 514 625 Symantec Ghost. see Ghost No More System PTES (Stop SYN messages, 68 0x0000003F), 622–623 Synchronous backups, 343 NTFS and FAT file systems, 246–247 Syntax, 51 NTFS File System (Stop 0x00000024), System checkpoints, 146 621 System engineers (SEs), 111–112 Online Crash Analysis, 134–135 . see sfc command Page Fault in Nonpaged Area (Stop System Files Update log, Windows 0x00000050), 247–248, 623–624 Installer, 182–183 Status Image Checksum Mismatch System hive error, 618–619 (Stop 0x00000221), 633–635 System kernel, 620 Wolf.Index.qxd 5/28/03 7:24 PM Page 702

702 Index

System log, 111 tasklist command, 88–89, 604–605 System management tools, 101–115 TCP/IP Illustrated, Volume I (Stevens), 19 Computer Management, 110 TCP/IP (Transmission Control driverquery command, 101–102 Protocol/Internet Protocol), 13–19 Event Viewer, 110–111 address structure, 13 eventquery command, 102–104 binary conversion, 13–14 eventtriggers command, 104–107 connection handshake, 68 MSinfo32, 111–113 DHCP clients, 335 sfc command, 108–109 DNS name resolution, 19–22 systeminfo command, 107–108 IP address structure, 14–16 , 113–115 name resolution methods, 18–19 System Monitor (Perfmon), 92–93 NAT clients, 431 System Restore, 145–149 net statistics command, 65–66, 548–549 System services. see Services NetBIOS names vs. FQDNs, 18 System Setup Troubleshooting Wizard, 116 network printer connections, 380 System shutdown Outlook configuration, 194 chkdsk, 52–53 ports with portqry, 420–422, 588–589 Startup/Shutdown Troubleshooting routed environments and, 17–18 Wizard, 116 WINS clients, 313–315 troubleshooting, 157–159 TCP ports, 67–70 uptime, 90–91 TechTracker ITX, 660–664 System startup telnet floppy disks and, 242 managing with, 72–73, 605 msconfig, 132 pmon and, 86, 588 Recovery Console and, 152–156 Temp folder, 196–197 repairing OS installation, 156–157 Templates. see also Support.dot template Startup/Shutdown Troubleshooting corrupted presentations and, 197–198 Wizard, 116–117 Security Templates, 101 Stop 0x0000007B error, 249–250 Terminal Services troubleshooting, 149–152 overview of, 350–351 System State, AD, 494 ports, enabling, 140 System Tools folder, 57–58 Remote Desktop and, 136 systeminfo command, 107–108, 601 reset session command, 371–374, 598 System.ini file, 132 troubleshooting, 371–374, 383–386 Systems Management Server (SMS), 76 Terminal Services Manager snap-in, 376 termserver command, query commands, 373–374, 596–597 T Test Account Settings dialog box, Outlook, Tables, Access, 187–189 192–193 takeown command, 98–99, 602 Tests Task Manager Active Directory infrastructure, KMode Exception Not Handled (Stop 460–463, 510–513 0x0000001E), 620 corrective action, 44 Remote, 658–660 demand-dial routing, 433 troubleshooting with, 94 faxes, 165–166 Task Scheduler, 55–56 netdiag command, 62–64, 547–548 taskkill command, 86–88, 602–603 Outlook configuration, 192–195 Wolf.Index.qxd 5/28/03 7:24 PM Page 703

Index 703

Program Compatibility wizard, 170–171 process overview, 30–31 Text, typing in Word, 207–208 testing corrective action, 44 TFTP (Trivial File Transfer Protocol), 390 wizards, 115–117 Third-party tools, 637–672 Trusts Executive Software. see Executive Active Directory Domains and Trusts, Software 457–458 FullArmor - FAZAM 2000, 648–651 defined, 444 SmartLine. see SmartLine examples of, 445–446 TechTracker, 660–664 forest functional levels, 451–452 Tsarfin. see Tsarfin nltest, 465–466, 573–574 Wildpackets - iNetTools, 670–672 troubleshooting, 493 TightVNC types of, 445 installing, 122 Tsarfin, 664–670 overview of, 121–122 IPMonitor, 665–667 server configuration, 123 NetInfo, 667–670 Viewer, 123–124 TTL (Time to Live), 20–21, 327 Time restrictions, 379 type command, Recovery Console, 155 Time To Live (TTL), 20–21, 327 timeout command, bootcfg, 225, 507 Timeout values U set retry command, 280–281 UDP ports, 67–70 set timeout command, 282 The Ultimate Windows Server 2003 System timeout command, 225, 507 Administrator’s Guide (Williams and Trace Dependents, Excel, 191 Walla), 348 Trace Error, Excel, 192 Undelete, Executive Software, 642 Trace Precedents, Excel, 191 Undelete From Disk feature, Executive tracert command, 73–74, 606 Software, 642, 643 Tracing Unicast addresses, 326 Connection Manager, 406, 408–409 Uninstall command, 164 modems, 409–410 Universal groups, 450–451 RAS components, 410 UNIX DNS server, 262 RAS Diagnostic Reports and, 408–409 unmapftroot command, dfsutil, 361, 518 RAS server logging, 410, 411 Updates. see also Dynamic updates Transfers, DNS zones, 259–260 analyzing state of OS, 35 Transitive trusts, 445, 453 application compatibility, 169 Triggers, 104–107 device drivers, 162 Trivial File Transfer Protocol (TFTP), 390 domain controllers, 447 Troubleshoot Utility, 200–204 gpupdate, 464–465 Troubleshooting techniques, 29–46 logon timestamps, 450–451 analyzing current environment, 34–38 Windows Update, 113–115 correcting problems, 42–44 updatewin2kstaticsitetable command, dfsu- documenting problems, 31–34 til, 361, 518–519 documenting solutions, 38–39 uptime command, 90–91 eliminating what is right, 40–42 USB Troubleshooting Wizard, 116 following up, 44 User classes, DHCP, 328 identifying problem, 31 user command, query commands, 374, 597 optimism vs. pessimism, 29–30 Users Wolf.Index.qxd 5/28/03 7:24 PM Page 704

704 Index

accounts, 156 striped volume (RAID 0), 212 Office Setup, 181 striped volume with parity (RAID 5), RAS dial-in properties, 396 212, 246 USN command, fsutil, 236–239, 536–537 using fsutil volume, 239, 538 VPNs (Virtual Private Networks), 437–441 overview of, 396–397 V resource access problems, 440 #VALUE!, Excel error codes, 191 router-to-router connection problems, Vendor classes, DHCP, 327 440–441 Vendors. see Third-party tools server connection problems, 438–439 VGA Mode, 151 Video Troubleshooter, 167 W Video Data Bus Error (Stop 0x0000002E), WAN routing, 430, 434 621–622 Wildpackets - iNetTools, 16, 670–672 display problems, 151, 166–167 Windows 2000 DVDs Troubleshooting Wizard, 115 Active Directory functional levels, Thread Stuck in Device Driver (Stop 449–452 0x000000EA), 631 DHCP enhancements, 324 VGA Mode, 151 domain controllers, 481, 493 Views WINS enhancements, 298 Active Directory Users and Computers Windows Advanced Option menu, 149 settings, 457 Windows Backup program, 128 hidden devices in Device Manager, 160 Windows Installer, 182–183 net view command, 67, 549–550 Windows Licensing Agreement, 157 view command, 282, 581 Windows Naming Service. see WINS Virtual circuits, 282 (Windows Naming Service) Virtual links, OSPF, 437 Windows NT, 449 Virtual Network Computing (VNC) Viewer, Windows Server 2003 80. see also TightVNC Active Directory enhancements, Virtual Private Networks. see VPNs 452–453 (Virtual Private Networks) Active Directory functional levels, Viruses 449–452 analyzing current environment, 35–36 DHCP enhancements, 324 Kernel Data Inpage Error (Stop DNS enhancements, 263 0x0000007A), 625 msconfig command, 131–133 Kernel Stack Inpage Error (Stop Shadow Copy tool, 141–145 0x00000077), 248, 624 VPN connections in, 438 troubleshooting Office Setup, 181 WINS enhancements, 298–299 Windows Update protection, 113 Windows Update VNC (Virtual Network Computing) Viewer, analyzing state of OS, 35 80. see also TightVNC overview of, 113–115 volume command, fsutil, 239, 538 recovery checkpoints, 146 Volumes. see also Dirty bits Windows XP administering Change Journal, 236–239, Remote Desktop connections, 139 536–537 System Restore tool, 141–145 mirrored volume (RAID 1), 212, 245 WinMSD. see MSinfo32 Wolf.Index.qxd 5/28/03 7:24 PM Page 705

Index 705

WINS servers replication, 299–301, 317 configuring replication, 299–301 server problems, 315–317 Server Status, WINS snap-in, 303 show commands, 311–313 showing, 312 static mapping, 302 troubleshooting, 315–317 WINSR records, 255, 258, 287 WINS snap-in, 303, 319–322 Wizards, troubleshooting WINS (Windows Naming Service), client-server problems using, 127 297–322 overview of, 115–117 architecture, 297–302 Sitekeeper, 644 check command, 307–308 Word, 199–209 client problems, 313–315 Document Recovery, 176–177 defined, 19 file repair with Open and Repair, DHCP integration with, 317–319 176–178 dump command, 306 overview of, 199 enhancements to, 298–299 Support.dot template and, 199–206 event logging, 304–305 troubleshooting, 206–209 init command, 309–311 Word Startup Folder Add-ins, 203 lookup verification, 285–287 Workstations name resolution, 22 net statistics, 65–66, 548–549 netsh wins command, 305–306 netdiag, 62–64, 547–548 overview of, 23–24 TechTracker ITX Agent, 663 Proxy agent, 302 Workstations tab, TechTracker ITX, 663 record types, 255 recovering corrupted WINS database, Z 319–322 relationships, 299–301 Zones. see DNS zones