Skip to main content

What's in the Recovery Console?

The Recovery Console consists of a minor modification to the boot.ini file, and the addition of a hidden directory on the boot drive. The added directory's name is cmdcons. The change to the boot.ini file is simply the addition of another line providing for a new boot option:
C:\cmdcons\bootsect.dat="Microsoft Windows Recovery console" /cmdcons
This option consists of a fully qualified file name (C:\cmdcons\bootsect.dat), a text description (Microsoft Windows Recovery Console), and a boot option (/cmdcons).
As everyone should be well aware, the Windows XP Boot Manager is able to boot virtually any operating system (assuming that the operating system is compatible with the currently installed file system).

How Windows XP Supports Booting other Operating Systems
Windows XP can be told to "boot" any directory or file location. For example, the Recovery Console is saved in the cmdcons directory. In the cmdcons directory is a 512-byte file named bootsect.dat. Windows XP will treat a file named bootsect.dat exactly as if it were a hard disk's boot sector. In fact, one could, theoretically, copy the bootsect.dat file to a drive's boot sector location and cause that operating system to be booted directly.

One use for this technology is in a multiple-boot configuration where the other operating system or systems are not compatible with Windows NT (such as Windows 95/98/Me).
The Recovery Console does qualify as an operating system, though it is very simple—and limited.
A major question will always be this: is the Recovery Console secure? In most situations, the
Recovery Console is actually quite secure. The user, at startup of the Recovery Console, is prompted for two pieces of information:
• Which Windows XP installation is to be repaired (assuming that there is more than one Windows XP installation!).
• The Administrator's password for that installation. The Recovery Console then uses the installation's SAM to validate this password to ensure the user has the necessary permission to use the system.
A situation comes to mind: if the Administrator's password is lost or otherwise compromised, not only may it be impossible to use the Recovery Console, but anyone with access to the compromised password could modify the system with the Recovery Console. This is not really an issue, though. If the Administrator's password is lost, that's life. It will be difficult, if not impossible, to recover the password. If the security of the Administrator's password is compromised, then it will be necessary to repair the damage—changing the password is mandatory in this case. In either case, the Recovery Console is no less secure than Windows XP is.
The cmdcons directory holds over 100 files.

Comments

Popular posts from this blog

File and Folder Permissions

Windows XP Professional boxes running the NTFS file system have the capability to set indi vidual file permissions on both files and folders. File and folder permissions allow you to specify exactly who will be able to read, write, execute, and even list or access a folder. So, file and folder permissions can be a very powerful tool to protect your data from others' eyes. If your file system is FAT32, then you will not be able to set permissions. Fortunately, an easy way exists for you to convert your FAT32 file system to NTFS. Do a search in the Windows Help and Support Center for Convert to NTFS and you will be shown directions on how you can go about converting your drive's file system. Setting the permissions on with a lot of control requires you to disable simple file sharing and security. To do so, follow these steps: 1 . Open up any folder on your computer and expand the Tools menu and select Folder Options. 2 . Click the View tab and scroll to the bottom of the Adv...

10 Ways To Access Blocked WebSites

Websites like facebook, twitter and other social networking sites are generally blocked in schools, colleges and offices. There exist some tricks by which you can bypass the restrictions and access blocked sites, the most obvious is the use of proxies or Anonymizer websites. But using proxies doesn’t always works as they gets blocked by firewall as well . Here I am listing some other methods to access blocked contents. 1. Use IP instead of URL Each website has its equivalent ip address . This method works best when blocked sites are stored as a list of URLs  .You can use  ip address  to access blocked contents . For example to access facebook you can use  ip address 69.63.189.11 in your address bar . You can use ip-address.com to find the ip address of other websites . 2. Use Google Cache All major search engines like Google yahoo and Bing stores cached pages of websites themselves . You can access blocked websites by viewing their  cached copy on search...

Using the quick boot feature of the BIOS

All systems initialize in more or less the same way. During the power on self-test mentioned earlier, the BIOS checks the hardware devices and counts the system memory. Out of all of the different types of system memory, the random access memory, better known as RAM, takes the longest to be counted. Counting the RAM takes time, and on a machine that has large amounts of RAM, this calculation can take several seconds. For example, a machine that has 512MB of RAM may take up to 3 seconds just to count the memory. On top of the RAM counting, a few other tests need to be done because your computer wants to make sure that all of the hardware in your computer is working properly. All of these system tests are not needed every time you boot, and can be turned off to save time. Most BIOS's offer a feature called quick boot. This feature will allow the user to turn off these tests. Other BIOSs only allow you to turn off the memory check, which will still cut down on a lot of time....