Windows 2000 Tips Page 2

Windows 2000 Tips

Check out the compaq computers info at windowsreinstall.com, lots of great info on compaq, windows xp, NT and more.

If you are looking for tweaks for windows 2000, and I know lots of you are, then you should really use one of the windows 2000 tweak programs such as Tweak Manager from Winguides. With a program, there are no mistakes deleting the wrong registry keys, no worry since you can't screw it up, all their tweaks are listed in easy to navigate categories, you just check the windows 2000 tweaks you want and click apply, it's that simple. You can take complete control of your Windows system with access to hundreds of powerful tweaks for windows 2000 and hidden registry settings. Get your copy today for $29.95!
Access Your PC from Anywhere - Free Download
You’re invited to try a new remote-access telework solution that CNET says could “change your life.” Gain the freedom to work from anywhere using GoToMyPC. It’s the fast, easy and secure way to access and control your PC via any Web browser — anytime, anywhere. GoToMyPC is perfect for teleworkers, travelers and after-hours access. Installs in 2 minutes – Get Your Free Download Now!


Unchecked Buffer In Windows Component Could Cause Web Server Compromise (815021)

Mar 18 2003-Go to WindowsUpdate, this could allow someone to take control of your server.
Microsoft Windows 2000 supports the World Wide Web Distributed Authoring and Versioning (WebDAV) protocol. WebDAV, defined in RFC 2518, is a set of extensions to the Hyper Text Transfer Protocol (HTTP) that provide a standard for editing and file management between computers on the Internet. A security vulnerability is present in a Windows component used by WebDAV, and results because the component contains an unchecked buffer.
An attacker could exploit the vulnerability by sending a specially formed HTTP request to a machine running Internet Information Server (IIS). The request could cause the server to fail or to execute code of the attacker’s choice. The code would run in the security context of the IIS service (which, by default, runs in the LocalSystem context).
Although Microsoft has supplied a patch for this vulnerability and recommends customers install the patch immediately, additional tools and preventive measures have been provided that customers can use to block the exploitation of this vulnerability while they are assessing the impact and compatibility of the patch. These temporary workarounds and tools are discussed in the “Workarounds” section in the FAQ below.
Go here for the site.

Desktop Cycler

Desktop Cycler for Windows 98/95/NT/2000 is a special utility to manage and cycle your desktop goodies. Using easy to use interface you can cycle hundreds of selected wallpapers, screensavers, desktop themes, windows logo, IE's toolbar skins or even Start Menu icons automatically on specific time. Plus access hundreds of selected resources sites for great and free desktop goodies! Get it here.

A Tool for a Mature Active Directory

Mar 6 2003-Aelita Software this week introduced an infrastructure tool to help deal with the problems facing enterprises with mature Active Directories.
One of the first companies to anticipate the need for tools to help with the massive domain restructurings necessary four years ago prior to the launch of Windows 2000 and the Active Directory, Aelita is now looking ahead to the second-generation of problems enterprises need help resolving with their Active Directory infrastructures.
Go here for more.

Security Operations Guide for Windows 2000 Server

Mar 3 2003-Are you looking for ways to lock down Windows 2000 Server and minimize vulnerabilities? Are you looking for best practices on effectively managing patches? Are you looking for guidance on auditing and intrusion detection?
If you answered yes to these questions, this resource is for you. The Security Operations Guide for Windows 2000 Server delivers the guidance necessary for IT Pros to securely operate a Windows 2000 environment while ensuring the right access to the right content by the right people. This guide delivers procedures and best practices for system administrators to lock down their Windows 2000-based servers and maintain secure operations once they're up and running. Through effective use of Group Policy, proper patch management, and auditing and intrusion detection tactics, this guide provides administrators with the key information to manage risk of attack from avoidable malicious code (such as viruses and Trojan horses), unauthorized access, and data theft. Cosponsored by the Windows group, this guide is part of the Windows Strategic Technology Protection Program (STPP). The STPP is split into two primary phases: "Get Secure" and "Stay Secure". This guide briefly discusses Get Secure with server lockdown roles, and then focuses on the Stay Secure aspects.
Go here for the site.

Flaw in Windows Me Help and Support Center Could Enable Code Execution (812709)

Feb 26 2003-Help and Support Center provides a centralized facility through which users can obtain assistance on a variety of topics. For instance, it provides product documentation, assistance in determining hardware compatibility, access to Windows Update, online help from Microsoft, and other assistance. Users and programs can execute URL links to Help and Support Center by using the "hcp://" prefix in a URL link instead of "http://".
A security vulnerability is present in the Windows Me version of Help and Support Center, and results because the URL Handler for the "hcp://" prefix contains an unchecked buffer.
An attacker could exploit the vulnerability by constructing a URL that, when clicked on by the user, would execute code of the attacker’s choice in the Local Computer security context. The URL could be hosted on a web page, or sent directly to the user in email. In the web based scenario, where a user then clicked on the URL hosted on a website, an attacker could have the ability to read or launch files already present on the local machine. In the case of an e-mail borne attack, if the user was using Outlook Express 6.0 or Outlook 2002 in their default configurations, or Outlook 98 or 2000 in conjunction with the Outlook Email Security Update, then an attack could not be automated and the user would still need to click on a URL sent in e-mail. However if the user was not using Outlook Express 6.0 or Outlook 2002 in their default configurations, or Outlook 98 or 2000 in conjunction with the Outlook Email Security Update, the attacker could cause an attack to trigger automatically without the user having to click on a URL contained in an e-mail.
Go here for the site.

Securing Windows 2000 Server

Jan 16 2002-The Securing Windows 2000 Server solution is delivered in eleven chapters, plus a Test Guide, a Delivery Guide, and a Support Readiness Guide, each with applicable job aids, script files and test cases.
Securing Windows 2000 Server provides customers with comprehensive information and analysis tools to assess security risks specific to Windows 2000 Servers. By using the principles of MSF and MOF, and by applying the lessons of the Security Risk Management Discipline, customers learn how to identify the threats and vulnerabilities that exist within their organization and determine which risks have the most potential impact on their domain infrastructure. Recommendations regarding the use of IPSEC filters to fully lock down specific server roles are also provided. In addition, the solution incorporates material on Patch Management, Auditing and Intrusion Detection, and Responding to Incidents from the Windows 2000 Security Operations Guide.
Go here for more.

Technical Overview of Internet Information Services (IIS) 6.0

This article introduces the next generation of Web infrastructure capabilities that are available in the Windows Server 2003 family. It also describes the benefits and new technical features that are available when you deploy IIS 6.0.
Included in this Document
  • Introduction
  • The Application Server Role
  • IIS 6.0 Architecture—A New Request Processing Architecture
  • New Security Features
  • New Manageability Features
  • New Performance and Scalability Features
  • Enhanced Development Experience and New Programmatic Features
  • Platform Improvements
  • Summary

Click here for more.

Introducing the Windows Server 2003 Family Microsoft Windows Server 2003 is now available for customer preview. The Windows Server 2003 family takes the best of Windows 2000 Server technology and makes it easier to deploy, manage, and use. The result: A highly productive infrastructure that helps make your network a strategic asset for your organization.
Evolutionary Improvements to Windows 2000
Windows Server 2003 includes all the functionality customers expect from a mission-critical Windows server operating system, such as security, reliability, availability, and scalability. In addition, Microsoft has improved and extended the Windows server operating systems to enable your organization to experience the benefits of Microsoft .NET—software for connecting information, people, systems, and devices.
Server Roles
Windows Server 2003 is a multipurpose operating system capable of handling a diverse set of server roles, depending on your needs, in either a centralized or distributed fashion. Some of these server roles include:
  • File and print server.
  • Web server and Web application server.
  • Mail server.
  • Terminal Server.
  • Remote access/virtual private network (VPN) server.
  • Directory services, Domain Name System (DNS), Dynamic Host Configuration Protocol (DHCP) server, and Windows Internet
  • Naming Service (WINS).
  • Streaming media server.
This product overview explains the basics of the Windows Server 2003 family and includes links to more detailed information.
Click here for more.

Memory Leak in Services.exe When Checking Arcname

Services.exe may leak memory at a rate of about 40 MB per day. A Perfmon.exe trace may show the Private Bytes counter rising at a 45-degree angle. If you do not restart the server, the server may display an "out of virtual memory" error message.
Memory is being reserved for the NEWSTRING string variable and the "\ Arcname" constant is prepended to a driver path and then checked for validity. The problem is that NEWSTRING is not freed with LocalFree(NEWSTRING).
Click here for more.

UK Keyboard Layout CTRL+(left)ALT+E Produces Euro Symbol Along with Accented Letter E

On a computer that is running Windows 2000, with the English United Kingdom (UK) keyboard layout in use, pressing CTRL+(left)ALT+E produces both the symbol for the Euro and an accented e, where you expect only the accented e. This issue can occur in WordPad.exe.
Click here for more.

Win2k SP3, the 'snooper' licence, and the workaround

We've had quite a few emails from Windows 2000 Service Pack refuseniks who propose not to go anywhere near SP3 on the grounds that the installation insists you agree to the new-look Microsoft 'snooper's charter' supplementary licence in order to apply it. The critical clauses seem to be becoming standard for Microsoft products, and although they can be presented as helpful/necessary for updates, they could also be used for DRM purposes, and provide cover for more widespread snooping.
Click here for more.

How to defang Win2k SP3's auto updating

The register is reporting now they can tell you how to remove the "features" Microsoft has added to prevent the possibility of snooping on you in the future with Windows 2000.
Go to Start, then run services.msc. You can also do this via Control Panel, Administrative Tools, Services. Find Automatic Updates, and change startup type to disabled.
Then run gpedit.msc, the group policy editor. Go to User Configuration, Administrative Templates, Windows Components, Windows Update. On a fresh installation with SP3 applied this will show up as not configured, and somewhat counter-intuitively, in order to remove access to Windows Update, you enable it. Notice in passing that it's tagged Remove access to use all Windows Update "featues," which we presume is one they can fix in SP4.
Click here for more, and a really interesting article.

Win2K SP3 Available

On July 30, Microsoft released Windows 2000 Service Pack 3 (SP3). Users should consider loading the new service pack for a variety of reasons, including the fact that the new service pack contains all the fixes presented in the Win2K Security Rollup Package 1 (SRP1). In addition, when you install SP3 over a previously installed SP1, your systems will support 128-bit encryption. Also note that according to the README file on Microsoft's Web site, "beginning with Service Pack 2, 128-bit encryption is supported as the default, so if you previously installed Service Pack 2 (SP2), your computer has already been upgraded to this level of encryption. Furthermore, if you revert to SP1 or earlier, your computer will retain 128-bit encryption ...." Note, however, that after you install SP3, the Windows 2000 Protected Store is not upgraded to 128-bit encryption. Microsoft has released a patch and tool to upgrade the Protected Store. You can obtain these from Microsoft Security Bulletin MS00-032 (Patch and Tool Available for "Protected Store Key Length" Vulnerability). The FAQ for this security bulletin provides more information about Protected Store, the patch, and the tool.
Click here for more.

Windows 2000 benchmarks

Microsoft has posted a bunch of links to benchmarks of them beating the Unix variants from testing done at the Transaction Processing Performance Council.
The Windows server operating systems have repeatedly demonstrated performance advantages over UNIX variants in a wide range of industry benchmarks. The tables below summarize recent Windows Server family benchmark results and provide links to more information.
Click here for more.

SP3: More Rumors, More Delays

In response to my plea for Windows 2000 Service Pack 3 (SP3) news last week, one reader indicated that the new release-to-manufacturing (RTM) date is July 15. Paul Thurrott also sent a message in which he stated that Microsoft folks recently indicated that the final version of SP3 is slated for July 17 or July 24. However, yesterday Paul Thurrott published a news story on his Wininformant site ( http://www.wininformant.com ) stating that bugs in the Microsoft Installer (MSI) 2.0 code will likely further delay SP3's release. So who knows when we'll have access to this monster update, which I estimate will contain nearly 1000 bug fixes. Even so, you might want to ramp up your test environment and review your service pack testing, troubleshooting, and reporting procedures.
Here’s a quick summary of blue screens you might encounter after you upgrade to SP3, plus a short rehash of two nagging browse problems I discussed last month. You might see numerous blue screens from win32k.sys, wdmaud.sys, RRAS, the fault-tolerant disk driver, and a function in the registry API. Some crashes are predictable and consistent; others occur almost randomly. Both browse problems cause a lengthy delay when you attempt to open or save a file on a system with persistent network connections and when you attempt to browse for printers on a print server. I’m including the browse problems again because they have a significant effect on user frustration levels.
Click here for more.

WebCast: Support WebCast: Windows 2000, The Setup Process (Q325553)

This presentation is a basic overview of the installation process for Windows 2000. We will discuss the process in general and make note of changes made between the installation of Windows 2000 and Windows NT 4.0. The objective of this presentation is to inform the customer of what installation options are available, what they would encounter during an installation and what new features are available to assist the customer.
Click here for more.

WebCast: Windows 2000 Installing and Configuring the DNS Dynamic Update Protocol (Q325110)

During the presentation, we will cover some fundamental concepts of domain name host resolution and why it is important. We will also talk about how to install and configure Windows 2000 DNS dynamic update protocol for use in both native and mixed modes in enterprise domains. We will explain how Dynamic Host Configuration Protocol (DHCP) will interoperate with DNS dynamic update protocol under Windows 2000. We will briefly discuss the process for dynamically updating resource records in the DNS database zone file.
Click here for more.

Microsoft releases Software Update Services

Microsoft Software Update Services (SUS) is designed to greatly simplify the process of keeping Windows-based systems up-to-date with the latest critical updates. SUS enables administrators to quickly and reliably deploy critical updates to their Windows 2000-based servers as well as desktop computers running Windows 2000 Professional or Windows XP Professional.
Click here for more.

Third Version of FRS Hotfix Corrects Replication Problems

The File Replication Service (FRS) is an essential component of Windows 2000 networks. The FRS code in the Win2K gold version didn't perform well on systems with large replication sets. To address the FRS performance problems, Microsoft released an important FRS update in October of 2001. As I explained in a previous column on this subject (see "New Multiprocessor Issues; More Desktop Shortcuts,"), the FRS update added intelligence to replication and file management algorithms that significantly enhanced the performance of file replication. See Microsoft article "Changes to the File Replication Service" for a detailed description of the enhancements in the original release.
In March, Microsoft released a second version of the FRS update to correct problems with Microsoft Office data files in the original FRS release. In a recently posted article, Microsoft admits to yet a third version of the FRS hotfix, which eliminates a host of replication concerns caused by the modified file system driver ntfs.sys packaged with the second version. The NTFS bug prevents some rename operations and prevents the FRS from fully replicating files and directories on systems where the replicated directory tree doesn't grant the System account full control.
Click here for more.

Service Pack 3

Looks like service pack 3 will be hitting us soon, some of the latest hot fixes show as being pre-sp4, so that usually means service pack 3 is nearing completion. It will definately be large, with almost 800 post sp2 updates, it will probably be massive. Happy updating.

Slow Network Performance Occurs If You Copy Files to a Windows 2000 Domain Controller (Q321098)

If you copy files from a Windows 2000-based or a Microsoft Windows XP-based client computer to a network share on a Windows 2000-based domain controller, network performance is slower than if you copy the same files to a Windows 2000-based member server. You may notice this problem if you copy many small files; however, you may not notice this problem if you copy a few large files. This problem only occurs if you either use Microsoft Windows Explorer to copy the files or if a Windows Explorer window is open and connected to the target server. However, if you use Xcopy.exe to copy the files and all of the Windows Explorer windows are closed, you do not experience this problem.
If you review a trace of the problem, you notice that the delay occurs after the client sends the server an SMB Notify Change command with the FID entry that matches the FID entry of the target folder. Windows Explorer posts a Notify Change request on the network share, which asks to be notified if something changes in the folder that appears in the right pane of Windows Explorer. If a domain controller receives the Notify Change request, it does not respond to it immediately; it does not send packets for up to 200 milliseconds. At that point, a simple Transmission Control Protocol (TCP) acknowledgement (ACK) packet is sent and the file operation resumes as usual.
Click here for the article.

You May Not Be Able to Copy Large Files on Computers That Are Running Windows NT 4.0 or Windows 2000 (Q259837)

When attempting to copy a large file, the copy process does not work and you may receive an error message.
When you try to copy / paste using Explorer GUI:
Cannot copy : Insufficient system resources exist to complete the requested service.
When you try to use xcopy or copy from a command prompt:
Insufficient system resources exist to complete the requested service.
-or-
When you try to send the file via FTP command, you receive the following misleading message which results in a zero byte file being created on the destination FTP server:
ftp> send
Local file f:\bigfile.bin
Remote file bigfile.bin
200 PORT command successful.
150 Opening BINARY mode data connection for bigfile.bin.
> f:\bigfile.bin:Invalid argument
226 Transfer complete.
Click here for the article.

Troubleshooting Network Connections

With little news in the Windows 2000 bug and hotfix space this week, I decided to share some simple network troubleshooting techniques. I spent most of the past 2 weeks troubleshooting network connectivity and mail access problems on my network and for a client, and you can use the same tools and procedures to diagnose these problems on your networks. Most people don't realize that a network is a fluid, ever-changing structure with millions of parts, and that network connectivity, whether local or through the Internet, undergoes multiple daily hiccups (outages) that last a few minutes to an hour or more. Most of the hiccups are transitory—they’re caused by a link that’s down because a network administrator is rebooting, replacing, or reconfiguring a box that your message or request requires to identify or locate its destination. A network infrastructure is similar to our road system: When a cone zone (outage) pops up, we either wait until the cones come down, or we take a detour to get to our destination.
Click here for the article.

Denial of Service Attack on Port 445 May Cause Excessive CPU Use (Q320751)

When you run a program on your Windows 2000-based server, the memory usage may substantially increase, you may receive virtual memory messages, and most server functions may be disabled. Computers that have a single CPU seem to be more susceptible to the CPU usage staying constant at 100 percent. After you quit the program, the CPU usage stays at 100 percent for a couple of minutes, and then idles out. On a computer that has more than one CPU, the CPU usage may stay at 100 percent for about 30 seconds, and then idles out.
This behavior can occur when a malicious user sends a Denial of Service (DoS) attack to port 445. This leads to high CPU and Kernel mode memory usage.
Click here for the kb article.

Microsoft releases new Windows 2000 Security Operations Guide

Are you looking for ways to lock down Windows 2000 Server and minimize vulnerabilities?
Are you looking for best practices on effectively managing patches?
Are you looking for guidance on auditing and intrusion detection?
If you answered yes to these questions, this resource is for you. The Security Operations Guide for Windows 2000 Server delivers the guidance necessary for IT Pros to securely operate a Windows 2000 environment while ensuring the right access to the right content by the right people. This guide delivers procedures and best practices for system administrators to lock down their Windows 2000-based servers and maintain secure operations once they're up and running. Through effective use of Group Policy, proper patch management, and auditing and intrusion detection tactics, this guide provides administrators with the key information to manage risk of attack from avoidable malicious code (such as viruses and Trojan horses), unauthorized access, and data theft. Cosponsored by the Windows group, this guide is part of the Windows Secure Technology Protection Program (STPP). The STPP is split into two primary phases: "Get Secure" and "Stay Secure". This guide briefly discusses Get Secure with server lockdown roles, and then focuses on the Stay Secure aspects.
Click here to download the document now.

Troubleshooting Problems Communicating on the Internet (Q163391)

This article describes how to troubleshoot problems communicating with servers on the Internet using an Internet browser, FTP, or Telnet. This article assumes that you are able to connect and log on to your Internet service provider (ISP) successfully.
You may experience problems communicating with a server on the Internet for any of the following reasons:
The server is not functioning properly or has been temporarily removed from the Internet.
Your Internet browser is not configured properly.
The TCP/IP configuration for your dial-up connection to your ISP is incorrect.
Your ISP's Domain Name Service (DNS) server is not working properly.
To determine and resolve the problem you are experiencing, follow the procedures in each of the following sections in order. After you finish each procedure, check to see if you can communicate with servers on the Internet successfully.
Click here for the kb article.

The Function of Native Win2K Processes

When you start Windows Task Manager and click the Processes tab, you see approximately 30 processes that Windows 2000 runs at startup, plus Microsoft and third-party processes that implement antivirus protection and other running applications. Some Task Manager processes (e.g., alertsvc.exe, Iexplore.exe, dns.exe, wins.exe) correlate one-for-one with a specific Win2K service; other processes, such as the System Idle Process, services.exe, and svchost.exe, are core OS components, or they coordinate multiple services. Processes that correlate directly with a native service appear in the Task Manager process list only when you've configured the service and the service is running. So, unless you've installed Win2K Server Tools on a Win2K Professional machine, you won't see dns.exe or wins.exe on the Win2K Pro system. These same native processes will appear on Win2K Server only if you have configured and started the service.
Click here for the article from Windows .NET magazine

Description of the Windows 2000 Recovery Console (Q229716)

This article describes the functionality and limitations of the Windows Recovery Console. The Windows Recovery Console is designed to help you recover when your Windows-based computer does not start properly or does not start at all.
When you use the Windows Recovery Console, you can obtain limited access to NTFS, FAT, and FAT32 volumes without starting the Windows graphical interface. In the Windows Recovery Console you can:
  • Use, copy, rename or replace operating system files and folders.
  • Enable or disable services or devices from starting when you next start your computer.
  • Repair the file system boot sector or the Master Boot Record (MBR).
  • Create and format partitions on drives.
Note that only an administrator can obtain access to the Windows Recovery Console so that unauthorized users cannot use any NTFS volume.
Click here for the kb article from Microsoft

How to Check the Video Driver (Q200435)

If you are having problems loading the video driver on your computer, you may have a program that has replaced some files. Symptoms of this problem include:
The system continues to default to VGA mode or only boots in VGA mode from the boot menu.
Your video driver is not loading properly.
Click here for the kb article from Microsoft

Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols

Found this at the IETF.org website.
This memo specifies Microsoft's Windows 2000 Kerberos change password and set password protocols. The Windows 2000 Kerberos change password protocol interoperates with the original Kerberos change password protocol. Change password is a request reply protocol that includes a KRB_PRIV message that contains the new password for the user.
This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited.
Click here for more, or here for the request for comments.

PPPoE with ICS Requires MTU Setting Below 1492 on the ICS Clients (Q259783)

If you are using Internet Connection Sharing (ICS) and the outbound connection uses PPP over Ethernet (PPPoE), the clients that are using the ICS connection may not be able to browse some Web sites or send e-mail messages that contain attachments.
PPPoE requires lowering the Maximum Transmission Unit (MTU) setting on all client computers to a value no larger than 1,492. (The default is 1,500.) In some cases, a value less than 1,492 may be necessary.
Click here for the kb article from Microsoft

Unchecked Buffer in Telnet Server Could Lead to Arbitrary Code Execution

The Telnet protocol provides remote shell capabilities. Microsoft has implemented the Telnet protocol by providing a Telnet Server in several products. The implementations in two of these products – Windows 2000 and Interix 2.2 – contain unchecked buffers in the code that handles the processing of telnet protocol options.
An attacker could use this vulnerability to perform a buffer overflow attack. A successful attack could cause the Telnet Server to fail, or in some cases, could possibly allow an attacker to execute code of her choice on the system. Such code would execute using the security context of the Telnet service, but this context varies from product to product. In Windows 2000, the Telnet service always runs as System; in the Interix implementation, the administrator selects the security context in which to run as part of the installation process.
Click here for the kb article from Microsoft

A USB Device May Not Work on a Computer That Has Multiple Processors (Q306788)

When you USB device under the following conditions, the USB device may stop responding and you may need to restart your computer:
  • If the USB device has multiple ports
  • If you are using the USB device to perform bulk transfers (bulk read or write transfers)
  • If the computer has multiple processors
  • If the computer is running Windows 2000
A supported fix is now available from Microsoft, but it is only intended to correct the problem described in this article and should be applied only to systems experiencing this specific problem. This fix may receive additional testing at a later time, to further ensure product quality. Therefore, if you are not severely affected by this problem, Microsoft recommends that you wait for the next Windows 2000 service pack that contains this fix. To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix.
Click here for the kb article from Microsoft

Windows 2000 Shuts Down When You Try to Restart Your Computer (Q298925)

When you try to restart your computer, your computer may not restart; instead, your computer may shut down.
If you use the Power Options tool in Control Panel to configure your computer power button for shutdown and an attempt to shutdown your computer is denied by application, your computer does no restart when you click Restart on the Start menu.
Windows 2000 does not reset the Power Policy action after an application denial to a power management request occurs, and because of this, the following restart request is treated as a shut down request.
Click here for the kb article from Microsoft

Error Message When You Run fixmbr Command (Q266745)

When you attempt to run the fixmbr command in the Microsoft Windows 2000 recovery console, your computer system may display the following error message:
This computer appears to have a non-standard or invalid master boot record. FIXMBR may damage your partition tables if you proceed. This could cause all the partitions on the current hard disk to become inaccessible. If you are not having problems accessing your drive, do not continue. Are you sure you want to write a new MBR?
Click here for the kb article from Microsoft

Ntldr Cannot Load Fragmented System Hive (Q265509)

Your computer may stop responding (hang) during startup from a hard disk that uses the NTFS file system if the System hive file is too large. The System hive file is located in the %SystemRoot%\System32\Config folder.
Ntldr loads various drivers and system files into memory during an early phase of startup. The System hive is usually the biggest file that is loaded and is likely to be fragmented because it is modified often.
If the System hive file is too fragmented, it is not loaded from an NTFS volume, and the computer hangs. This problem does not occur on volumes that use the FAT or FAT32 file system.
Click here for the kb article from Microsoft

Coming soon, more blue screen of death errors, or bsod, also windows protection errors, your program has performed an illegal operation and more computer help, so check back to windows 2000 tips often.