Microsoft operating operating systems have undergone many changes since MS-DOS was released way back in August 1981. Few will remember those early pioneering days before GUI systems changed computing forever. It was perhaps the launch of Windows 3.0 in May 1990 that had the biggest impact on most people. Here we had an operating system that you didn’t require a computer science diploma to use! However these early platforms were of course far from perfect and many will remember the dreaded ‘blue screen’ with the now infamous phrase “Windows has encountered a problem and has to close”.
Since then Microsoft operating systems have evolved into far more stable and user-friendly platforms. There have been ups and downs over the years with arguably Windows XP being better in many ways than it’s successor in the form of Vista. Some believe we are seeing a similar scenario with Windows 7 & 8. In any case, it is hoped that this blog will provide practical help and advice on how to install and obtain the best from Microsoft operating systems from Windows 7 onwards.
Several people can work on a single computer by creating their own user account. Every user account has its own settings and preferences. They can be configured to set their own desktop background, screen saver, themes etc. You can create different types of account in your computer. Windows 7 allows you to create, modify and delete a user account. You can also set a password for your user account.
Types of user accounts:
- Administrator account: An administrator account allows you to make changes that will affect other users of the computer like installing software or changing security settings of the computer. The built in administrator account is disabled and the account created by the user at the time of installation is used. Administrator account has complete access to your computer.
- Standard account: A standard account cannot make changes that will affect other users and security of the computer. Standard account can use most of the programs in the computer but cannot install or uninstall them. Any account that does not have administrative rights is a standard account.
- Guest account: A guest account can log onto the computer but will not have access to all of your files. A guest account can log onto a network, browse the internet and can shutdown the PC.
Creating a new user account in windows7:
- Click on ‘Start’- ‘Control panel’ – User accounts and family safety.
- Click ‘Add or remove user accounts’. The account management window is displayed.
- Click ‘Create a new account’ option on ‘Manage accounts’ page. The ‘Create a new account’ window will appear. In the ‘New account name’ field enter the name of the new account that you want to create.
- Select the type of the account. Two options are available namely ‘Administrator and Standard user’. Select the appropriate option and click ‘Create account’ button.
- Now the user account has been created and you can see the account in the list of ‘Manage account’ window.
Changing the account name and type:
- Click on ‘Start’- ‘Control panel’ – User accounts and family safety. The ‘User account and family safety’ page appears.
- Click ‘User accounts’ from ‘User accounts and family safety’ page. The ‘User account window appears. Click ‘Change your account name’. The ‘Change your name windows appears. Enter the name that you want to change and click ‘Change Name’ button.
- Click ‘Change your account type’ from ‘User account’ screen to change the type of user account. Select the required type of account and click ‘Change Account type’.
Setting password for the User account:
- Click ‘Start’ – ‘Control Panel’- ‘User account and family safety’- User accounts.
- Click ‘Create a password for your account’. The create password window appears.
- Enter the password that you want to set and confirm the password, type the ‘Password Hint’. Click on ‘Create password’ button.
Parental control helps you to decide how other users want to use your PC. You can block access to a particular game, websites and programs by configuring parental control. You can set time limit in hours that another user can use the computer through parental control utility. Parental control can be applied only to the standard account. You can restrict the kinds of websites that children visit and games, programs, etc. Parental control feature is available in windows 7 Home premium, ultimate & Enterprise editions.
Configure Parental Control:
- Click ‘Start’- ‘Control panel’- ‘User account and Family safety’- ‘Parental control’. The ‘Parental control’ windows will appear.
- Select the standard user for which you want to set the parental control. Select ‘On, Enforce current settings’ under parental control settings. Set the individual settings such as ‘time limits’, control over ‘games’ and ‘Allow or Block specific programs’ and click ‘Ok’ to apply parental control.
Set Logon Hours:
- Click ‘Start’- ‘Control panel’- ‘User account and Family safety’- ‘Parental control’. The ‘Parental control’ windows will appear.
- Select the standard user for which you want to restrict logon hours.
- If the parental control feature is not enabled, then enable it and click on ‘Time limits’.
- Now you can select different logon hours for each and every day of the week by selecting the squares. Blue space indicates ‘blocked’. White space indicates ‘Allowed’.
Block games using parental control:
- Click ‘Start’- ‘Control panel’- ‘User account and Family safety’- ‘Parental control’. The ‘Parental control’ windows will appear.
- Select the standard user for which you want to apply ‘Game control’.
- In the ‘User account control’ windows click the’ Games’ link. Click ‘Yes’ option.
- Click on ‘Block or allow specific Games’ link. You can select ‘Always allow’ or ‘always block’ for the games which you want to allow or block.
Parental control is not applicable for administrator and the members of Administrator group.
Remote desktop and Remote assistance is available in professional, business and ultimate editions of Windows 7. It is a technology which allows you to access remote computer from one place. Remote desktop is disabled by default on computer running Windows 7. You can enable the Remote desktop connection from the ‘Remote’ tab of the ‘System properties’ dialog box.
Remote assistance is a helpdesk feature used to view the screen of the user whom they are supporting. If a person experiencing any difficulty on his computer or on any applications or software products, the help desk staff can view and provide support to them remotely using Remote Assistance.
There are three options to configure Remote Assistance:
- Save this invitation as file. Save the invitation as file and send this invitation to the helper as an attachment through web based email.
- Use Email to send an Invitation. Use this option to send the invitation to the sender through email directly without saving the invitation on your local computer. You cannot use this option if you have not configured the email program.
- Use easy connect. This method is applicable only on a local network if the peer name resolution protocol is present on the server. A DNS server and email server configuration is required on the network.
Note: In all of the above methods, the person requesting for help needs to provide a password to the person who provides assistance.
Configure Remote Desktop in windows 7:
- Right click ‘Computer’ icon on the desktop, select ‘Remote settings’ in the left pane, select ‘Allow remote connections from computer running any version of Windows’.
- Click ‘Apply’- ‘Ok’. This will enable remote desktop in the computers who want to remotely connect to each other.
- Click ‘Start’ – ‘All programs’ – ‘Accessories’ – ‘Remote Desktop Connection’. The Remote desktop connection window appears.
- Enter the Name/IP address of the computer which you want to connect. Click on ‘Connect’ Button.
- The Remote desktop connection starts to configure remote desktop session. It will ask you to type the username and password to provide authentication to the remote computer.
- Once the authentication process is done remote connection is established with another computer and you can now control the computer and resolve the issues.
Configure Remote Assistance in windows 7:
- Right click ‘Computer’ icon on the desktop, select ‘Remote settings’ in the left pane, select ‘Allow Remote assistance connections to this computer’.
- Click ‘Apply’ – ‘Ok’. This will enable Remote Assistance in the computers you want to access remotely.
- Type ‘Remote assistance’ in search box of the ‘Start menu’. Open ‘Windows remote assistance’ console. The Windows Remote assistance window appears.
- IF you want help from someone, then you have to select the first option ‘Invite someone you trust to help you’. The Windows Remote assistance screen appears. Click on ‘Save this invitation as a file’. Give a specific path on a shared folder so that another person having access to the shared folder can access the invitation file.
- Open the invitation file and it will display a ‘Password’ for another person to connect using the same file.
- The person who wants to help you will access the ‘Windows Remote assistance’ console from the search box of the ‘Start’ menu. Select ‘Help someone who has invited you’ option. The ‘Windows Remote assistance’ page appears.
- Click on ‘Use an invitation file’ and browse the location to open the invitation file from the remote computer. Type the password generated by the first user and this will allow providing remote assistance to his computer. Click ‘Ok’.
Windows 7 is perhaps the best Microsoft operating system to date and is very easy to install compared to windows XP.
Before starting the installation we should make sure that the computer meets all the Hardware requirements for installing Windows 7.
Minimum Hardware requirements:
- 1 GHz 32 bit processor.
- 1Gb RAM for good performance
- Graphics adapter that supports Direct x 9 graphics. Minimum 512 Mb of Graphics memory.
- 20 GB free Hard disk space.
Different Editions in Windows 7:
- Windows 7 starter
- Home basic
- Home premium
The steps to install Windows 7 operating system are as follows:
- Start your computer. Press f2 or delete at start up to enter the bios menu. Select First boot device as ‘CD ROM’ if you installing from DVD ROM. Second boot device as ‘Hard Disk’ so that the computer boots from Hard disk if OS is not in DVD ROM. Press f10 to save your settings and select yes to restart your computer.
- Insert the installation disc for Windows 7 and start your computer. The computer will ask you to ‘Press any key to boot from CD/DVD’. Press any key on your keyboard and it will start loading the operating system from the CD.
- After loading windows 7 successfully, it opens an install window. Enter the Language time & currency format and keyboard or input method. Click ‘Next’. The ‘Install windows 7’ screen will appear.
- Click ‘Install now’. Setup will start and you will see a message on the screen ‘Set up is starting…’
- Now it will show the License agreement screen. Check the ‘I accept the License terms’ and click ‘Next’. The ‘Install windows’ wizard will appear.
- Select Custom (Advanced) option. The screen will prompt you to select the location to install windows. Click drive option (Advanced menu). Click on ‘New’, you are then asked to allot a size on the disk for installation. Enter the appropriate volume size and then click ‘Apply’ to create partitions for the installation, click ‘Next’. Windows will start the installation. Now the installation status screen appears. You will have to wait for the following tasks to get complete.
- Copying Windows
- Expanding Windows files
- Installing features
- Installing updates
- Completing Installation
- The computer will restart several times during this process so do not worry.
- After successful installation of Windows 7 it will ask you to specify the ‘computer name’. It will also ask you enter a ‘User account’ and ‘Password’. Enter the password in the respective field and also the password hint, click ‘Next’.
- The setup key will open the ‘Product Key’ option. Enter the correct product key, make sure that ‘Automatically activate windows when I am online’ check box is selected and click ‘next’.
- Now a window to set time on your computer will be displayed. Set the correct ‘Time Zone’, date and click ‘Next’ option.
- The ‘Computer network location’ option will be displayed if your computer is already connected to a network. Select ‘Network type’ and click ‘next’.
- Windows will now finalize the setup and start to prepare your Windows 7 Desktop.
Upgrading to Windows 7
- To upgrade to Windows 7 you need Windows Vista in your computer.
- Turn on your computer. Once windows Vista is started open the installation media for windows 7. If you are using a DVD, insert DVD disc in your computer. Setup will start automatically. If it does not start, Click on ‘Start’ – Computer—double click the DVD drive – double click the setup file.
- Click ‘Install now’ button. ‘Get important updates for installation’ page appears. Select ‘Go online and select the latest updates for installation (recommended).
- The ‘License agreement ‘page appears. Check ‘I accept the License term’ and click ‘next’.
- The windows to ‘Install windows’ will appear. Select ‘Upgrade’ option. Now windows will check for the compatibility with the help of windows upgrade advisor and generate report if it finds any compatibility problems. If no compatibility issues are found then Windows 7 starts up gradation process.
All the applications, data, settings and documents existed on the computer running windows vista will be available in windows 7 after the upgrade. We should run windows upgrade advisor before we start up gradation. Most of the applications which run in windows vista will run in windows 7. But some significant applications and hardware may not. This is called as compatibility issues. Windows upgrade advisor will is an application which helps you in determining any applications which may not run properly on windows 7. If any problem is occurred during the up gradation of windows 7 it will automatically restore the previous operating system. If you are experiencing any problem at the time of login then you can roll back you vista operating system manually. You cannot upgrade a 64 bit version of windows 7 operating system to 32 bit version of windows 7 operating system. Also you cannot upgrade from Windows 7 ultimate edition to Windows 7 home premium.
A Virtual Hard disk is capable of storing files, folders and file system like that of a Physical Hard Disk. It can host native files and support standard disk operations. It allows multiple operating systems to reside on a single host machine. We can modify a Virtual memory shared disk from a host server. It supports following applications:
- Moving files between a VHD and the host file system.
- Backup & Recovery.
- Antivirus & security.
- Image management & Patching.
- Disk Conversion (Physical to Virtual).
- Life cycle management and provisioning.
There are 3 types of VHD files:
- Fixed Hard-disk image: A fixed hard disk is a file that is allocated to the size of the virtual disk.
- Dynamic Hard-disk image: A dynamic hard-disk image is large as the actual data written to it at any given time. As more data is written, the file dynamically increases in size.
- Differencing Hard-disk image: It describes the modification of a parent image. This type of hard-disk is dependent on another hard-disk image to be fully functional.
Steps to create a Virtual Hard Disk:
- Go to ‘Start’, Right click on ‘Computer’, Click ‘manage’. The ‘computer management’ window will appear.
- From the left pane select ‘Disk Management’ option, Right click ‘Disk management’ and click ‘Create VHD’.
- In ‘Create and attach Virtual Hard Disk’ dialog box, mention the location where you want to create the VHD file by clicking on ‘Browse’ and mention the Virtual Hard disk size in MB.
- Type the file name for VHD and click on ‘save’. Click ‘Ok’ and newly attached disk is created.
- To initialize the disk, right click the icon near the disk designation and click ‘Initialize disk’. This opens the ‘Initialize disk’ dialog box. Select the disk and click ‘Ok’.
- You can now partition this Virtual Hard Disk in the same way you partition your physical Hard Disk.
Detach a VHD:
- Go to ‘start’ Right click on ‘Computer’ select ‘Manage’.
- From the left pane right click ‘Disk management’. Select ‘Detach VHD’.
- Click the icon besides the disk designation and click ‘Detach VHD’.
- In the Detach Virtual Hard Disk dialogue box select the VHD which you want to detach. Click ‘Ok’.
- You can now copy the VHD file from the location which you specified while creating VHD so that you can attach it to any computer.
Attach a VHD:
- Go to ‘start’ Right click on ‘Computer’ select ‘Manage’.
- From the left pane right click ‘Disk management’. Select ‘Attach VHD’.
- This will open attach Virtual Hard Disk dialogue box. Browse the location where you have saved the VHD file and click ‘Ok’.
- You can now see a new VHD in the Disk management window.
Importance of Virtual Hard Disk:
- Using Disk management tools to create and attach a VHD for offline image management. You can attach a VHD by using ‘Attach disk’ command which activates the VHD so that it appears on the host as a disk drive rather than as a .vhd file.
- Mounting reference VHD image on remote shares for image servicing.
- Configuring VHD files for native boot without requiring a full parent installation.
- Configuring computer to boot multiple local VHD files containing different application workloads, without requiring separate disk partitions.
- Managing desktop image deployment.
- A VHD can be used as running operating system on hardware without any other parent operating system. VHD is not designed to replace full image deployment on all client and server systems.
Home group is a new feature in windows 7 which allows you to connect to other computers and also allows you to share music, pictures, documents, printers and other files with other computers. Home group cannot be created on a Domain network. We can allow other computers on home group to modify our files o make them read only. You can set permissions for other users to access your files.
Steps to create a Home group:
- You require minimum 2 computers on the same network.
- Click ‘Start’ and select ‘control panel’. In control panel select ‘Network and Internet’ and click on choose ‘Home group and sharing’. This will display the home group window.
- Click the ‘Create a Home group’ button. The Create Home group window will appear. Now select the check box for which items you want to share and click ‘Next’. Then it opens a window with password information to other computers.
- You have to use this same password to add other computers to your network. You can also click on ‘Print password and instruction’ and give this password to other computers running windows 7 on the network to join your Home group.
- Click ‘Finish’ to complete the creation process.
Note: When a computer is connected to the home network where you created your home group, windows 7 prompts you that there is Home group available to join.
Steps to Join a Home group which is already created:
- Click ‘Start’ – ‘Control Panel’ – ‘Network and Internet’ – ‘Home group’. The Home group window will appear.
- Click ‘Join now’ button to join your Home group. The join a Home group wizard will appear.
- On the join a Homepage window, select the items that you want to share with other computer and click ‘Next’.
- Enter the Home group password that you got from the person who created the Home group and click on ‘Join now’ button.
- If you want to leave the home group, open the Home group item in the ‘Network and sharing center’ and then click ‘Leave the Home group’ option.
Sharing Data in your home group:
- Type ‘compmgmt.msc’ in start search box, click on ‘Shares’ under ‘Shared folders’.
- Right click on shares node and click ‘New share’. Then it will open ‘Create a shared folder’ wizard.
- Click ‘Next’ and specify the folder which you want to share. After entering the folder path ‘Create a shared folder’ wizard appears. Enter ‘share name, share path & description’ to specify how users see and use this shared folder over a network and click ‘Next’.
- Set the appropriate permission that you want for the shared folder.
- Click ‘Finish’ so that the sharing completes.
Sharing a printer in your Home group:
- Click ‘Start’ – ‘control panel’- ‘Hardware and sound’- ‘Devices and printers’.
- Locate the printer and right click the printer which you want to share. Select ‘Printer properties’.
- Click ‘Sharing ‘tab of the printer properties and enable the ‘Share this printer’ option.
- To add additional drivers for the printer, Click ‘Additional drivers’.
- Click ‘Apply’- ‘Ok’.
Stop or change folder sharing:
- Open windows explorer. Select the folder and right click the folder for which you want to stop sharing. Select ‘Share with’ and select ‘Nobody’. The sharing wizard will appear.
- Click ‘Change sharing permissions. This will allow you to change the existing permissions.
- To stop sharing permission, click ‘Stop sharing’ option from share wizard.
You can assign three different kinds of permissions:
- Owner permissions: For the user who shared the folder.
- Read permissions: Allows the user to access files in the shared folder but not to delete or modify them.
- Write permissions: Allows the user to read, add, delete and modify the files in the shared folder.
Windows mail is not available by default in windows 7. Windows mail is a replacement of outlook express in Windows XP. It has more advanced features than Outlook express. We can set multiple email accounts in one place. Features like Email, Calendar can be viewed offline. Enhanced search option which can search Titles, email and content as well. Photos can be sent in a small thumbnail size retaining the quality. We have to download ‘Windows Live Essentials’ from the internet. You can download Windows Live essentials from the following link: http://windows.microsoft.com/en-us/windows-live/essentials. Once you download ‘Windows Live essentials’ double click the setup and start installing it. Here while selecting the installation type select ‘Choose the program you want to install’ and select only ‘Windows mail’ so that only windows mail will be installed. The installation requires internet connection. Make sure that you are connected to internet before starting the installation. Once you complete the installation follow the steps.
Security Features in Windows Mail:
- Warning about harmful emails and blocking of potential harmful attachments.
- Blocking of image downloading and other external content.
- Separate Inbox folders for different accounts.
- It synchronizes with Windows Live contact.
- It has automatic spelling check.
- While writing email you can use Emoticons.
- Search option has advanced features like title search, email search in Windows mail.
To configure Windows Mail you should have following things:
- Valid Email ID & password.
- Information of POP, IMAP or SMTP server.
POP: Post Office Protocol is an incoming mail server protocol.
IMAP: Internet Messaging Access Protocol is an incoming mail server protocol.
SMTP: Simple Mail Transfer Protocol is an outgoing mail server protocol.
Steps to Configure Windows Mail:
- Go to ‘Start’ – ‘All programs’ – ‘Windows live mail’. It will display ‘Windows Live mail is starting’ page. ‘Windows Live mail’ window is displayed.
- Click on ‘Accounts’ tab – ‘Email’ link in the left pane. This will display ‘Add your Email account page’. Enter you email id, password, Check the ‘Remember my password’ option. Enter the ‘display name’ which you want to be sent to recipient. Check the ‘Manually configure the server settings’ option.
- On ‘Configure server settings page’ enter the appropriate incoming ‘POP server/IMAP’ and outgoing ‘SMTP’ server information.
- Click ‘Next’ – and click ‘Ok’ to finish the configuration. Once this is done it will automatically start downloading messages from the mail server.
- To send a new message ,click on ‘Home’ tab and select ‘Email message’—enter the recipient address in the ‘To’ field, enter the ‘Subject’ and write the body of your message. Once this is done you can click on ‘Send’ to send the message. You can also click on ‘Send Receive’ button in the home tab. This helps us to test the ‘Send and receive’ configuration. If it is configured properly the synchronization will successfully complete.
Configuring Windows mail backup:
- Select the ‘File menu’ drop down arrow, Select ‘export messages’, Click on ‘Windows live mail’ program, specify the location of the messages which you want to export by clicking on ‘Browse’ button or select the ‘default path’ and click ‘Next’.
- Select ‘All folders’ option if you want to take backup of all folders. The ‘export completed’ page appears. Click ‘Finish’.
Restoring Windows Mail:
- Select the ‘File menu’ drop down arrow, Select ‘import messages’, Click on ‘Windows mail’ program, specify the location of the messages which you want to import by clicking on ‘Browse’ button or select the ‘default path’ and click ‘Next’.
- Select ‘All folders’ to restore all the folders. The ‘Import completed’ page appears. Click ‘Finish’.
Firewall is software used to check the information coming from the internet or the network. Firewall prevents hackers or malicious programs, worms from gaining access to your computer through internet or network. Firewall restricts these hackers and malicious programs based on the predefined rules or firewall settings. IT also stops your computer from sending malicious programs to another computer. Windows firewall with advanced security protects your computer from network attackers and malicious software.
Windows Firewall with advanced security:
Windows firewall with advanced security consists of complicated rules based on port protocol, port address and authentication. Windows 7 firewall can protect your computer from hackers. Some of its features are:
- Configure inbound and outbound traffic rules.
- Configure and apply Firewall rules based on network protocol type and port address.
- Configure and apply firewall rules based on network address of a specific service.
- Configure rules to allow only authenticated network traffic and block the others.
- Configure the security rules.
Inbound traffic: Inbound traffic is the network data that is sent to client computer running on windows 7 from external host over a network.
Outbound traffic: Outbound traffic is the network data that is sent by the client computers running on windows 7 to an external host over the network.
Steps to configure Windows Firewall:
- Click ‘Start’ – ‘Control panel—‘system security’ – ‘Windows Firewall’. From the left pane, click ‘Allow a program or feature through windows Firewall’.
- Click on ‘Change settings’ button, check and select the programs or applications from the list.
- IF you want to open application in ‘Home/work (private) or Public, or both the networks then select accordingly.
- Click ‘Allow another program’ button, if you want to add more programs or applications.
- Select program from the ‘Add a program List’ or click on ‘Browse’ to browse the program from the respective location. Write down the name of the program which is allowed to interact with the network.
- You can specify the network location on which you want to allow the program by clicking on ‘Network location types’. Click ‘Add’ button to add the selected application or program. Click ‘Ok’ to save the settings.
Steps to configure Windows Firewall with advanced security rules:
- Click ‘Start’ – ‘Control panel’ – ‘System Security’. Open ‘Windows firewall’ console and choose ‘Advanced settings’.’ Windows firewall with advanced security settings’ page will be displayed.
- Select ‘Inbound rules’ node to create inbound rule. Click ‘New rule’ in action pane to create new rules. The ‘New inbound rule’ wizard appears.
- Select the type of the rule that you want to create from the rule type page and click ‘Next’. Select ‘Port’ option and click ‘Next’. The ‘Port and the protocol page’ of the ‘New inbound rule ‘wizard appears.
- Select the appropriate protocol and specify the ports on which you want to apply rule conditions and click ‘Next’. The action page of the ‘New inbound rule’ wizard appears.
- Select the type of the rule you want to create. For e.g. Select ‘Allow the connection if it is secure’ and click ‘Customize’ button to apply the security methods. Select the required option on ‘Customize allow if secure settings’ page and click ‘Ok’.
- On ‘Action page’ of the ‘New inbound rule’ wizard, click ‘Next. The user’s page of the new inbound rule wizard appears.
- On the ‘Users page’ specify the type of users and add the users of specified category that are allowed to make the connection specified by the rule. Click ‘Next’. The ‘Name page’ of the ‘New inbound rule’ wizard appears.
- On the ‘Name page’ of the ‘New inbound rule’ wizard, enter a name for the ‘New rule’ and specify a description for the same. Click ‘finish’ when you are done.
Bit locker is a feature used to protect your computer running on windows 7 from offline attacks by encrypting the system volumes. ‘Bit locker To Go’ is a new feature for encrypting removable drives. If you lose your laptop computer, bit locker helps you to protect your data on stolen or lost computer from unauthorized data access. ‘Bit locker To Go’ can be used to protect data on external storage devices such as flash drives. Offline attacks include booting an alternate operating system to recover data from the hard disk of one computer and remove and place the hard disk of one computer to another to recover data stored on that hard disk.
Start-up key: A start up key is a special cryptographically generated file stored on a USB device.
Bit locker Modes:
Bit locker can operate in different authentication modes depending on computer hardware capabilities (Trusted platform module, TPM is required) and desired level of security. We have following bit locker modes:
- TPM only: In this mode user does not provide a password. PIN or start-up keys to boot the computer. User is unaware of the bit locker functioning. It is the least secure authentication mode for bit locker functioning. User becomes aware of this mode when bit locker detects modification in boot environment or if the user tries to remove the hard disk and use it on another computer.
- TPM with Start-up Key: User must provide a USB device containing the start-up key to boot the computer. If you do not provide a device which have start-up key at boot time, the bit locker leads your computer into a bit locker recovery mode. The bit locker in this mode also provides boot environment protection through TPM.
- TPM with PIN: User must enter a ‘Personal Identification Number’ before your computer boot into windows operating system. IF users do not enter the correct PIN at a boot time, then bit locker forces your computer in recovery mode.
- TPM with PIN and start-up key: When users turn on ‘Bit locker in TPM with PIN and start-up key, then user must provide PIN number and a device which host start-up key at the boot time. This is most secure mode for Bit locker.
- Bit locker without TPM: If your computer does not have TPM chips, then the bit locker can be operating in Bit locker without TPM mode. This mode does not provide boot environment protection. This mode provides only hard disk encryption.
Steps to Configure bit locker:
- Click ‘Start’- ‘Control panel’- ‘System and security’. Choose ‘Bit locker drive encryption’ from ‘System and security’ console. The Bit locker drive encryption console appears.
- Click ‘Turn On bit locker’ to encrypt the corresponding drive on the computer.
- Manage Bit locker allows you to change or print the recovery key of the encrypted drive.
- You can ‘Turn off the bit locker’ if you have the encryption key or PIN. It then decrypts the drive and it is no longer protected.
Encrypt a system drive using bit locker:
- Click ‘Start’ – ‘Computer’. Select the drive which you want to encrypt and right click to select ‘Turn on Bit locker’. It opens ‘Bit locker Drive encryption’ wizard.
- After Bit locker initialization, the ‘Bit locker drive encryption’ wizard opens a new screen to choose a way to unlock your drive. You can enter either a password or can use a smart card. Choose the required option and click ‘Next’.
- It opens a wizard to choose way to store your recovery key. You can ‘Save the Recovery Key’ into a file on your computer or you can ‘Print the recovery key’. Select the required option, Click ‘Next’.
- The wizard appears to store the recovery key. Then it displays a message ‘Are you ready to encrypt your drive’. Click ‘Next’. This will start the encryption. After the encryption is complete you will receive a message as ‘Encryption for selected drive is complete’.
Backup and Restore console
This helps us to copy and preserve the files to cope with failures. There are several destinations where you can save the files. Two supports for taking backup are ‘System image backup’ and ‘Files and folders’ backup.
- System image backup: It backs up the entire volume to a .VHD disk image. This backup helps you to restore your computer settings and all the running applications quickly. Windows image backup folder is created in the root of the backup media. System image backup creates the following files:
- A media ID file in the folder to identify the disk image.
- Global catalog and Backup global catalog files in the catalog folder to track the backup image versions.
- Extensible Mark-up Language (XML) files in the backup folder that has configuration settings for the backup file.
- Files and folders: In this type you can store files and documents to compressed (.zip) files. They do not provide back up to system files, program files, encrypting file system or user profile settings. Files and folder backup can be backed up to either local media or shared folder on the network.
System recovery options
The system recovery options contain several tools that can help you recover your operating system from a serious error. This set of tools is present on the computer’s hard disk and on the windows installation disc. There are following options in system recovery:
- Start up repair. This automatically fixes the problem that prevents the windows from starting.
- System Restore. System restore provides another method of starting system restore to a previous system restore point.
- System image recovery. IT allows you to implement a System Image restore. You can use this tool if system changes are causing problems.
- Windows Memory Diagnostic. This analyses memory of the computer for hardware problems.
- Command Prompt. It gives access to the file system, volumes, and files through a command line interface.
Configuring Files and folders backup
- Click ‘Start’ – ‘Control panel’ – ‘System and security’.
- In the ‘Backup and Restore’ windows, click ‘Change settings’.
- Select a destination where you would like to take backup. Click ‘Next’. On the ‘Setup backup’ page, select ‘Let me choose’. Click ‘Next’.
- Select he files which you want to backup, Click ‘Next’.
- On the ‘Review your backup settings’ page, Click ‘Change Schedule.
- The ‘How often do you want to backup’ wizard appears. Select ‘How often’ you want the backup to be taken, ‘What day’ you have to take backup, and ‘What time’ you want to take backup.
- Click ‘Ok’. Review your backup settings. If everything is alright, click ‘Save the settings and exit’.
Create a System Repair Disc
- Click ‘Start’ –‘Control panel’ – ‘System and security’ – ‘Backup and restore’.
- From the left pane, click ‘Create a system repair disc’.
- Insert a blank DVD ROM inside the computer. Click ‘Create disc’.
- ‘Creating a system repair disc’ dialogue box appears. Click ‘Close’.
Creating a system restore point
- Right click on ‘Computer’; select ‘Properties’.
- In the left pane select ‘System protection’ – click on ‘Create’ button.
- Give a specific name to the restore point, click ‘Create’. A system restore point is created.
Performing system restore
- Click ‘Start’ – ‘Control panel’ – ‘System and security’ – ‘Action centre’.
- Click ‘Recover’. Click ‘open system restore’. Click ‘Next’.
- Select the restore point and click ‘Next’. Click ‘Finish’.
- It will display a message ‘Once started the system restore cannot be interrupted. Do you want to continue?’
- Click ‘Yes’. Click ‘Close’ after the system is restored.