Search This Blog

Troubleshooting Tool - Recovery Console

The Recovery Console provides command-line access to the system. The console is started by booting to the original Windows CD or using the set of 4 setup diskettes. The setup diskettes can be made using MAKEBOOT or MAKEBT32 in the BOOTDISK folder of the CD.
Recovery Console option can be provided at startup by running the installation command from the CD.
         i386\WINNT32 /cmdcons

By default Recovery Console only provides the following access to files.
FilesPermissions
%SystemRoot% and subfoldersFull access to make repairs
Cmdcons folderFull access to make repairs
Root folderFull access to make repairs
Removable mediaRead-only - prevents sensitive data from being copied
Four environment variables are available to control these restrictions by setting the variable to TRUE or FALSE. For example, use the command
  • SET AllowAllPaths = TRUE
VariableDescription
AllowAllPathsAllows access to all folders
AllowRemovableMediaAllows copy of files to removable media
AllowWildCardsAllows wildcards in commands such as del *.*
NoCopyPromptAllows files to be copied without prompting before overwriting
Local security settings can be set to eliminate the logon requirement and to eliminate file access restrictions.

The following commands are available when you use Recovery Console. Most are familiar DOS commands.
attrib
delete
fixmbr
more
batch
dir
rd
cd
disable
help
ren
chdir
diskpart
listsvc
rename
format
chkdsk
enable
logon
rmdir
cls
exit
map
systemroot
copy
expand
md
type
del
fixboot
mkdir
set
The Recovery Console is protected by requiring the password for the local Administrator user account. The local Administrator account is stored in the SAM database rather than the Active Directory. For workstations and member servers, the Administrator password can be changed with the Computer Management Console. On domain controllers, the Local User and Groups are not accessible. If the local Administrator password is forgotten, it can only be reset by
  • Restoring the Registry from a backup, or
  • Demoting the server and then in the promotion process the Administrator password can be set.