Windbg dual-machine debugging of Vista boot config settings, master do not enter.

Author: xzchina
Time:
Chain: http://bbs.pediy.com/showthread.php? Threadid = 36107

Statement: I am a cainiao. Please advise me more.
Vista does not have the same boot. ini file as Win2k/xp. You must use bcdedit to set the boot information.
The default user does not have the permission to change the boot config. The current user must be deleted and activated.
Administrator Account, restart the computer, the system will automatically log on as administrator.

Step 1. Let's first check the current user settings:
Command:
Bcdedit
 

Step 2. Then we set the port, COM1, number of digits per second: 115200, or 1394 or USB,
Take COM1 as an example:
Command:
Bcdedit/dbgsettings {serial [baudrate: value] [debugport: value] |
1394 [channel: value] | USB}
 

Step 3. Copy a boot Option
Command:
Bcdedit/copy {current}/d debugentry
Debugentry is the option name. You can name it by yourself. Then copy the guid value of the result.
 

Step 4. Add a new option to the boot menu
Command:
Bcdedit/displayorder {current} {ID}
Here, the guid value of {ID} is the guid value of step 3.
 

Step 5. Activate debug
Command:
Bcdedit/debug {ID} on
Here, the guid value of {ID} is the guid value of step 3.
 

After the command is successfully executed, restart.

Select debugentry to log on and enable windbg.
Microsoft (r) Windows debugger version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.

Opened \. \ PIPE \ com_1
Waiting to reconnect...
Connected to Windows Vista 6000x86 compatible target, ptr64 false
Kernel debugger connection established.
Symbol search path is: symsrv * symsrv. dll * F: \ symbols * http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Vista kernel version 6000 MP (1 procs) Free x86 compatible
Built by: 6000.16386.x86fre.vista _ rtm.061101-2205
Kernel base = 0x81800000 psloadedmodulelist = 0x81911db0
System uptime: not available
Break instruction exception-code 80000003 (first chance)
**************************************** ***************************************
**
* You are seeing this message because you pressed either *
* Ctrl + C (if you run kd.exe) Or ,*
* Ctrl + break (if you run windbg ),*
* On Your debugger machine's keyboard .*
**
* This is not a bug or a system crash *
**
* If you did not intend to break into the debugger, press the "G" key, then *
* Press the "enter" key now. This message might immediately reappear. If it *
* Does, press "G" and "enter" again .*
**
**************************************** ***************************************
NT! Rtlpbreakwithstatusinstruction:
81881760 cc int 3
For more information about windbg settings and virtual machine settings, see:
Http://silverstr.ufies.org/lotr0/windbg-vmware.html
Http://www.vmware.com/support/ws3/doc/ws32_devices3.html
Http://www.wintoolspro.com /? P = 6