Windows System Management: Tools, Security, and Registry Structure

Essential System Maintenance Tools

System Utilities for Performance

• Defragmenter: Defragments disk volumes to optimize file storage and access speed.
• Scandisk (Check Disk): Scans, detects, and repairs errors in the file system and hardware on your hard drive.
• Disk Cleanup: Helps free up disk space by searching for and removing unnecessary files, temporary files, and Internet cache files.
• System Information: Collects and displays detailed system data, crucial for diagnosing hardware and software problems.

Data Protection and Backup

Backup: Creating copies of critical data stored on the computer that you wish to preserve.

Methods of Protection:

• Firewall: Acts as a security barrier between your PC and the network, controlling incoming and outgoing traffic.
• Antivirus: Prevents and detects the appearance and spread of malicious software (viruses).
• Antispyware: Detects and removes software designed to capture relevant information, often related to browser activity.

Understanding the Windows Registry

The Windows Registry is a central hierarchical database where the operating system stores configuration information for users, applications, and hardware.

It is divided into several key entries (Hives):

• HKEY_CLASSES_ROOT: Contains information on OLE technologies, file association data, and class definitions.
• HKEY_CURRENT_USER: Stores configuration information for the user currently logged in.
• HKEY_LOCAL_MACHINE: Contains system-wide configuration information (hardware and software settings).
• HKEY_USERS: Holds information about all user profiles loaded on the system.
• HKEY_CURRENT_CONFIG: Contains information regarding the initial hardware configuration profile.
• HKEY_DYN_DATA: Contains dynamic configuration settings, often related to Plug and Play devices and RAM.

User Accounts and Group Permissions

Types of User Accounts

• Administrator: Possesses full, unrestricted access and control over the computer and system settings.
• Limited (Standard User): Can make changes only to their own profile and has significant limitations when installing programs or modifying system files.
• Host (Guest): An account intended for temporary users who do not have a permanent account, typically with very limited permissions.

Standard System Groups

• Administrators: Members have the highest level of system permissions.
• Backup Operators: Members can perform file backups and restores, overriding security restrictions only for backup purposes.
• Users: Standard users who can run applications and perform common tasks, operating at a lower level of system access than Administrators.
• Members: They can run applications and create groups of their own level.
• Guests: Users without a permanent account who log in with limited permissions.
• Replicators: Supports directory replication functions, typically used by the File Replication Service (FRS).

System Monitoring Utilities

• System Monitor (Performance Monitor): Provides detailed, real-time data about system resource usage and performance counters.
• Logs and Alerts: Allows administrators to configure detailed information collection based on performance counters and set up alerts when thresholds are exceeded.
• Event Viewer: Collects and displays logs detailing hardware, software, and security events and problems.
• Task Manager: Provides information about currently running processes, application status, and overall system performance metrics.

Security Policies and Access Control

System Policies (Directives)

Account Policies

• Password Policies (e.g., complexity, length, history).
• Account Lockout Policies (e.g., failed login attempts threshold).
• Kerberos Policies (used for network authentication).

Local Policies

• Audit Policy (determining which security events are logged).
• User Rights Assignment (defining which users can perform specific system tasks).
• Security Options (miscellaneous security settings).

File System Permissions

A Permission is a rule associated with an object (like a file or folder) used to regulate access to it.

Types of Permissions:

• Read: Allows viewing the contents of the object.
• Change (Write/Modify): Allows reading, modifying, and deleting the object.
• Full Control: Allows reading, changing, modifying, and managing permissions for the object.