IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
sub-directory REPAIR under the Windows directory %SystemRoot%, e.g.
under \WINNT\REPAIR.
To reproduce a damaged Windows NT installation, the first of the three set-up
floppy disks must be placed in drive A: and the computer booted from this
drive. In the text window of the set-up program, it will be asked whether
Windows NT should be installed or if files should be repaired. The parameter
r must be entered. The set-up program then requires the emergency floppy
disk. If no emergency disk is available, the set-up program shows a list of
available Windows NT installations that have been found on the computer and
asks which installation should be repaired. Once the final message has been
shown, the emergency floppy disk must be removed from drive A: and the
computer re-booted.
The repair procedure in the set-up program allows various elements to be
selected for repair:
- System files - The set-up program checks that the directory tree of
Windows NT corresponds with the log file on the emergency floppy disk to
ensure that all system files are present and intact. If files are missing or
damaged files are found, these will be reproduced from the relevant
Windows NT set-up source (e.g. CD-ROM). The set-up program also
checks Windows NT files on the system partition to ensure that all boot
files are available and intact.
- Standard system configuration - The set-up program offers the
opportunity to reproduce damaged registry files from those that were
initially installed with Windows NT. It must be borne in mind that user
accounts and permissions that have been set up since the first installation,
or since the last renewal of the emergency floppy disk, are lost.
- Boot variables - By choosing this option, the set-up program reproduces
the boot variables from the emergency floppy disk for the special
installation of Windows NT onto the hard disk
- Boot sector (only for computers with x86 processors) - By choosing this
option the set-up program creates a new boot sector in the system partition.
If other files are missing or damaged, the set-up program reproduces these
files from the appropriate Windows NT set-up floppy disks or from the CD-
ROM. If the system partition on a computer with an x86 processor has been
mistakenly formatted or changed in such a way that Windows NT no longer
starts, the repair program reproduces the original boot configuration.
Note: If the system files are repaired, the set-up program will remove the
security settings from these files if they are found on an NTFS partition. This
is wise, in order to be able to reverse falsely granted permissions for system
files which would otherwise prevent Windows NT from accessing the system
files necessary for system start-up. For this reason, it is absolutely necessary to
keep the emergency floppy disk and the set-up floppy disks safe in such a way
that they are protected against any kind of misuse.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000