How can I tell what is loading between a normal boot and a last known good boot

Posted on 2005-04-24
Last Modified: 2010-04-14
I have a Windows 2000 server that reboots as soon as it gets to a login screen. That means without touching the server it will continually rebbot after it goes throught the boot process. The system will loaded if I hit the F8 key and load the last good known boot. Is there a simple way of telling what is loading in the normal boot that is not loading in the last known good?
Question by:Brendle
    LVL 95

    Accepted Solution

    Last known good is loading everything the normal does - EXCEPT changes made since the last successful LOGON.  Changes include Drivers, Registry changes, including Settings changes and other preferences.
    LVL 95

    Expert Comment

    by:Lee W, MVP

    Author Comment

    Is there a simple way of telling what is loading in the normal boot that is not loading in the last known good?
    LVL 8

    Expert Comment

    by:Leandro Iacono
    Lets just say that "the last known good configuration" isn't exactly a simple procedure ....

    I doubt theres a "simple way of telling" the difference between both bootups ...

    You would have to Debug, as far as I know .. which isn't simple ...
    LVL 35

    Assisted Solution

    by:Nick Sui
    >>>Is there a simple way of telling what is loading in the normal boot that is not loading in the last known good?

    By default, Windows loads all drivers and services according to the path defined in the registry. When you start your computer, you decide what to load and from where to load. This you tell OS by selecting Normal Mode, Safe Mode, Safe Mode with Networking and Last Known Good Configuration.

    The only simple way is to look at the following registry keys: -

    HEKY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services----------------------------All services/drviers in Normal Mode are loaded from this key
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal--------All services/drviers in Safe Mode are loaded from this key
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network--------All services/drviers in Safe Mode with Networking are loaded from this key
    HEKY_LOCAL_MACHINE\SYSTEM\ControlSet001--------All services/drviers in Last Known Good Configuration are loaded from this key
    HEKY_LOCAL_MACHINE\SYSTEM\ControlSet002 and so on.-----------same as above.

    HEKY_LOCAL_MACHINE\SYSTEM\Select---------This will tell which one to select as a Last Known Good Configuration.

    Look inside these entries you will find many more.

    And one way it to enable Boot Logging and then checking the log file to see what all drivers and services have been started and loaded. File name is NTBTLOG.TXT.

    Hope this helps you.

    LVL 30

    Expert Comment

    by:Wayne Barron
    No comment has been added to this question in more than 21 days, so it is now classified as abandoned..
    I will leave the following recommendation for this question in the Cleanup topic area:
    [Split Points: leew, SystmProg]

    Any objections should be posted here in the next 4 days. After that time, the question will be closed.

    EE Cleanup Volunteer

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    Suggested Solutions

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Outlook Free & Paid Tools
    This video discusses moving either the default database or any database to a new volume.
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now