1. Windows monitoring Unit objectives: Monitor the operating system Monitor system performance Backup and restore operating system files and data

2. Topic A Topic A: System monitoring Topic B: System performance Topic C: Backup and restore

3. Windows Diagnostics Start, All Programs (or Programs), Accessories, System Tools menu msinfo32 Collects and displays information about configuration of specified computer System Information window –Hardware Resources –Components –Software Environment –Internet Settings (not in Windows 7 or Vista)

4. System Information window

5. Remote computer information 1.Choose View, Remote Computer 2.Enter the name of the computer –Remote computer — WMI installed –Need appropriate privileges on remote computer

6. Activity A-1 Running Windows Diagnostics

7. Command-line system information path\msinfo32 Full path required for command-line functionality Windows 7 and Vista parameters and switches –/nfo Path –/report Path –/computer ComputerName continued

8. Command-line information, continued Windows XP/2000 parameters and switches –/pch –/report:filename.ext –/computer:computername –/category:categoryname –/categories:categorylist –/showcategories –/?

9. Activity A-2 Running msinfo32 from a command line

10. DirectX Diagnostic dxdiag.exe Windows Vista — View status of DirectX installation Windows XP/2000 — Test and troubleshoot video- or sound-related hardware problems Check for drivers’ digital signatures

11. DirectX Diagnostic Tool

12. DirectX Diagnostic pages System DirectX Files — Windows XP/2000 Display Sound Music — Windows XP/2000 Input Network — Windows XP/2000 More Help — Windows XP/2000

13. Activity A-3 Running the DirectX Diagnostic tool

14. Task Manager Provides information on applications, processes, and services running on computer Tabs –Applications –Processes –Performance –Networking — Windows 7/Vista/XP –Users — Windows 7/Vista/XP –Services — Windows 7/Vista

15. Windows Task Manager

16. The Applications tab End a running application –GPFs have occurred and applications don’t respond to keyboard or mouse input Switch to another application –The app is running in the background or doesn’t have a taskbar button displayed Start a new instance of an application –Explorer.exe process has stopped and you have lost your Start menu, taskbar, and desktop items

17. Activity A-4 Monitoring applications

18. The Processes tab Use to determine if a running process is overwhelming the processor and slowing down the system If a process has a high percentage of CPU usage that doesn’t return to normal, you might have to end the process Also use to end an application that won’t end when you try to do so on the Applications tab

19. Activity A-5 Ending a process

20. The Services tab Linked to the Processes tab Highlights a service’s associated process Shows processes from all users Also works in reverse: shows services associated with a process

21. Activity A-6 Monitoring services

22. The Networking tab Use to view computer’s network bandwidth Displays a combination of the network traffic for all NICs Can compare traffic on each NIC Can customize data columns displayed

23. Activity A-7 Monitoring network utilization

24. The Users tab Use to: –Monitor users logged on to the computer –Disconnect users –Send users messages Data columns: –User –ID –Status –Client Name –Session

25. Activity A-8 Monitoring users

26. Computer Management Monitor system events Create and manage shared resources Determine which users are connected to monitored system Start and stop services Set properties for storage devices View device configurations Add or change device drivers Manage applications and services

27. Event Viewer Use to monitor events Determine cause of problems with –Application –Component of operating system –Suspected security breach

28. Event Viewer

29. Event Viewer categories Application Security System Setup (Windows 7/Vista) Forwarded Events (Windows 7/Vista)

30. Event information Level (7/Vista); Type (XP/2000) Date Time Source Task Category (7/Vista); Category (XP/2000) Event ID (7/Vista); Event (XP/2000) User Computer

31. Event types Error Warning Information Success Audit (Security Log only) Failure Audit (Security Log only)

32. Event Properties

33. Activity A-9 Viewing the event logs

34. Sorting events Default — Events are listed from the newest to the oldest, by date and time Can change the sort order –Click any column heading –One click = ascending order –Second click = descending order To return to default view, choose View, Newest First continued

35. Sorting events, continued

36. Grouping events Group events by column heading Choose View, Group By, and choose a column heading To return to default view, choose View, Remove grouping of events continued

37. Grouping events, continued

38. Filtering events Filtering displays only certain events Filter criteria: –Logged –Level (in Windows 7/Vista) –Event sources or Source –Event ID –Task category –Keywords –User –Computer continued

39. Filtering events, continued

40. Managing event logs Default size Events overwritten Clear events Save events

41. Activity A-10 Controlling the display of an event log

42. Topic B Topic A: System monitoring Topic B: System performance Topic C: Backup and restore

43. Reliability Monitor Track events that affect stability –Software installs and uninstalls –Application failures –Hardware failures –Windows failures –Miscellaneous failures

44. Reliability Monitor in Vista

45. Two features to track system health System Stability Chart System Stability Report

46. Activity B-1 Determining a system’s Stability Index

47. Resource Overview CPU Hard disk Network Memory (RAM)

48. Resource Overview

49. Detailed view of CPU resource

50. Activity B-2 Viewing real-time performance data in Resource Overview (optional Instructor demonstration on Windows Vista)

51. Performance Monitor Known as System Monitor in XP Monitor computer performance –Real time –One-second intervals Save reports of data Hundreds of counters available –Create a baseline to compare system performance over time –Monitor system resource use –Locate performance problems –Identify performance bottlenecks

52. Performance Monitor real-time graph

53. Performance objects Battery Status Cache Memory Network Interface Objects Paging File PhysicalDisk Process Processor System Thread

54. Bottlenecks Processor: % Processor Time –Monitors how hard your processor is working Process: Thread Count –Identifies memory leaks in applications Memory: Pages/sec –Points to page faults that cause system delays PhysicalDisk: Disk Transfers/sec –Identifies poor disk-response time Network Interface –Monitors network traffic

55. Adding counters

56. Real-time monitoring 1.Select local or remote computer 2.Expand appropriate performance object 3.Select desired counter 4.Select appropriate instance of the counter 5.Click Add 6.When finished adding counters, click OK

57. Activity B-3 Monitoring performance with Performance Monitor

58. Performance Monitor configuration ButtonUse to Open saved log files and display them Change graph display type Add and delete counters Highlight counter on graph Display Properties Pause and restart display Update data

59. Performance Monitor tabs General Source Data Graph Appearance

60. Activity B-4 Customizing Performance Monitor

61. Performance Logs and Alerts Collect data View data Configure logs Set up alerts Options –Counter Logs –Trace Logs –Alerts

62. Configuring Alerts Log an entry in the application event log Send a network message to Start performance data log Run this program Command Line Arguments

63. Topic C Topic A: System monitoring Topic B: System performance Topic C: Backup and restore

64. Backups Create automatic backups of your personal files Restore files that you previously backed up Create a Complete PC Backup Archive selected files and folders Restore the archived files and folders Make a copy of your computer’s system state, which includes: –Registry –Boot files –COM+ class registration database –IIS metadirectory –Windows File Protection system files Copy your computer’s system partition, the boot partition, and the files needed to start up the system

65. Backup modes Wizard mode — Walks you step-by- step through the process Advanced mode — Provides complete control over file and folder selection

66. Scheduling automatic backups

67. Backup types in Windows XP Copy Daily Differential Incremental Normal

68. Backup strategy Grandfather-Father-Son basic strategy –Back up Son –Back up Father –Back up Grandfather

69. Activity C-1 Scheduling a backup

70. Restoring files Files can be restored to original or alternate locations Restore all of the files and folders that were backed up or restore selected files from the backup

71. Activity C-2 Restoring files from backup

72. System Restore Available in Windows XP and Windows Vista, and Windows 7 Creates snapshots of the system configuration –System checkpoints –Manual restore points –Installation restore points Used to restore computer to a previous configuration Create a restore point before troubleshooting Does not affect user data files

73. System Protection tab

74. Activity C-3 Creating a restore point

75. Restoring a system Try Driver Rollback first If that doesn’t work, use System Restore All Programs, Accessories, System Tools, System Restore Can choose desired restore point Computer will reboot

76. Additional restore points

77. Affected programs and files

78. Activity C-4 Restoring a computer to a previous state

79. Unit summary Monitored the operating system Monitored system performance Backed up and restored operating system files and data