NW Doc

After the Hyper-V role is installed , When you try to create a new virtual machine, it fails to start with the following error:

The virtual machine could not be started because the hypervisor is not running.

Cause: Hardware virtualization or DEP was disabled in the BIOS.

Resolution: Enable Hardware virtualization or DEP in the BIOS. In some cases, the server needs to be physically shutdown in order for the new BIOS settings to take effect.

What is the DEP ?!!! Data Execution Prevention (DEP) is a set of hardware and software technologies that perform additional checks on memory to help protect against malicious code exploits.

Hardware-enforced DEP marks all memory locations in a process as non-executable unless the location explicitly contains executable code. One kind of malicious code attacks tries to insert and run code from non-executable memory locations. DEP helps prevent these attacks by intercepting them and raising an exception.

Hardware-enforced DEP

Hardware-enforced DEP marks all memory locations in a process as non-executable unless the location explicitly contains executable code. A class of attacks exists that tries to insert and run code from non-executable memory locations. DEP helps prevent these attacks by intercepting them and raising an exception.

Hardware-enforced DEP relies on processor hardware to mark memory with an attribute that indicates that code should not be executed from that memory. DEP functions on a per-virtual memory page basis, and DEP typically changes a bit in the page table entry (PTE) to mark the memory page.

Processor architecture determines how DEP is implemented in hardware and how DEP marks the virtual memory page. However, processors that support hardware-enforced DEP can raise an exception when code is executed from a page that is marked with the appropriate attribute set.

Advanced Micro Devices (AMD) and Intel have defined and shipped Windows-compatible architectures that are compatible with DEP.

Beginning with Windows XP SP2, the 32-bit version of Windows uses one of the following:

· The no-execute page-protection (NX) processor feature as defined by AMD.

· The Execute Disable Bit (XD) feature as defined by Intel.

To use these processor features, the processor must be running in Physical Address Extension (PAE) mode. However, Windows will automatically enable PAE mode to support DEP. Users do not have to separately enable PAE by using the /PAE boot switch.

Note: Because 64-bit kernels are Address Windowing Extensions (AWE) aware, there is not a separate PAE kernel in 64-bit versions of Windows.
For more information about PAE and AWE in Windows Server 2003, click the following article number to view the article in the Microsoft Knowledge Base:

283037 (http://support.microsoft.com/kb/283037/ ) Large memory support is available in Windows Server 2003 and in Windows 2000

Benefits

The primary benefit of DEP is that it helps prevent code execution from data pages, such as the default heap pages, various stack pages, and memory pool pages. Typically, code is not executed from the default heap and the stack. Hardware-enforced DEP detects code that is running from these locations and raises an exception when execution occurs. If the exception is unhandled, the process will be stopped. Execution of code from protected memory in kernel mode causes a Stop error.

DEP can help block a class of security intrusions. Specifically, DEP can help block a malicious program in which a virus or other type of attack has injected a process with additional code and then tries to run the injected code. On a system with DEP, execution of the injected code causes an exception. Software-enforced DEP can help block programs that take advantage of exception-handling mechanisms in Windows.

For more information Check Microsoft KBs

http://support.microsoft.com/kb/912923

http://support.microsoft.com/kb/875352/

http://blogs.technet.com/askcore/archive/2009/02/16/top-issues-for-microsoft-support-for-windows-server-2008-hyper-v-q2.aspx

Site

We can delete the old profiles lying in the system c:\documents and settings\ you can use the below command
delprof /Q /I /D:60

this will delete the profiles not in use more than 60 days

We use msconfig, regedit, Services manage for start windows fast. But i found a new software who can analyze boot time & diagnose it.

It is called Soluto, and you can download from http://www.soluto.com

The install is simple. Download and run the setup file

Reboot your system, and it will analyze all of the processes that launch at boot time. The cool part is that it looks up each application in a database that is updated by users like yourself - it has a built in wiki editing tool to update information about apps it does not recognize.

When it is finished, you can see all of the programs that impact your boot time. It shows you an exact boot time, and how much time each application takes to launch.

The application is crisp, and almost fun to use. The amount of detail on each application is amazing. The color coding will keep you from making mistakes - something easy to do when you are plunking away while drinking your third egg nog.

When you want to keep an app from running, simply pause it. It will never run again unless you manually launch it.

With a few quick clicks you can pause the applications you don't need and dramatically reduce your boot time.

Site

The file associations for .LNK files on a Windows 7 computer have changed from their default association to another application program, ie. Internet Explorer Picture Viewer, with the result that none of the program shortcut icons or desktop icons launch their respective programs - they all attempt to launch Explorer. Changing the file association on an individual shortcut results in all shortcuts being changed to the selected program. Is there a way to change the .LNK file associations back to the Windows default in order to relate the shortcuts to their respective application program?

Solution - Just download the Registry Fix and merged the .reg file with registry.

Site

TRACERT COMMANDS IS A WINDOWS UTLITY WHICH HELPS TO TRACE THE ROUTE OF PACKETS ON A NETWORK.
ITS ONE OF A USEFULL TOOL USED IN FINDING THE IP ADRESS OF A PERSON OR SERVER.
WHEN WE ARE CONNECTED TO A COMPUTER. AS EACH PACKETS OF TINFORMATION TO OUR COMPUTER PASSES TO THE NET
THROUGH ROUTERS .THE TRACING OF PACKETS HELPS US WITH. FINDING THE DESTINATION.
TRACE NETWORK : tracert [-d][-h maximum_hops][-j host-list][-w
timeout]target_name
PACKET/SITE TO IP
-d : do not resolve addresses to hostnames
-h maximum_hops : maximum number of hops to search for target
-j host-list : loose source route along host-list
-w timeout : wait timeout milliseconds for each reply
EX : TRACERT 192.63.19.100
--------------------------------------------------------------------------------------------
THIS UTLITY WAS USED TO KNOW WHETHER A SYSTEM OR SERVER IS ALIVE OR NOT WE SEND IT WITH A FEW PACKETS OF DATA .AND IF WE DOSENT HAS ANY LOSS OF DATA WHILE THE TRAFIC THE SERVE IS ALIVE.
PING HOST/IP : ping [-t] [-a] [-n count] [-l size] [-f] [-i TTL] [-v TOS]
[-r count] [-s count] [[-j host-list] | [-k host-list]][-w timeout] destination-list
Options:
-t Pings the specified host until stopped.
To see statistics and continue - type Control-Break;
To stop - type Control-C.
-a Resolve addresses to hostnames.
-n count Number of echo requests to send.
-l size Send buffer size.
-f Set Don't Fragment flag in packet.
-i TTL Time To Live.
-v TOS Type Of Service.
-r count Record route for count hops.
-s count Timestamp for count hops.
-j host-list Loose source route along host-list.
-k host-list Strict source route along host-list.
-w timeout Timeout in milliseconds to wait for each reply.
EX:PING 192.62.99.100
--------------------------------------------------------------------------------------------
THIS WILL BE FAIRLY IMPORTANT WHILE WE NEED TO DISGUISE AS SOME BODY AS AN IP ADRESS IS ONE KIND OF AUTHENTICATION CHANGE IP ON A
NETWORK CARD : ARP -s inet_addr eth_adr [if_addr]
ARP -d inet_addr [if_addr]
ARP -a [inet_addr] [-N if_addr]
-a :Displays current ARP entries by interrogating the current protocol data.
If inet_addr is specified, the IP and Physical addresses for only the specified computer are displayed. If more than one network interface uses ARP, entries for each ARP table are displayed.
-g : Same as -a
inet_addr : Specifies an internet address.
-N if addr : Displays the ARP entries for the network interface specified
by if_addr.
-d : Deletes the host specified by inet_addr.
-s : Adds the host and associates the Internet address inet_addr with the
Physical address eth_addr. The Physical address is given as 6 hexadecimal bytes seperated by hyphens. The entry is permanent.
eth_addr : Specifies a physical address
if_addr : If present, this specifies the Internet address of the interface
whose address translation table should be modified. If not present, the first applicable interface will be used.
--------------------------------------------------------------------------------------------
DISPLAY OR CHANGE FILE ATTRIBUTES : ATTRIB [+R|-R] [+A|-A] [+S|-S] [+H|-H]
[[drive:][path]filename] [/S]
+ Sets an attribute.
- Clears an attribute.
R Read-only file attribute.
A Archive file attribute.
S System file attribute.
H Hidden file attribute.
/S Processes files in all directories in the specified path.
--------------------------------------------------------------------------------------------
VIEW A NETWORK Using NET.exe
/NETWORK SETTINGS : NET CONFIG Displays your current workgroup settings.
NET CONFIG [/YES]
/YES Carries out the NET CONFIG command without first prompting you to provide information or confirm actions.

NET DIAG Runs the Microsoft Network Diagnostics program to test the hardware
connection between two computers and to display information about a single computer.
NET DIAGNOSTICS [/NAMES | /STATUS]
/NAMES Specifies a diagnostic server name in order to avoid conflicts when
NET DIAG is used simultaneously by multiple
users. This option works only when the network uses a NetBIOS protocol.
/STATUS Enables you to specify a computer about which you want network
diagnostics information.

NET HELP Displays information about NET commands and error messages.
command /?
NET HELP [suffix]
NET HELP errornum
command /? -Specifies the Microsoft NET command that you want information
about.
suffix -Specifies the second word of the command you want information
about. For example, the suffix of NET VIEW is VIEW.
errornum -Specifies the number of the error message that you want
information about.

NET INIT Loads protocol and network-adapter drivers without binding them to
Protocol Manager. This command may be required if you are using a third-party network-adapter driver. You can then bind the drivers to Protocol Manager by typing
NET START NETBIND.
NET INITIALIZE [/DYNAMIC]

/DYNAMIC Loads the Protocol Manager dynamically. This is useful with some
third-party networks, such as Banyan® VINES®, to resolve memory problems.

NET LOGOFF Breaks the connection between your computer and the shared
resources to which it is connected.
NET LOGOFF [/YES]

/YES Carries out the NET LOGOFF command without first prompting you to
provide information or confirm actions.

NET LOGON Identifies you as a member of a workgroup.
NET LOGON [user [password | ?]] [/DOMAIN:name] [/YES] [/SAVEPW:NO]

user- Specifies the name that identifies you in your workgroup. The name you
specify can contain up to 20 characters.
password -The unique string of characters that authorizes you to gain access
to your password-list file. The password
can contain up to 14 characters.
? -Specifies that you want to be prompted for your password.
/DOMAIN -Specifies that you want to log on to a Microsoft Windows NT or LAN
Manager domain. name Specifies the Windows NT
or LAN Manager domain you want to log on to.
/YES -Carries out the NET LOGON command without first prompting you to
provide information or confirm actions.
/SAVEPW:NO Carries out the NET LOGON command without prompting you to
create a password-list file.
If you would rather be prompted to type your user name and password instead
of specifying them in the NET LOGON command
line, type NET LOGON without options.

NET PASSWORD Changes your logon password.
NET PASSWORD [oldpassword [newpassword]]
NET PASSWORD \\computer| /DOMAIN:name [user [oldpassword [newpassword]]]

oldpassword -Specifies your current password.
newpassword -Specifies your new password. It can have as many as 14
characters.
computer -Specifies the Windows NT or LAN Manager server on which you want
to change your password.
/DOMAIN -Specifies that you want to change your password on a Windows NT or LAN Manager domain.
name -Specifies the Windows NT or LAN Manager domain on which you want to change your password.
user -Specifies your Windows NT or LAN Manager user name.
The first syntax line above is for changing the password for your password-list file. The second syntax line above is for changing your password on a Windows NT or LAN Manager server or domain.

NET PRINT Displays information about print queues and controls print jobs.
NET PRINT \\computer[\printer] | port [/YES]
NET PRINT \\computer| port [job# [/PAUSE | /RESUME | /DELETE]] [/YES]

computer -Specifies the name of the computer whose print queue you want
information about.
printer -Specifies the name of the printer you want information about.
port -Specifies the name of the parallel (LPT) port on your computer that is
connected to the printer you want information about.
job# -Specifies the number assigned to a queued print job. You can specify
the following options:
/PAUSE -Pauses a print job.
/RESUME -Restarts a print job that has been paused.
/DELETE -Cancels a print job.
/YES -Carries out the NET PRINT command without first prompting you to
provide information or confirm actions.
When you specify the name of a computer by using the NET PRINT command, you
receive information about the print queues
on each of the shared printers that are connected to the computer.

NET START Starts services. NOTE: Services cannot be started from a command
prompt within Windows.
NET START [BASIC | NWREDIR | WORKSTATION | NETBIND | NETBEUI | NWLINK]
[/LIST] [/YES] [/VERBOSE]

BASIC Starts the basic redirector.
NWREDIR Starts the Microsoft Novell® compatible redirector.
WORKSTATION Starts the default redirector.
NETBIND Binds protocols and network-adapter drivers.
NETBEUI Starts the NetBIOS interface.
NWLINK Starts the IPX/SPX-compatible interface.
/LIST Displays a list of the services that are running.
/YES Carries out the NET START command without first prompting you to
provide information or confirm actions.
/VERBOSE Displays information about device drivers and services as they are
loaded.
To start the workgroup redirector you selected during Setup, type NET START
without options. In general, you don't need to use any of the options.

NET STOP Stops services. NOTE: Services cannot be stopped from a command
prompt within Windows.
NET STOP [BASIC | NWREDIR | WORKSTATION | NETBEUI | NWLINK] [/YES]
NET STOP Stops the basic redirector.
BASIC Stops the basic redirector.
NWREDIR Stops the Microsoft Novell® compatible redirector.
WORKSTATION Stops the default redirector.
NETBEUI Stops the NetBIOS interface.
NWLINK Stops the IPX/SPX compatible interface.
/YES Carries out the NET STOP command without first prompting you to provide
information or confirm actions.
To stop the workgroup redirector, type NET STOP without options. This breaks
all your connections to shared resources and removes the NET commands from your computer's memory.

NET TIME Displays the time on or synchronizes your computer's clock with the
shared clock on a Microsoft Windows for Workgroups,Windows NT, Windows 95, or NetWare time server.
NET TIME [\\computer | /WORKGROUP:wgname] [/SET] [/YES]

computer -Specifies the name of the computer (time server) whose time you
want to check or synchronize your computer's
clock with. /WORKGROUP Specifies that you want to use the clock on a computer (time
server) in another workgroup.
wgname -Specifies the name of the workgroup containing a computer whose
clock you want to check or synchronize your computer's clock with.
If there are multiple time servers in that workgroup, NET TIME uses the
first one it finds.
/SET Synchronizes your computer's clock with the clock on the computer or
workgroup you specify.
/YES Carries out the NET TIME command without first prompting you to provide
information or confirm actions.

NET USE Connects or disconnects your computer from a shared resource or
displays information about your connections.
NET USE [drive: | *] [\\computer\directory [password | ?]]
[/SAVEPW:NO] [/YES] [/NO]
NET USE [port:] [\\computer\printer [password | ?]]
[/SAVEPW:NO] [/YES] [/NO]
NET USE drive: | \\computer\directory/DELETE [/YES]
NET USE port: | \\computer\printer/DELETE [/YES]
NET USE * /DELETE [/YES]
NET USE drive: | * /HOME

drive -Specifies the drive letter you assign to a shared directory.
* -Specifies the next available drive letter. If used with /DELETE,
specifies to disconnect all of your connections.
port -Specifies the parallel (LPT) port name you assign to a shared printer.
computer -Specifies the name of the computer sharing the resource.
directory -Specifies the name of the shared directory.
printer -Specifies the name of the shared printer.
password -Specifies the password for the shared resource, if any.
? -Specifies that you want to be prompted for the password of the shared
resource. You don't need to use this option unless the password is optional.
/SAVEPW:NO Specifies that the password you type should not be saved in your
password-list file. You need to retype the password the next time you connect to this resource.
/YES Carries out the NET USE command without first prompting you to provide
information or confirm actions.
/DELETE Breaks the specified connection to a shared resource.
/NO Carries out the NET USE command, responding with NO automatically when
you are prompted to confirm actions.
/HOME Makes a connection to your HOME directory if one is specified in your
LAN Manager or Windows NT user account.
To list all of your connections, type NET USE without options.

NET VER Displays the type and version number of the workgroup redirector you
are using.
NET VER

NET VIEW Displays a list of computers in a specified workgroup or
the shared resources available on a specified computer.
NET VIEW [\\computer] [/YES]
NET VIEW [/WORKGROUP:wgname] [/YES]

computer -Specifies the name of the computer whose shared resources you want
to see listed.
/WORKGROUP Specifies that you want to view the names of the computers in
another workgroup that share resources.
wgname -Specifies the name of the workgroup whose computer names you want to
view.
/YES Carries out the NET VIEW command without first prompting you to provide
information or confirm actions.
To display a list of computers in your workgroup that share
resources, type NET VIEW without options.
--------------------------------------------------------------------------------------------
DEBUG : DEBUG [[drive:][path]filename [testfile-parameters]]
[drive:][path]filename Specifies the file you want to test.
testfile-parameters Specifies command-line information required by the
file you want to test.
***After Debug starts, type ? to display a list of debugging commands.***
To get out of Debug you need to "Q" and enter
To execute the Debug routine you need to do "G" and enter
--------------------------------------------------------------------------------------------
IPCONFIG : ipconfig [/all][/batch][/renew_all][/release_all][/renew
N][/release N]
/All Display detailed information.
/Batch [file] Write to file or ./WINIPCFG.OUT
/renew_all Renew all adapters.
/release_all Release all adapters.
/renew N Renew adapter N.
/release N Release adapter N.
--------------------------------------------------------------------------------------------
FTP : Depending upon the version of FTP and the Operating System being
used each of the following commands may or may
not work. Generally typing -help or a ? will list the commands
available to you.
Command Information
! : Using this command you will have the capability of toggling back and
forth between the operating system and ftp.
Once back in the Operating System generally typing exit will take you
back to the FTP command line.
? : Access the Help screen.
abor : Abort Transfer
append : Append text to a local file.
ascii : Switch to ASCII transfer mode
bell : Turns bell mode on / off.
binary : Switches to binary transfer mode.
bye : Exits from FTP.
cd : Changes directory.
cdup : Change to parent directory on remote system
close : Exits from FTP.
cwd : Change working directory on remote system
dele : Delete file on remote system
delete : Deletes a file.
debug : Sets debugging on / off.
dir : Lists files if connected.
dir -C = Will list the files in wide format.
dir -1 = Lists the files in bare format in alphabetic order
dir -r = Lists directory in reverse alphabetic order.
dir -R = Lists all files in current directory and sub directories.
dir -S = Lists files in bare format in alphabetic order.
disconnect : Exits from FTP.
get : Get file from the computer connected to.
glob : Sets globbing on / off.
hash : Sets hash mark printing on / off
help : Access the Help screen and displays information about command if
command typed after help.
lcd : Displays local directory or if path typed after lcd will change local
directory.
list : Send a list of file names in the current directory on the remote
system on the data connection.
literal : Sends command line
ls : Lists files if connected.
mdelete : Multiple delete
mdir : Lists contents of multiple remote directories
mget : Get multiple files
mkd : Make directory.
mkdir : Make directory.
mls : Lists contents of multiple remote directories.
mode : Specifies the transfer mode. Available parameters are generally S, B
or C.
mput : Sent multiple files
nlst : Send a full directory listing of the current directory on the remote
system on the data connection.
open : Opens address.
pass : Supplies a user password.
port : Specify the client port number.
prompt : Enables disables prompt.
put : Send one file
pwd : Print working directory
quit : Exits from FTP.
quote : Send arbitrary ftp command
recv : Receive file
retr : Get file from remote system.
remotehelp : Get help from remote server
rename : Renames a file
rmdir : Removes a directory
send : Send single file
status : Shows status of currently enabled / disabled options
trace : Toggles packet tracing
type : Set file transfer type
user : Send new user information
verbose : Sets verbose on / off.
--------------------------------------------------------------------------------------------
DISPLAY TCP/IP
NETWORK PROTOCOL : NETSTAT [-a] [-e] [-n] [-s] [-p proto] [-r] [interval]
INFORMATION
-a Displays all connections and listening ports.
-e Displays Ethernet statistics. This may be combined with the -s option.
-n Displays addresses and port numbers in numerical form.
-p proto -Shows connections for the protocol specified by proto; proto may
be TCP or UDP. If used with the -s option
to display per-protocol statistics, proto may be TCP, UDP, or IP.
-r Displays the routing table.
-s Displays per-protocol statistics. By default, statistics are shown for
TCP, UDP and IP; the -p option may be used to specify a subset of the default.
interval Redisplays selected statistics, pausing interval seconds between
each display. Press CTRL+C to stop redisplaying statistics. If omitted, netstat will print the current
configuration information once.
--------------------------------------------------------------------------------------------
DISPLAY OR SET A SEARCH PATH FOR EXECUTABLE FILES :
PATH [[drive:]path[;...]]
PATH ;
Type PATH ; to clear all search-path settings and direct Windows to search
only in the current directory.
Type PATH without parameters to display the current path.
--------------------------------------------------------------------------------------------
MANUALLY CONFIGURE MODEMS ROUTE :
ROUTE [-f] [-p] [command [destination] [MASK netmask] [gateway] [METRIC
metric]
[IF interface]
-f Clears the routing tables of all gateway entries. If this is used in
conjunction with one of the commands, the tables are cleared prior to running the command.
-p When used with the ADD command, makes a route persistent across boots of
the system. By default, routes are not
preserved when the system is restarted. When used with the PRINT
command, displays the list of registered persistent routes. Ignored for all other commands, which always affect the appropriate persistent routes. This option
is not supported Windows'95. command One of these:
PRINT Prints a route
ADD Adds a route
DELETE Deletes a route
CHANGE Modifies an existing route destination Specifies the host.
MASK Specifies that the next parameter is the 'netmask' value.
NETMASK Specifies a subnet mask value for this route entry. If not
specified, it defaults to 255.255.255.255.
GATEWAY Specifies gateway. interface the interface number for the specified
route.
METRIC Specifies the metric, ie. cost for the destination.
All symbolic names used for destination are looked up in the network
database file NETWORKS. The symbolic names for
gateway are looked up in the host name database file HOSTS.
If the command is PRINT or DELETE. Destination or gateway can be a wildcard,
(wildcard is specified as a star '*'), or the gateway argument may be omitted.
If Dest contains a * or ?, it is treated as a shell pattern, and only
matching destination routes are printed. The '*' matches any string,
and '?' matches any one char. Examples: 157.*.1, 157.*, 127.*, *224*.
Diagnostic Notes: Invalid MASK generates an error, that is when (DEST & MASK) != DEST.
Example> route ADD 157.0.0.0 MASK 155.0.0.0 157.55.80.1 IF 1
The route addition failed: 87

EXAMPLES
Examples:
>route PRINT
>route ADD 157.0.0.0
^destination
MASK 255.0.0.0
^mask 157.55.80.1
^gateway METRIC 3
^metric IF 2
^Interface
If IF is not given, it tries to find the best interface for a given gateway.
>route PRINT
>route PRINT 157* .... Only prints those matching 157*
>route DELETE 157.0.0.0
>route PRINT
One way to use this would be as follows: You can't ping the server that you
are connecting to, but you know the ip address to be 127.16.16.10
>route PRINT
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 14 a4 c3 44 20 ...... Xircom CardBus Ethernet 10/100 Adapter
0x3 ...00 b0 d0 43 55 a5 ...... 3Com EtherLink PCI
0x4 ...00 01 b0 8f 8f 80 ...... NdisWan Adapter
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 127.16.8.14 127.16.8.14 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
127.16.0.0 255.255.0.0 127.16.8.14 127.16.8.14 1
127.16.8.14 255.255.255.255 127.0.0.1 127.0.0.1 1
192.168.50.0 255.255.255.0 192.168.50.65 192.168.50.65 2
192.168.50.65 255.255.255.255 127.0.0.1 127.0.0.1 1
192.168.50.255 255.255.255.255 192.168.50.65 192.168.50.65 1
224.0.0.0 224.0.0.0 127.16.8.14 127.16.8.14 1
224.0.0.0 224.0.0.0 192.168.50.65 192.168.50.65 1
255.255.255.255 255.255.255.255 192.168.50.65 192.168.50.65 1
** notice that no gateway for the current ip goes to 255.255.255.0, so it
must be added. Now do the following command:
>route ADD 127.16.0.0 MASK 255.255.255.0 <your current ip from winntcfg or
>winipcfg> METRIC 1
**Then do the following command:
>route print
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 127.16.8.14 127.16.8.14 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
127.16.0.0 255.255.0.0 127.16.8.14 127.16.8.14 1
** 127.16.0.0 255.255.255.0 127.16.8.14 127.16.8.14 1
127.16.8.14 255.255.255.255 127.0.0.1 127.0.0.1 1
192.168.50.0 255.255.255.0 192.168.50.65 192.168.50.65 2
192.168.50.65 255.255.255.255 127.0.0.1 127.0.0.1 1
192.168.50.255 255.255.255.255 192.168.50.65 192.168.50.65 1
224.0.0.0 224.0.0.0 127.16.8.14 127.16.8.14 1
224.0.0.0 224.0.0.0 192.168.50.65 192.168.50.65 1
255.255.255.255 255.255.255.255 192.168.50.65 192.168.50.65 1

**Notice the ** ip address gives you the default gateway.
--------------------------------------------------------------------------------------------
DISPLAY PROTOCOL STATISTICS
AND CURRENT TCP/IP CONNECTIONS
USING NBT(NETBIOS OVER TCP/IP): NBTSTAT [-a RemoteName] [-A IP address]
[-c] [-n]
[-r] [-R] [-s] [S] [interval] ]
-a (adapter status): Lists the remote machine's name table given its name
-A (Adapter status): Lists the remote machine's name table given its IP address
-c (cache) : Lists the remote name cache including the IP addresses
-n (names) : Lists local netBIOS names
-r (resolved) : Lists names resolved by broadcast and via WINS
-R (Reload) : Purges and reloads the remote cache name table
-S (Sessions) : Lists sessions table with the destination IP addresses
-s (sessions) : Lists sessions table converting destination IP addresses to host names via the hosts file RemoteName Remote host machine name. IP address Dotted decimal representation of the IP address. interval Redisplays selected statistics, pausing interval seconds between each display. Press Ctrl+C to stop redisplaying statistics.

Site

Info about your system's BIOS, then type this command

wmic bios get name,serialnumber,version

Info about your BIOS name, current version and it's serial number if there is any.

wmic csproduct get name,identifyingnumber,uuid

Info about your System motherboard (that happen to be the name) and it's UUID

wmic cpu get name,CurrentClockSpeed,MaxClockSpeed

Info about what's the CPU clock speed, also if you have turbo boost CPUs, what's the Max Clock Speed your system is capable of for the current configuration. Of course you can always overclock your CPU and that will too reflect the change.

wmic cpu get name,CurrentClockSpeed,MaxClockSpeed /every:1

If you have dynamic clock speed running, then add this line, it will refresh and monitor the Clock speed every 1 second.

Simply copy paste following code in NOTEPAD and save the file with name " Show_Hidden_Files_On_Off.vbs " (including quotes):

Hidden = "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden"

SHidden = "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden"

Set Sh = WScript.CreateObject("WScript.Shell")

St = Sh.RegRead(Hidden)

If St = 2 Then

Sh.RegWrite Hidden, 1, "REG_DWORD"

Sh.RegWrite SHidden, 1, "REG_DWORD"

Else

Sh.RegWrite Hidden, 2, "REG_DWORD"

Sh.RegWrite SHidden, 0, "REG_DWORD"

End If

Sh.SendKeys("{F5}")

After installation of Oracle10g, there was a problem ..couldnt login using SQL+. None of the accounts(scott/tiger) worked . At last a quick web search gave the solution . Here is what it is:

From your command prompt, type

sqlplus "/ as sysdba"

Once logged in as SYSDBA, you need to unlock the SCOTT account
SQL> alter user scott account unlock;
SQL> grant connect, resource to scott;

Accessing the "em" web application ?
http://hostname:1158/em

http://database-host:1158/em

Login as:
username : sysdba
password : <password>
Connect : Sysdba

Source

Whenever you insert a USB drive, CD/DVD, etc into your system, Windows automatically launches an Autorun dialog box which allows you to select an action from the given list. You can browse the content, play media files, etc using Autorun dialog box.

To disable Autorun functionality in Windows:

1. Type regedit in RUN or Startmenu searchbox and press Enter. It'll open Registry Editor.

2. Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

If the above key doesn't exist, create it.

3. In right-side pane, create a new DWORD value NoDriveTypeAutoRun and set its value to any of following according to your requirements:

FF - To disable AutoRun on all drives
20 - To disable AutoRun on CD-ROM drives
4 - To disable AutoRun on removable drives
8 - To disable AutoRun on fixed drives
10 - To disable AutoRun on network drives
40 - To disable AutoRun on RAM disks
1 - To disable AutoRun on unknown drives

4. If you want to disable Autorun on a combination of drives, you'll need to calculate sum of the values. For example, if you want to disable Autorun on CD-ROM drives and removable drives, you'll need to set the value to 20+4=24.

5. If you want to restore the Autorun functionality, simply delete the NoDriveTypeAutoRun DWORD value created in Step 3 Or you can set the default value which is given below:

Windows 2000: 95

Windows XP: 91

Windows Server 2003: 95

Windows Vista, Server 2008 and 7: 91

6. If you want to disable Autorun functionality for all users in your system, use the "HKEY_LOCAL_MACHINE" instead of "HKEY_CURRENT_USER" mentioned in Step 2.

In Windows you can change desktop wallpaper, screen saver, themes and other appearance settings by right-click on Desktop and select "Properties".

If you want to disable all or a few options in Desktop Properties to restrict users or you might want to enable those options in case they are disabled by your system administrator or a virus infection.

Following tutorial will help you in enabling or disabling all or a particular option in Desktop Properties:

A. Disable Themes Tab in Desktop Properties:

Type regedit in RUN dialog box and press Enter. Now goto:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer

If "Explorer" key is not present, then create it. Now in right-side pane, create a new DWORD value NoThemesTab and set its value to 1 to disable it.

B. Disable Desktop Tab in Desktop Properties:

Type regedit in RUN dialog box and press Enter. Now goto:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ System

If "System" key is not present, then create it. Now in right-side pane, create a new DWORD value NoDispBackgroundPage and set its value to 1 to disable it.

C. Disable Screen Saver Tab in Desktop Properties:

Type regedit in RUN dialog box and press Enter. Now goto:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ System

If "System" key is not present, then create it. Now in right-side pane, create a new DWORD value NoDispScrSavPage and set its value to 1 to disable it.

D. Disable both Themes and Appearance Tabs in Desktop Properties:

Type regedit in RUN dialog box and press Enter. Now goto:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ System

If "System" key is not present, then create it. Now in right-side pane, create a new DWORD value NoDispAppearancePage and set its value to 1 to disable it.

E. Disable Settings Tab in Desktop Properties:

Type regedit in RUN dialog box and press Enter. Now goto:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ System

If "System" key is not present, then create it. Now in right-side pane, create a new DWORD value NoDispSettingsPage and set its value to 1 to disable it.

* If you want to enable a restricted tab in Desktop Properties, just delete the required DWORD value as mentioned above or change its value to 0 instead of 1.

To hide or show any specific Control Panel applet in Windows.

A: For All Windows Versions except Windows 95, 98 & Me

1. Type regedit in RUN dialog box and press Enter. Now go to:

HKEY_CURRENT_USER\Control Panel\
OR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\

2. Under this key create a new key with the name don't load , so the new path will be:

HKEY_CURRENT_USER\Control Panel\don't load
OR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\don't load

3. Now in right-side pane, create new String value. Set its name to the file name of the applet which you want to hide, e.g. if you want to hide Display applet then set its name to Desk.cpl now set its value to no to hide it. If you want to show it again, either set its value to yes or simply delete the String value.

To use the above mentioned method, you'll need to know the .CPL file name of the desired applet. You can search for .CPL in Windows Search or you can use help of following list which contains .cpl file names of almost all default Control Panel applets:
Access.cpl Accessibility
Appwiz.cpl Add or Remove Programs
Bthprops.cpl Bluetooth Devices
Desk.cpl Display
Hdwwiz.cpl Add New Hardware
Inetcpl.cpl Internet Options
Intl.cpl Regional and Language Options
Joy.cpl Game Controllers
Keymgr.cpl Stored User Names and Passwords
Liccpa.cpl Licensing
Main.cpl Mouse
Mlcfg32.cpl Mail
Mmsys.cpl Sound and Audio Devices
Ncpa.cpl Network Connections
Nusrmgr.cpl User Accounts
Nwc.cpl Netware client connectivity
Odbccp32.cpl ODBC Data Source Administrator
Powercfg.cpl Power Options
Sysdm.cpl System
Telephon.cpl Phone and Modem Options
Timedate.cpl Date and Time
Sapi.cpl Speech
Wuaucpl.cpl Automatic Updates
Wscui.cpl Security Center or Action Center

B: For All Windows Versions except Windows 95, 98 & Me

1. Type regedit in RUN dialog box and press Enter. Now go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies

2. Look for a key "Explorer" under it. If its not present, then create a new one and give it name Explorer.

3. Select "Explorer" key and in right-side pane, create a new DWORD value DisallowCpl and set its value to 1

4. Now create another new key under Explorer key with the name DisallowCpl so the new path will be:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer\DisallowCpl

5. Select "DisallowCpl" key and in right-side, create new String value with name 1 and set its value to the applet name which you want to hide.You don't need to use the .cpl file name of applet in this method. You have to put the applet label which you see in Control Panel.

e.g., If you want to hide AutoPlay applet, then create a new String value, give it name 1 and set its value to AutoPlay. If you want to hide more applets, then simply create more String values with names 2, 3 and so on and set their values to the applet label.

C: For All Windows Versions except Windows 95, 98 & Me

In this method, you'll tell Windows which applets should be visible and Windows will automatically hide the rest.

Its useful when you want to show a few specific applets and want to hide remaining applets. So you just need to create a few String values to tell Windows which applets you want to show. It'll save your valuable time.

1. Type regedit in RUN dialog box and press Enter. Now go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies

2. Look for a key "Explorer" under it. If its not present, then create a new one and give it name Explorer.

3. Select "Explorer" key and in right-side pane, create a new DWORD value RestrictCpl and set its value to 1

4. Now create another new key under Explorer key with the name RestrictCpl so the new path will be:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer\RestrictCpl

5. Select "RestrictCpl" key and in right-side, create new String value with name 1 and set its value to the applet name which you want to show.You don't need to use the .cpl file name of applet in this method. You have to put the applet label which you see in Control Panel.

e.g., If you want to show AutoPlay applet, then create a new String value, give it name 1 and set its value to AutoPlay. If you want to show more applets, then simply create more String values with names 2, 3 and so on and set their values to the applet label.

Now Windows will only show the applets which you mentioned in String values, other applets will be hidden.

D: For Windows 95, 98 & Me

1. Open "%windir%\Control.INI" file. Where "%windir%" denotes Windows folder which is present in system drive where Windows is installed.

2. You'll see a line saying [don't load] in the file. If you can't find it, then create a new line at last.

3. Now under this line, you can set .CPL file name of your desired applet which you want to hide in following format:

filename.cpl=no

e.g.,

If you want to hide Display applet, then the syntax will be:

desk.cpl=no

You can create similar lines for other applets which you want to hide. The .CPL file name can be obtained from the list mentioned in A.

Source

Some important and useful restrictions, which can be put in Windows 2000, XP, Server 2003, Vista, Server 2008 and 7.

A. Open Registry Editor

To open Registry Editor by providing regedit command in RUN or Start menu Search box and press Enter.

B. Create Registry Key

Go to following keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System

1. Restricting Desktop Properties

Create or modify required DWORD value: NoDispCPL and set its value to 1

2. Restricting Task Manager

Create new DWORD DisableTaskMgr and set its value to 1

3. Restricting Registry Editor

Create new DWORD DisableRegistryTools and set its value to 1

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

4. Restricting Taskbar Properties

Create new DWORD NoSetTaskbar and set its value to 1

5. Restricting System Properties

Create new DWORD NoPropertiesMyComputer and set its value to 1

6. Restricting Folder Options

Create new DWORD NoFolderOptions and set its value to 1

7. Restricting Control Panel

Create new DWORD NoControlPanel and set its value to 1

8. Restricting Locking/Unlocking of Taskbar

Create new DWORD LockTaskbar and set its value to 1

9. Restricting right-click on Taskbar

Create new DWORD NoTrayContextMenu and set its value to 1

10. Restricting Toolbars in Taskbar

Create new DWORD NoToolbarsOnTaskbar and set its value to 1

11. Restricting drag-and-drop and right-click in Start Menu

Create new DWORD NoChangeStartMenu and set its value to 1

12. Restricting RUN in Start Menu

Create new DWORD NoRun and set its value to 1

13. Restricting Shut Down, Restart, Sleep and Hibernate commands

Create new DWORD NoClose and set its value to 1

14. Restricting Log off in Start Menu

Create new DWORD StartMenuLogOff and set its value to 1

15. Restricting Active Desktop Feature

Create new DWORD NoActiveDesktop and set its value to 1

16. Restricting adding/removing items to/from Toolbars

Create new DWORD NoToolbarCustomize and set its value to 1

17. Restricting adding/removing Toolbars

Create new DWORD NoBandCustomize and set its value to 1

18. Restricting notification at low disk space

Create new DWORD NoLowDiskSpaceChecks and set its value to 1

19. Restricting Command Prompt

Go to following key:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System

Create new DWORD DisableCMD and set its value to 2

20. Restricting Writing to USB Drives

Go to following key:

HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\StorageDevicePolicies

Create new DWORD WriteProtect and set its value to 1

21. Restricting "New" option in context menu

Go to following key:

HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenu Handlers\New

And delete the value of Default, e.g., empty it.

22. Restricting "Send To" option in context menu

Go to following key:

HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenu Handlers\Send To

And delete the value of Default, e.g., empty it.

23. Restricting any desired application

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun

Create new String value with any name, like 1 and set its value to the desired program's EXE file.

e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, simply create more String values with names 2, 3 and so on and set their values to the program's exe file.

24. Restricting Drives in My Computer

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

In right-side pane, create new DWORD NoViewOnDrive and change its value as following:

3 : To Restrict A and B drives only.
4 : To Restrict C drive only.
7 : To Restrict A, B, and C drives only.
8 : To Restrict D drive only.
F : To Restrict A, B, C, and D drives only.
03FFFFFF : To Restrict all drives.

If you want more specific restrictions, like you want to restrict a combination of drives, you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:

A: 1
B: 2
C: 4
D: 8
E: 16
F: 32
G: 64
H: 128
I: 256
J: 512
K: 1024
L: 2048
M: 4096
N: 8192
O: 16384
P: 32768
Q: 65536
R: 131072
S: 262144
T: 524288
U: 1048576
V: 2097152
W: 4194304
X: 8388608
Y: 16777216
Z: 33554432
ALL: 67108863

*So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60

*You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.

*If you want to remove the restriction, simply delete the DWORD or set its value to 0

In Windows, to add a static route, the syntax is as below:

route add [destination network] mask [destination network mask] [default gateway] -p

Example:
route add 10.0.0.0 mask 255.255.255.0 192.168.1.1 -p

*Without "-p", the route will be erased upon next reboot.

To see the routing table:

route print

To delete the route:

route delete [network]

Example:

route delete 10.0.0.0

* Make a Batch file for easy.

To repair Windows Advance Option (F8)

The reason for corrupt of Windows Advance Option - Safe mode & other are not work (system restart or error of BSOD) is Virus. Some Virus remove the Windows Advance Option Menu Setting.

To resolve the issue:

The registry keys to boot into Safe Mode are under the SafeBoot key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot

You can boot into Safe Mode without or with networking, there is a subkey for each mode: Minimal (no networking) and Network (with networking).

Each device, driver or service that has to be started has a subkey under the Minimal or Network key.

If you want to disable a device, driver or service in Safe Mode, just delete the corresponding subkey (make a backup first).
I tested this with key {4D36E965-E325-11CE-BFC1-08002BE10318} (resulted in a disabled CD-ROM drive) and PlugPlay (resulted in a disabled Plug and Play service).

I compared several SafeBoot registry keys for Windows XP SP2 on different hardware platforms, and they were all identical. However, there were some small differences when comparing different operatings systems (Windows XP SP1, SP2 and Windows 2003 SP1). Remember that Safe Mode was introduced with Windows 2000.
These are minor differences, just listing devices, drivers or services that are only present on one version of Windows. For example, I found Volume shadow copy on a Windows 2003 and not on Windows XP. And Windows 2003 also had less network services than Windows XP, this is probably a result of the default hardening of Windows 2003: more services and applications are disabled by default on Windows 2003 than on Windows XP.

To repair you PC for Working of Windows Advance Option Menu insert or check the safe mode registry setting is there if not insert it. If you want to insert the Safe Mode default registry setting than download the attachment & Import it.

Download

Source

When dealing with a Blue Screen of Death at boot - the first option should be to boot into Safe Mode (press F8 during bootup). From safe mode you can run a system restore with %systemroot%\system32\restore\rstrui.exe

Some hardware failures are so severe they prevent booting into Safe Mode.

The recovery console allows an alternative boot option giving a limited command prompt - this can be used to disable services or replace system files until you are able to boot into safe mode.

Recovery Console commands:

ATTRIB   Change file attributes
BATCH    Execute a batch file
CD       Change directory
CHKDSK   Check Disk
CLS      Clear screen
COPY     Copy files*
DEL      Delete Files*
DIR      Directory listing
DISABLE  Disable Service
DISKPART Create or delete disk Partitions (like running setup)
ENABLE   Enable Service
EXIT     Quit the recovery console and reboot
EXPAND
FIXBOOT  Write a new boot sector to the system partition
FIXMBR   Repair the Master boot Record
FORMAT   FORMAT drive /FS:NTFS
HELP
LISTSVC  List all services and drivers
LOGON    Logon as administrator (local)
MAP      List local physical drive mappings
MAP arc  List local physical drive mappings(ARC path)
MD       Make Directory*
MORE
RD       Remove Directory*
REN      Rename file*
SYSTEMROOT Set the current directory to be %Systemroot%

* File operations are only possible on:
  system directories, floppy drive(removable media), Root directories,
  local install sources. You can copy FROM but not TO a floppy disk.

Installation:

The recovery console is not installed by default, from the install CD use the command: D:\i386\winnt32 /cmdcons
Then restart the machine.

TaskList displays all running applications and services with their Process ID (PID) This can be run on either a local or a remote computer.

Syntax
      tasklist options

Options:

   /s computer  Name or IP address of a remote computer
                don't use backslashes. Default = local computer.

   /u domain\user [/p password]]
                Run under a different account

   /svc         List information for each process without truncation.
                Valid when /fo=TABLE. Cannot be used with /m or /v

   /m [ModuleName]
                Show the processes that include the given module.

   /v           Verbose task information

   /fo {TABLE|LIST|CSV}]
                Output format, the default is TABLE.

   /nh          No Headers in the output (does not apply to LIST output)

   /fi FilterName [/fi FilterName2 [ ... ]]
                Apply one of the Filters below:

                   Imagename   eq, ne                  String
                   PID         eq, ne, gt, lt, ge, le  Positive integer.
                   Session     eq, ne, gt, lt, ge, le  Any valid session number.
                   SessionName eq, ne                  String
                   Status      eq, ne                  RUNNING | NOT RESPONDING
                   CPUTime     eq, ne, gt, lt, ge, le  Time hh:mm:ss
                   MemUsage    eq, ne, gt, lt, ge, le  Any valid integer.
                   Username    eq, ne                  User name ([Domain\]User).
                   Services    eq, ne                  String
                   Windowtitle eq, ne                  String
                   Modules     eq, ne                  String

Examples:

List the services running under each process:

TASKLIST /svc

List the services running under each SvcHost process:

TASKLIST /FI "imagename eq svchost.exe" /svc

List the services running now:

TASKLIST /v /fi "STATUS eq running"

List the services running under a specific user account:

TASKLIST /v /fi "username eq SERVICE_ACCT05"

Service Control - Create, Start, Stop, Query or Delete any Windows SERVICE. The command options for SC are case sensitive.

Syntax
      SC [\\server] [command] [service_name] [Options]

Key
   server       : The machine where the service is running

   service_name : The KeyName of the service, this is often but not always
                  the same as the DisplayName shown in Control Panel, Services.
                  You can get the KeyName by running: 
                     SC GetKeyName <DisplayName>

   commands:
          query  [qryOpt]   Show status
          queryEx [qryOpt]  Show extended info - pid, flags
          GetDisplayName    Show the DisplayName
          GetKeyName        Show the ServiceKeyName
          EnumDepend        Show Dependencies
          qc                Show config - dependencies, full path etc
          start          START a service.
          stop           STOP a service
          pause          PAUSE a service.
          continue       CONTINUE a service.
          create         Create a service. (add it to the registry)
          config         permanently change the service configuration
          delete         Delete a service (from the registry)
          control        Send a control to a service
          interrogate    Send an INTERROGATE control request to a service
          Qdescription   Query the description of a service
          description    Change the description of a service
          Qfailure       Query the actions taken by a service upon failure
          failure        Change the actions taken by a service upon failure
          sdShow         Display a service's security descriptor using SDDL
          SdSet          Sets a service's security descriptor using SDDL

   qryOpt:
          type= driver|service|all
                         Query specific types of service
          state= active|inactive|all
                         Query services in a particular state only
          bufsize= bytes 
          ri= resume_index_number (default=0)
          group= groupname
                         Query services in a particular group

   Misc commands that don't require a service name:
          SC  QueryLock  Query the LockStatus for the ServiceManager Database.
                         this will show if a service request is running
          SC  Lock       Lock the Service Database
          SC  BOOT       Values are {ok | bad} Indicates whether to save  
                         the last restart configuration as the `last-known-good`
                         restart configuration
   Options
     The CREATE and CONFIG commands allow additional options to be set
     see the build-in help: 'SC create' and 'SC config'

Note the qryOpt options above are case sensitive - they must be entered in lower case, also the position of spaces and = must be exactly as shown.

The SC command duplicates some aspects of the NET command but adds the ability to create a service.
SC query will display if a service is running, giving output like this:

        SERVICE_NAME       : messenger
        TYPE               : 20  WIN32_SHARE_PROCESS
        STATE              : 4  RUNNING
                                (STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

To retrieve specific information from SC's output, pipe into FIND or FindStr
e.g.

  C:\> SC query messenger | FIND "STATE" | FIND "STOPPED"

  C:\> SC query messenger | FIND "STATE" | FIND "RUNNING"

The statements above will return an %ERRORLEVEL% = 1 if the text is not found

IF errorlevel 1 GOTO :my_subroutine

The NET START command can be used in a similar way to check if a service is running:

   NET START | FIND "Service name" > nul
   IF errorlevel 1 ECHO The service is not running

The service control manager will normally wait up to 30 seconds to allow a service to start - you can modify this time (30,000 milliseconds) in the registry

HKLM\SYSTEM\CurrentControlSet\Control
ServicesPipeTimeout (REG_DWORD)

Some options only take effect at the point when the service is started e.g. the SC config command allows the executable of a service to be changed. When the service next starts up it will run the new executable. Config changes requires the current user to have "permission to configure the service".

Examples:

 SC GetKeyName "task scheduler"
 SC GetDisplayName schedule 
 SC start schedule
 SC QUERY schedule
 SC QUERY type= driver
 SC QUERY state= all |findstr "DISPLAY_NAME STATE" >svc_installed.txt 
 SC \\myServer CONFIG myService obj= LocalSystem password= mypassword
 SC CONFIG MyService binPath=c:\myprogram.exe obj=".\LocalSystem" password=""  

Watch out for extra spaces:
SC QUERY state= all Works
SC QUERY sTate =all Fails!

A list of all the standard services

It is inadvisable to disable a service without being aware of the consequences,

always start by setting the service to manual,

reboot and test for any problems.

A service set to manual may be automatically restarted if another service is dependent on it.
A service set to disabled will not restart even if it's required to boot the machine!

Stopping or disabling a service will generally save a small amount of memory and will reduce the number of software interrupts (cpu message queue.)

The main reason for tinkering with services is to harden the system against security vulnerabilities. Disable everything that you don't need or use -

then any future problems with those services cannot affect the machine.

To document all the services currently installed:

SC QUERY state= all |findstr "DISPLAY_NAME STATE" >my_services.csv

Some XP services communicate and send data directly to Microsoft, this is not generally something to lose sleep over.

Managing the running of these services may be a consideration if confidentiality/anonymity is highly important to you.

Removing a service completely

To delete a service, you may be tempted to hack the registry settings under (HKLM/SYSTEM/CurrentControlSet/Services)

this is not a reliable or recommended method, far better is to use the SC command:

SC delete NameofServiceTodelete

Built-in Service Accounts

In addition to other Default User & Group accounts there are 3 built-in accounts, designed for running background services.

Local Service Account (NT AUTHORITY\LOCAL SERVICE) - has the same level of access to resources and objects as

members of the Users group. This limited access helps safeguard the system if individual services or processes are compromised.

Services that run as the Local Service account access network resources as a null session without credentials.

(This account is not supported for running SQL Server services.)

Network Service Account (NT AUTHORITY\NETWORK SERVICE) - has more access to resources

and objects than members of the Users group. Services that run as the Network Service account access

network resources by using the credentials of the computer account.

Local System Account (NT AUTHORITY\SYSTEM) - a very high-privileged built-in account. It has extensive privileges on the local system and acts as the computer on the network.

In Windows 2008 a new feature was introduced: Managed Service Accounts which provide aut

omatic password management and simplified service principal name (SPN) management.

These accounts are created in Powershell with New-ADServiceAccount

Enable or Disable Ports
Many services and applications rely on the use of a specific PORT - to determine if a particular port is enabled for use, review the list of Service names and port numbers held in the "services" file ('windows\system32\drivers\etc\services')
Installing a good firewall is the easiest way to manage this.

Source