Data: 8 Types of Windows security mode analysis and application techniques

Source: Internet
Author: User
Tags extend safe mode
People who often use computers may have heard that when a computer fails, Windows provides a platform called "Safe Mode" where users can solve a lot of problems-whether it's hardware (driver) or software. But will you use this safe mode? Today we are going to show you what it really is.
First knowledge of Safe mode
To enter Safe mode, as long as the start of the Non-stop press F8, the menu will appear, and then use the keyboard up and down the cursor keys to choose to enter a different boot mode. The Options menu includes the following:
1. Safe Mode
Use only basic files and drivers. such as mouse (except USB serial mouse), monitor, keyboard, hard disk, basic video, default system services, and so on, but no network connection.
If you do not successfully start your computer in Safe mode, you may need to use the Recovery Console feature to repair your system.
2. Safe Mode with network connection
Increased network connectivity based on normal security mode. However, some network programs may not work properly, such as MSN, and many of the applications will not automatically load, such as firewalls, anti-virus software. So in this mode must not forget to manually load, otherwise malicious programs and so may invade the process of repairing your computer.
3. Safe Mode with command line prompt
Starts only with basic files and drivers, and after logging in, a command prompt is displayed on the screen, not the Windows graphical interface.
Description: In this mode, if you accidentally close the command Prompt window, the screen will be completely black. You can press the key combination Ctrl+alt+del, bring up Task Manager, click New Task, and then in the pop-up dialog box "Run" after the "C:\WINDOWS\explorer.exe", you can immediately start the WINDOWS XP graphical interface, The interface is exactly the same as in the three security modes described above. If you enter "C:\windows\system32\cmd", you can open the Command Prompt window again. In fact, this is the way to start a command prompt window in other safe modes even when it is starting normally.
4. Enable Startup log
Starts in normal Safe mode and logs all drivers and services that are loaded (or not loaded) by the system into a text file. This file, called Ntbtlog.txt, is located in the%windir% (default c:\windows\) directory. The startup log is useful for determining the exact cause of system startup problems.
5. Enable VGA Mode
Started with the basic VGA driver. This mode is useful when you have installed a new video card driver that makes Windows not start properly. In fact, it always uses the basic video driver, regardless of the form of Safe mode startup. Therefore, in these modes, the resolution of the screen is 640x480 and cannot be changed. However, you can reinstall the driver.
6. Last Known Good Configuration
Started using the registry information and drivers that were saved when Windows was last shut down. Any changes made since the last successful startup will be lost. Therefore, the last known Good configuration is used only if the configuration is not correct (primarily software configuration). However, it does not resolve problems caused by corrupted or missing drivers or files.
7. Directory Service Recovery Model
This is for the server operating system and is used only to recover the SYSVOL directory and Active Directory directory service on the domain controller.
8. Debug mode
At startup, debug information is sent to another computer through a serial cable.

If you are or have already used Remote Installation services to install Windows on your computer, you can see additional options related to restoring or recovering the system using Remote Installation Services.

Practical application

1. The author used an old monitor, is also a beginner, beginners favorite dry is what, change point wallpaper, set the resolution also feel very sense of achievement, did not think mistakenly will be resolution and refresh rate is too high, the next time the screen splash, the damage to the operating system is installed.

Now, when I think about it, it's really cute, as long as you restart it in Safe mode (all the first four modes), remove the video card driver, reboot the computer, reboot (normal boot), the system will automatically scan the video card and install the driver, the screen can return to normal display.

There are also problems that can be handled in this way, such as Windows XP automatically identifies hardware and installs drivers, but sometimes it is always dim and the error message is not displayed under Device Manager. But the work is not normal, such as not on the network (NIC driver error), screen display is not (graphics driver error), etc., can also reinstall the driver in Safe mode.

2. Identify a malicious self-starter program or service

If the computer appears some of the wrong, such as not on the net, according to the conventional thinking and no problem, you can start to the Safe mode with network connection to see, if here can, it is some from the start of the program or services affect the normal network connection.

In Safe mode with a network connection, tasklist >d:\anquan.txt with the redirected command prompt tool to log the process to the text file Anquan.txt in the D: Packing directory. Then, start the computer in a normal way, compare the process recorded in the Anquan.txt with the process at this time, you will find that the process is much more at this time, please end the extra process, and check the network connection is normal. If the network connection is OK when you end up in a process, it means that the process that just ended is the culprit.

After detection, you can delete the executable files associated with the process. But also note that since it is automatically run, forcibly deleted, it may cause the startup times "cannot find a file" error, but also to remove all the settings related to the startup, including the "System Configuration Utility" under the "Start", "Win.ini" content, the contents of the registry, The content under the startup script, the contents of the Start menu under Start, and so on.

3. Adjustment zoning

Once, the author with a laptop business, on the way want to deal with the report is used to get out of the file, can be a book son, start times partition error. God, out of the door, and did not bring any tool software, fortunately despair, but also to boot to safe mode-there is the law, command-line tools DiskPart can be competent division magician all the work (perhaps few friends have heard it). The DiskPart function is very powerful, it works in an integrated environment, after entering DiskPart, shows the private prompt shown in Figure 1 is diskpart> (Note: This is not a path), in this environment can enter a lot of related and its private subcommand. Here is a demonstration of the expansion of the partitioning function. Description: The following actions are recorded on the desktop.

① boot to Safe Mode with Command prompt, enter command DiskPart. Then enter the list partition to show the partition, which obviously has two primary partitions and two extended partitions.

② Enter "Select parttition 3" to make the 3rd partition (that of 5004MB) so that the partition has the Focus property. You can then delete the partition by typing "delete Partition". Compare the values after the 1th and 22 "List Partition" commands in Figure 3, and it is easy to see that the original partition 3 has actually been deleted.
③ enter "Select partition 1" so that it has focus properties, and then enter "Extend", the last allocated space vacated by the deleted partition can be automatically added to the 1th partition.

For partition expansion, this is the division magician's Patent, "DiskPart" can also be achieved, it seems that Windows Server 2003 does not support zoning magician makes sense. Then enter "List Partition" to observe the capacity change of the 1th partition.

Description: When the partition with focus is extended to the nearest unallocated space. For normal partitions, unallocated space must be on the same disk, and the partition must then have the focus.

If the partition to be expanded is in NTFS format, no data will be lost after the expansion. This command fails if the file system is not NTFS, but does not make any changes to the partition and does not corrupt the data. The current system partition or boot partition cannot be extended or the partition containing the paging file can be expanded. As you can see from the diagram, there are two primary partitions on my computer, and partition 5 is the active partition. Otherwise, you cannot enlarge the partition 1.

Syntax: Extend [size=n]

Parameter description: size=n: The amount of space (MB) added to the current partition. If you do not specify a size, the disk expands to occupy all of the nearest contiguous unallocated space.

④ no matter what changes have been made to the hard disk partitions, including creation, deletion, expansion, etc. do not have to restart the computer to take effect (this is the partition magician can not do), but in the "My Computer" can not see these partitions, this is why, the original, has not been given a drive letter (that is, the letter), how to specify the letter? The following is an example of the first partition specified as a letter.

The 1th partition has the Focus property, and then the command "Assign" is assigned a DiskPart automatically. Of course, you can specify manually by using the command "Assignletter=x" manually, not the same as the existing disk Furu C. After this process, you can look up these partitions in my computer.

⑤ Partition 5 As the active partition, first with the Select Parttition 5 to have the Focus property and then active activation. Finally enter exit, exit DiskPart integrated environment, let the computer automatically restart.

Description: If used DiskPart, you will feel that its design is in line with people's thinking habits, is generally the first to specify focus, and then to operate, the operation can also be displayed with the partition status in order to master progress. Input help to see all of the subcommand, when you enter a fault, it will also automatically lists the list of child commands and a brief description to guide you to the straight. In addition, after installing Windows 2003, the most familiar partition magician (not server version) is not functioning properly, using DiskPart is indeed a good choice.

As mentioned earlier, the focus must be specified before any action is taken under DiskPart. That is to indicate which object to operate, which makes my operation logically clear, but on the other hand, if the focus is assigned to the error and a destructive command, such as deleting the partition, can cause irreparable damage. So, always use the list command to view each partition's status, with an asterisk (*) flag in front of the focus partition.

In addition, you can also use Safe mode to complete the virus cleanup work. For example, some anti-virus software can report the virus but can not clear or even quarantine, delete, encountered this situation, you can start to safe mode to try to delete these virus files. Of course, here we also just introduced some of the more common use of safe mode, it is a point of view, I hope you can in the actual use of computers, and gradually experience its more convenient place.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.