Exam Details
Braindump
Favorites

Email: Webmaster


| |
Workstation 4.0
 | Planning |
 | Installation and Configuration |
 | Managing Resources |
 | Connectivity |
 | Running Applications |
 | Monitoring and Optimisation |
 | Troubleshooting |
Planning
Min |
Recommended |
486 |
Pentium |
12Mb |
16Mb |
120Mb HD |
|
HPFS converted to NTFS using ACLCONV.EXE
FAT converted to NTFS using CONVERT.EXE
Cannot upgrade from Win95 to NT 4
Installation and Configuration
WINNT
 | Winnt32 for Windows NT 3.5 and above only. |
 | Switches: |
 | /O Create boot floppies and install |
 | /OX Create boot floppies and dont install |
 | /B Install without boot floppies |
 | /S Read source files from any drive other than current |
 | /T drive to contain temp setup files |
 | /X Do not create floppies |
 | /F Do not verify files copied to floppy |
 | /C Skip free space check on floppies |
Unattended Installs
 | UNATTEND.TXT install or upgrade NT Workstation on multiple machines with similar
configuration. |
 | WINNT /S:d:\i386 /U:c:\unattend.txt |
 | Unattend.txt = answer file |
 | Create by hand or use the SETUPMGR.EXE |
- Create answer files for each hardware platform.
- Add the line OemPreinstall=Yes to the [Unattended] section.
- Add the line JoinDomain= to the [Network] section.
- Create a UDF with a section for each computer that specifies the user name and computer
name.
- Install a reference computer.
- Run sysdiff.exe /snap
- Install the applications on the reference computer
- Run sysdiff.exe /diff to create the difference file.
- Add the command sysdiff.exe /apply to the $OEM$\Cmdlines.txt
- Start the install of the workstations by specifying the answer and UDF files in the
winnt.exe command.
UDF
 | WINNT /S:d:\i386 /U:c:\unattend.txt /UDF:ID1,udf.txt |
 | The functionality of the UDF is to merge or replace specific sections of the answer file for the GUI portion of setup. |
 | Join domain in Network Section |
SYSDIFF
 | Snap Creates image of base installation, including registry and file system. |
 | Diff Creates image of changes since original snapshot |
 | Apply Applies the diff file to another installation |
 | Inf Creates an .INF file. Used with /I for automating application install along with
NT |
 | Dump Creates a directory list of the changes in a diff file. |
 | There is NO WINDIFF |
Uninstall
 | To remove Windows NT 4.0 on FAT partition boot from an MS-DOSฎ disk and run SYS.COM,
then delete the directories created by Windows NT setup. |
 | If the system is NTFS you must delete and recreate the partition to remove Windows NT. |
 | Run fdisk to remove NT. |
Profiles
 | Mandatory profiles local or roaming (NTUSER.MAN) |
 | If PDC fails, user gets last locally cached profile or the default profile for the
workstation. |
 | If user has never logged on then default profile is returned. |
 | System app in control panel and user manager can be used to create a roaming user
profile. |
Policies
 | NTConfig.pol |
 | \NetLogon dir of a PDC |
 | System policy overrides the HKEY_CURRENT_USER and HKEY_LOCAL_MACHINE hives. |
 | System policies override local, roaming or mandatory profiles. |
 | Individual system policies override system policies for groups and for default user. |
 | If conflicts occur individuals Policy overrides the workstation policy. |
 | Only one system policy is needed for all users in a domain. |
REGEDIT
 | Explorer interface |
 | Search for keys, values, and data throughout entire registry. |
REGEDT32
 | File Manager interface |
 | Only search for keys |
 | Can alter any security settings |
 | Thread is the smallest schedulable unit on the system. |
 | Black screen refresh rate, desktop area, color pallet. |
Managing Resources
NTFS Security
 | If you move files within the same NTFS partition, they will retain their original
permissions. |
 | Any NTFS copy always inherits the new parents permissions. |
 | File creation, copy, and moves from one NTFS partition to another will inherit the
parents folders permissions. |
 | All NTFS permissions are lost when files are moved or copied from NTFS to FAT |
Printing
 | Manage printer permissions from remote client using NT Explorer |
 | Change Spooler location: Printer folder, select Server Properties, Advanced, enter new
path. (must restart the print server for change to take effect) |
 | Default path: c:\winnt\system32\spool\ |
 | To reprint a document. Select restart from the document menu in printer folder. |
 | To redirect documents to a print device on a different server. Add logical port and
provide the print server name and share name. |
 | To create individual spool files create files under:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Printers |
 | To move spool files either: create in registry or use Advanced properties for the print
server. |
 | Use print jobs properties (right click on print job, properties) to change priority,
reschedule and notify user when job is complete. |
 | Cannot delete, create, or configure ports over a network. Must be done on local server. |
 | To change print modes (PCL) use separator page. |
 | To print from MS-DOS app: map a physical port to the network printer. net use LPTx : \\server\printer |
 | Printers in a pool always share the same printer name and driver |
Browsers
 | NT Server 3.5 or higher |
 | NT Advanced Server 3.1 |
 | NTW 3.1 or higher |
 | Win95 |
 | Win 3.11 |
FAULT TOLERANCE
 | RAID 0 No tolerance, fastest speed (Disk striping without parity, volume sets). |
 | RAID 1 Fault tolerant, slowest (Disk mirroring (slower), duplexing (faster)). |
 | RAID 5 Fault tolerant, intermediate speed (Disk striping with parity) |
Disk Admin
 | Commit changes Now on partition menu |
 | You cannot delete the system partition or any part of a partition set without deleting
the entire set. |
General Disk
 | ONLY mirror sets can contain the system or boot partitions. HOWEVER boot and/or
system can be on a different partition on the same physical disk. |
Mirroring / Duplexing
 | RAID 1 |
 | To recover from failure, install new drive, break the mirror and then recreate. |
Volume Set
 | RAID 0 |
 | Spread over multiple physical disks |
Disk striping without parity
 | RAID 0 |
 | Minimum of 2 physical disks |
 | To recover from failure, you have to install from backup |
 | Fastest read/write out of all disk sets |
Disk striping with parity
 | RAID 5 |
 | 3 32 physical drives |
 | To recover from failure, install new drive and regenerate (on fault tolerance menu) the
strip from disk admin. |
 | To recover from multiple disk failure, you have to restore from backup. |
 | For 3 disks ฏ disk space will be used for parity
info. For 4 disks ผ will be used. |
 | Fastest read for fault tolerant systems. |
Connectivity
RAS
 | 1 Connection |
 | Connect through PSTN, ISDN, X.25, PPTP |
 | Only supports PPP SLIP is not supported for dialup. |
 | PPP has more overhead than SLIP but provides error checking & recovery. |
 | Default for PPP is IP assigned by server |
 | NetBIOS gateway is established between server and client. |
 | Supports IP and IPX routing |
 | Supports NetBIOS and winsock apps |
 | Supports IP, IPX and NetBEUI both dial-in and out. |
 | AutoDial does not support NWLink (only IP and NetBEUI) |
 | If slow TCP connection put LMHOSTS (WINS) and HOST (DNS) on client. If LMHOSTS have #PRE
tag, IP addresses are cached. |
 | RAS logging if registry enabled - \winnt\System32\RAS |
 | Callback doesnt work with Multilink |
 | Security |
 | Security Security tab of phonebook, outbound. Network Protocol Configuration,
inbound. |
 | Allow any auth including clear text (PAP) Used to connect to non-NT Server. |
 | Require encrypted auth (CHAP) Used to connect to non-NT Server. |
 | Require MS encrypted auth (MS-CHAP Challenge Handshake Authentication Protocol) |
NetWare
 | Change passwords - setpass for 3.x and Ctrl-Alt-Del for 4.x |
 | Need CSNW installed to change passwords |
 | NetWare syscon utility runs under NTW4 |
 | Bindery preferred server |
 | NDS Tree default tree, context option |
 | Gateway Services for NetWare (GSNW) |
 | Enables NT to access NW file and print services directly. |
 | Enables NT to act as a gateway to NW resources. Non-NW clients can access NW. |
 | All access through a single connection to NW. |
 | Supports both NSD and bindery. |
 | Server Message Block (SMB) (NT, 95, WfW) can access a share through GSNW. |
 | GSNW essentially enables you to create an NT share for a resource on a NW server. MS
clients that use SMB can then access the share even if they dont have NW client
software. |
 | Add a NTGATEWAY group to the NW server. |
 | Client Services for NetWare (CSNW) |
 | CSNW allows NT Workstation to access file & print on NW. |
 | CSNW is incorporated in GSNW for NT Server. |
 | Options under CSNW |
 | Notify when Printed |
 | Add Form Feed ejects blank page after each print job |
 | Print Banner |
 | File and Print Services for NetWare (FPNW) |
 | Allows NW clients to access NT resources. |
 | Sold as an add-on for NT |
 | Directory Service Manager for NetWare (DSNW) |
 | Add-on integrates NW and NT user and group info. |
 | Allows single network login. |
 | Migration Tool for NetWare |
 | Only installed after GSNW |
 | NT using NWLink can connect to client/server app on NW (without requiring additional
services). |
 | A NW client running IPX can access an NT server running FPNW. |
 | NW client that supports Named Pipes, winsock, IPX can access a NWLink-enabled NT Server
running a server-based app, such as SQL Server. |
 | Default frame type before 3.12 = 802.3 |
 | Default frame type 3.12, 4.x = 802.2 |
 | With networks older than 3.12 manual detection MUST be used. |
DHCP
 | Can provide NetBIOS name, DNS, WINS, default gateway. |
 | After 50% of lease, client will ask DHCP to renew lease. If the server is down then
after 87.5% of time client will broadcast to any DHCP server. |
General
Peer Web Services
Running Applications
Sub-Systems
 | VDM is a Win32 process to host DOS app |
 | WOW is a Win32 process hosted by a VDM process to host a Win16 app |
 | Each DOS app has own VDM - single thread and separate memory space. Therefore they
cant share memory space. |
 | All Win16 apps are launched within same WOW instance, unless otherwise specified. |
 | WOW - shared memory space, but single thread for each process. |
 | If Win16 apps use DDE they do NOT have to share the default NTVDM |
 | Win32 apps launched separately. |
 | OS/2 v1 and POSIX 1 support is text/character based only. |
 | Autoexec.NT used for TSRs |
 | Config.NT used to load system files needed for running Win16 apps |
Running applications
 | Priorities (/low, /normal, /high, /realtime) |
 | /min, /max |
 | Separate NTVDMs (/separate |
DOS Properties
 | Font bitmap or true type |
 | Memory expanded (XMS), extended(EMS) or protected(DMPI) |
 | Screen |
 | Misc |
Monitoring and Optimisation
 | Default size - RAM + 12Mb for system |
 | Config Page file - Change button / performance tab / system app - remember to hit Set -
changes only take place after reboot |
 | Optimising page file = create one file per physical disk except boot partition. |
 | Move page file to disk with lowest disk activity - i.e. not the boot partition. |
 | Large Page file - apps take longer to start, disk fragmentation |
 | Do not place page file on stripe disk with parity |
 | Min memory used - Up to 10 connections |
 | Balanced - Up to 64 connections |
 | File Sharing - 64 or more connections, file server (Access) |
 | Network - 64 or more connections, SQL Server |
Performance Monitors
 | To use Network Performance monitors Network Monitor Agent must be installed |
 | To use TCP/IP SNMP must be installed |
 | Diskperf.exe y to use disk monitoring |
 | Only one user, group or machine can be selected for an alert (If its an administrative
alert then more than one user can receive it) |
Monitors
 | Pages/Sec excessive disk paging add more ram. |
 | Available bytes virtual memory available. |
 | Committed bytes memory in use by apps. |
 | % Processor Time Amount of time processor is in use. |
 | Processor Queue Length Number of threads waiting to be processed. |
 | Interrupts/Sec If interrupts/sec increases and processor time does not might be
faulty hardware sending out bogus interrupts. |
 | % Disk Time Amount of time the disk is in use. |
 | Average Disk Queue Length how many system requests are waiting for disk access. |
Event Viewer
 | Only local administrators can see the security log. |
Task Manager
 | Applications current applications in use. |
 | Processes All processes in memory and details on CPU usage. |
 | Performance systems performance. |
Troubleshooting
ERD
 | Cant boot from ERD |
 | Create ERD using rdisk.exe |
 | Rdisk.exe /s backs up user account and file security |
 | ERD checks system files, start up and boot sector of partition |
 | Cannot verify or replace the master boot record |
 | Use DUMPEXAM to examine dump files |
 | System log contains info about services and drivers that fail to start |
Boot Floppy
 | BOOT.INI edit ARC |
 | NTLDR |
 | NTDETECT.COM |
 | NTBOOTTDD.SYS if BIOS translation is disabled |
 | BOOTSECT.DOS if multiboot |
Dr.Watson
 | DRWTSN32.LOG |
 | Used to diagnose an application error. |
 | Also used to create a memory dump file |
 | Can create dump file from CP-System and drwtson |
ARC Names
Multi(x) |
Controller card, starts at 0 |
Scsi(x) |
Scsi controller when BIOS is disabled. Starts
at 0 |
Disk(x) |
Scsi disk number. If multi then = 0. Starts at
0. |
Rdisk(x) |
Disk number. If scsi then = 0. Starts at 0. |
Partition(x) |
Partition number. Starts at 1. |
|