16-1 SFC Research

1. Other parameters for sfc:

/scannow : Scans all protected system files immediately.

/scanonce : Scans all protected system files once.

/scanboot : Scans all protected system files every time the computer is restarted.

/revert : Returns the scan to its default operation.

/purgecache : Purges the Windows File Protection file cache and scans all protected system files immediately.

/cachesize=x : Sets the size, in MB, of the Windows File Protection file cache.

/? : Displays help at the command prompt.

2. The findstr command is short for find string and is a command used to locate files containing a specific string of plain text.

3. Yes. According to Microsoft at http://technet.microsoft.com/en-us/library/cc732459(WS.10).aspx

4. The purpose of the edit command is to edit text files from the command prompt.

5. The TakeOwn utility is a command-line utility that you can use to clean up multiple boot drives without formatting the drive. You can use TakeOwn in the following ways:

To enable administrators to take ownership of shares in cases where the administrator account has been explicitly denied access. After administrators take ownership of the shares or drives, they can run the Cacls utility (Cacls.exe).

To correct or repair permissions that have been misconfigured or tampered with.

You can also use the TakeOwn utility that comes with Windows 2000 Resource Kit with Windows NT 4.0 to give permissions to administrators to access shares. This utility runs only on NTFS file system (NTFS) partitions.

To start TakeOwn, run the following command:

takeown drive letter:\share\*.*

When you run the command, the administrator takes ownership of the drive. Then, when you run the following command, the administrator is given Full Control permissions to the user's home folders:

cacls drive letter\users\*.* /e /g administrator:f

To confirm these changes, start Microsoft Windows Explorer, locate the folder, and then verify that the administrator has ownership of the folder, and has been given Full Control permissions.

6. Displays or modifies discretionary access control lists (DACLs) on specified files, and applies stored DACLs to files in specified directories. You may need to change permissions on the system files in order to copy them.

7.  In the c:\windows\repair\system folder on the hard drive, or the installation disk for windows XP. System snapshot folder for the registry keys.