Windows Sysinternals Administrator's Reference


Book Description

Get in-depth guidance—and inside insights—for using the Windows Sysinternals tools available from Microsoft TechNet. Guided by Sysinternals creator Mark Russinovich and Windows expert Aaron Margosis, you’ll drill into the features and functions of dozens of free file, disk, process, security, and Windows management tools. And you’ll learn how to apply the book’s best practices to help resolve your own technical issues the way the experts do. Diagnose. Troubleshoot. Optimize. Analyze CPU spikes, memory leaks, and other system problems Get a comprehensive view of file, disk, registry, process/thread, and network activity Diagnose and troubleshoot issues with Active Directory Easily scan, disable, and remove autostart applications and components Monitor application debug output Generate trigger-based memory dumps for application troubleshooting Audit and analyze file digital signatures, permissions, and other security information Execute Sysinternals management tools on one or more remote computers Master Process Explorer, Process Monitor, and Autoruns




Windows Internals


Book Description

The definitive guide–fully updated for Windows 10 and Windows Server 2016 Delve inside Windows architecture and internals, and see how core components work behind the scenes. Led by a team of internals experts, this classic guide has been fully updated for Windows 10 and Windows Server 2016. Whether you are a developer or an IT professional, you’ll get critical, insider perspectives on how Windows operates. And through hands-on experiments, you’ll experience its internal behavior firsthand–knowledge you can apply to improve application design, debugging, system performance, and support. This book will help you: · Understand the Window system architecture and its most important entities, such as processes and threads · Examine how processes manage resources and threads scheduled for execution inside processes · Observe how Windows manages virtual and physical memory · Dig into the Windows I/O system and see how device drivers work and integrate with the rest of the system · Go inside the Windows security model to see how it manages access, auditing, and authorization, and learn about the new mechanisms in Windows 10 and Server 2016




Troubleshooting with the Windows Sysinternals Tools


Book Description

Optimize Windows system reliability and performance with Sysinternals IT pros and power users consider the free Windows Sysinternals tools indispensable for diagnosing, troubleshooting, and deeply understanding the Windows platform. In this extensively updated guide, Sysinternals creator Mark Russinovich and Windows expert Aaron Margosis help you use these powerful tools to optimize any Windows system’s reliability, efficiency, performance, and security. The authors first explain Sysinternals’ capabilities and help you get started fast. Next, they offer in-depth coverage of each major tool, from Process Explorer and Process Monitor to Sysinternals’ security and file utilities. Then, building on this knowledge, they show the tools being used to solve real-world cases involving error messages, hangs, sluggishness, malware infections, and much more. Windows Sysinternals creator Mark Russinovich and Aaron Margosis show you how to: Use Process Explorer to display detailed process and system information Use Process Monitor to capture low-level system events, and quickly filter the output to narrow down root causes List, categorize, and manage software that starts when you start or sign in to your computer, or when you run Microsoft Office or Internet Explorer Verify digital signatures of files, of running programs, and of the modules loaded in those programs Use Autoruns, Process Explorer, Sigcheck, and Process Monitor features that can identify and clean malware infestations Inspect permissions on files, keys, services, shares, and other objects Use Sysmon to monitor security-relevant events across your network Generate memory dumps when a process meets specified criteria Execute processes remotely, and close files that were opened remotely Manage Active Directory objects and trace LDAP API calls Capture detailed data about processors, memory, and clocks Troubleshoot unbootable devices, file-in-use errors, unexplained communication, and many other problems Understand Windows core concepts that aren’t well-documented elsewhere




Windows Command Line Administration Instant Reference


Book Description

The perfect companion to any book on Windows Server 2008 or Windows 7, and the quickest way to access critical information Focusing just on the essentials of command-line interface (CLI), Windows Command-Line Administration Instant Reference easily shows how to quickly perform day-to-day tasks of Windows administration without ever touching the graphical user interface (GUI). Specifically designed for busy administrators, Windows Command-Line Administration Instant Reference replaces many tedious GUI steps with just one command at the command-line, while concise, easy to access answers provide solutions on the spot. Provides practical examples, step-by-step instructions, and contextual information Quick-reference style delivers the commands needed for managing data and the network; working with Active Directory; performing diagnostics and maintenance; and, creating batch files and scripts Covers administration for Windows Server 2008 Server Core, Windows Server 2008 (including R2), and Windows 7 Administrators can get more done in less time with CLI than they can with the standard GUI. Compact enough to keep on hand at all times, Windows Command-Line Administration Instant Reference provides administrators with a convenient, fast and simple way to use CLI.




Windows Internals, Part 2


Book Description

Drill down into Windows architecture and internals, discover how core Windows components work behind the scenes, and master information you can continually apply to improve architecture, development, system administration, and support. Led by three renowned Windows internals experts, this classic guide is now fully updated for Windows 10 and 8.x. As always, it combines unparalleled insider perspectives on how Windows behaves “under the hood” with hands-on experiments that let you experience these hidden behaviors firsthand. Part 2 examines these and other key Windows 10 OS components and capabilities: Startup and shutdown The Windows Registry Windows management mechanisms WMI System mechanisms ALPC ETW Cache Manager Windows file systems The hypervisor and virtualization UWP Activation Revised throughout, this edition also contains three entirely new chapters: Virtualization technologies Management diagnostics and tracing Caching and file system support




Windows Server 2016: The Administrator's Reference


Book Description

This super-sized desktop reference combines two personal training guides in one convenient volume. Completely updated for Windows Server 2016 RTM and covering all editions of the operating system. Over 250,000 words. Includes: Windows Server 2016: Essentials for Administration Windows Server 2016: Server Infrastructure Inside you'll find expert insights, tips, tricks and workarounds that will save time and help you get the job done by giving you the right information right now. During the course of reading this book, you will master a number of complex topics, techniques, commands and functions. Like the individual books themselves and all IT Pro Solutions books, this reference set will be updated periodically to keep pace with the changes in Windows Server 2016. Pricing of this set is based on the MSRP of $29.99 for each ebook. From time to time you may find introductory or sale pricing of the individual books. Topics covered include: Planning for Windows Server 2016 and developing a deployment plan Using containers, virtualization and nano server Configuring server roles, services and features Managing and troubleshooting Active Directory Creating and managing user, group and computer accounts Monitoring and tuning performance Optimizing security settings, policies and templates Managing file services and data storage Configuring file sharing Managing share permissions and auditing resource usage Using group policy for administration Configuring and maintaining print services Deploying essential infrastructure services including DHCP and DNS Maintaining and troubleshooting Windows Server 2016 And much, much more!!! Not only will this informative training manual help you become familiar with essential concepts, it'll help you reach new levels of mastery. This is the ideal ready-answers reference you’ll want with you at all times. Table of Contents Chapter 1. Welcome to Windows Server 2016 Chapter 2. Working with Windows Servers Chapter 3. Configuring Server Settings Chapter 4. Understanding Active Directory Chapter 5. Managing Active Directory Chapter 6. Maintaining Active Directory Chapter 7. Accounts: The Essentials Chapter 8. Managing Account Policies Chapter 9. Creating Accounts Chapter 10. Working with Managed Accounts Chapter 11. Managing Computers, Users and Groups Chapter 12. Maintaining Your Servers Chapter 13. Optimizing Server Performance Chapter 14. Using Group Policy Chapter 15. Maintaining and Troubleshooting Group Policy Chapter 16. Optimizing Server Security Chapter 17. Deploying Windows Server 2016 Chapter 18. Implementing TCP/IP Networking Chapter 19. Data Storage: The Essentials Chapter 20. Partitioning and Optimizing Drives Chapter 21. Using TPM and BitLocker Drive Encryption Chapter 22. Using Storage Spaces Chapter 23. Using RAID Chapter 24. Maintaining Partitions and Drives Chapter 25. Implementing File Sharing Chapter 26. Using Shadow Copies and Work Folders Chapter 27. Managing Permissions and Auditing Chapter 28. Configuring Disk Quotas Chapter 29. Using Group Policy for Administration Chapter 30. Implementing Print Services Chapter 31. Configuring and Maintaining Print Services Chapter 32. Implementing DHCP Chapter 33. Managing and Maintaining DHCP Chapter 34. Implementing DNS Chapter 35. Managing and Maintaining DNS Thank you readers for your years of support! Check the companion website for updates and details on extras. Your support of this reference set will ensure that I can continue to refresh and expand it.




Windows Internals, Part 1


Book Description

Delve inside Windows architecture and internals—and see how core components work behind the scenes. Led by three renowned internals experts, this classic guide is fully updated for Windows 7 and Windows Server 2008 R2—and now presents its coverage in two volumes. As always, you get critical insider perspectives on how Windows operates. And through hands-on experiments, you’ll experience its internal behavior firsthand—knowledge you can apply to improve application design, debugging, system performance, and support. In Part 1, you will: Understand how core system and management mechanisms work—including the object manager, synchronization, Wow64, Hyper-V, and the registry Examine the data structures and activities behind processes, threads, and jobs Go inside the Windows security model to see how it manages access, auditing, and authorization Explore the Windows networking stack from top to bottom—including APIs, BranchCache, protocol and NDIS drivers, and layered services Dig into internals hands-on using the kernel debugger, performance monitor, and other tools




Introducing Windows 10 for IT Professionals


Book Description

Get a head start evaluating Windows 10--with technical insights from award-winning journalist and Windows expert Ed Bott. This guide introduces new features and capabilities, providing a practical, high-level overview for IT professionals ready to begin deployment planning now. This edition was written after the release of Windows 10 version 1511 in November 2015 and includes all of its enterprise-focused features. The goal of this book is to help you sort out what’s new in Windows 10, with a special emphasis on features that are different from the Windows versions you and your organization are using today, starting with an overview of the operating system, describing the many changes to the user experience, and diving deep into deployment and management tools where it’s necessary.




Mastering Windows Network Forensics and Investigation


Book Description

An authoritative guide to investigating high-technology crimes Internet crime is seemingly ever on the rise, making the need for a comprehensive resource on how to investigate these crimes even more dire. This professional-level book--aimed at law enforcement personnel, prosecutors, and corporate investigators--provides you with the training you need in order to acquire the sophisticated skills and software solutions to stay one step ahead of computer criminals. Specifies the techniques needed to investigate, analyze, and document a criminal act on a Windows computer or network Places a special emphasis on how to thoroughly investigate criminal activity and now just perform the initial response Walks you through ways to present technically complicated material in simple terms that will hold up in court Features content fully updated for Windows Server 2008 R2 and Windows 7 Covers the emerging field of Windows Mobile forensics Also included is a classroom support package to ensure academic adoption, Mastering Windows Network Forensics and Investigation, 2nd Edition offers help for investigating high-technology crimes.




Windows Internals


Book Description

See how the core components of the Windows operating system work behind the scenes—guided by a team of internationally renowned internals experts. Fully updated for Windows Server(R) 2008 and Windows Vista(R), this classic guide delivers key architectural insights on system design, debugging, performance, and support—along with hands-on experiments to experience Windows internal behavior firsthand. Delve inside Windows architecture and internals: Understand how the core system and management mechanisms work—from the object manager to services to the registry Explore internal system data structures using tools like the kernel debugger Grasp the scheduler's priority and CPU placement algorithms Go inside the Windows security model to see how it authorizes access to data Understand how Windows manages physical and virtual memory Tour the Windows networking stack from top to bottom—including APIs, protocol drivers, and network adapter drivers Troubleshoot file-system access problems and system boot problems Learn how to analyze crashes