Windows 10 Troubleshooting For IT Support [Part I] | Bendjaballah Zine Eddine | Skillshare

Playback Speed

  • 0.5x
  • 1x (Normal)
  • 1.25x
  • 1.5x
  • 2x

Windows 10 Troubleshooting For IT Support [Part I]

teacher avatar Bendjaballah Zine Eddine, IT Engineer

Watch this class and thousands more

Get unlimited access to every class
Taught by industry leaders & working professionals
Topics include illustration, design, photography, and more

Watch this class and thousands more

Get unlimited access to every class
Taught by industry leaders & working professionals
Topics include illustration, design, photography, and more

Lessons in This Class

25 Lessons (1h 37m)
    • 1. Create Your Lab

    • 2. Information Gathering

    • 3. Steps Recorder

    • 4. Quick Assist

    • 5. Remote Desktop

    • 6. PSExec Part01

    • 7. PSExec Part02

    • 8. Create Recovery Drive

    • 9. Create Restore Point

    • 10. Case Study Restore Point

    • 11. Its Your Turn Restore Point

    • 12. Create System Backup

    • 13. Restore System Image Backup

    • 14. Create Windows 10 Installation Media

    • 15. Use The Install Media To Troubleshoot Windows 10

    • 16. Automated Troubleshooters

    • 17. Automated Troubleshooters Case Study

    • 18. System File Checker

    • 19. Microsoft Support and Recovery Assistant

    • 20. The Reliability Monitor

    • 21. The Event Viewer

    • 22. Case Study: The Event Viewer

    • 23. Understand what can cause a Startup Problem

    • 24. Using Startup Repair

    • 25. Its Your Turn: Using Startup Repair

  • --
  • Beginner level
  • Intermediate level
  • Advanced level
  • All levels
  • Beg/Int level
  • Int/Adv level

Community Generated

The level is determined by a majority opinion of students who have reviewed this class. The teacher's recommendation is shown until at least 5 student responses are collected.





About This Class

According to the netmarketshare website, Windows client operating systems dominate the market place with more than 87% of the computers in the world running a Windows operating system.

Windows 10, the latest Microsoft operating system, runs on more than 55% of the computers in the world.

As more and more companies are migrating their old Windows 7 and 8 to Windows 10, companies are looking for qualified IT support professionals to support and maintain the companies computers asset and provide quality support to the end-users.

If you are planning to apply for an IT support technician position, you must know how to troubleshoot and fix Windows 10 computers.

This course will provide you with the necessary skills that allow you to provide high-level desktop support.

This course will teach you how to solve the day to day Windows 10 problems you might encounter as an IT support technician. From the more common problems to the uncommon ones.

More than that, with the virtual Lab, you are going to simulate problems and use the techniques taught in this course to fix them. It's a 100% practical course.

If you want to become a high skilled IT support professional, then join me in the course to start a unique learning experience.

Meet Your Teacher

Teacher Profile Image

Bendjaballah Zine Eddine

IT Engineer


Class Ratings

Expectations Met?
  • Exceeded!
  • Yes
  • Somewhat
  • Not really
Reviews Archive

In October 2018, we updated our review system to improve the way we collect feedback. Below are the reviews written before that update.

Why Join Skillshare?

Take award-winning Skillshare Original Classes

Each class has short lessons, hands-on projects

Your membership supports Skillshare teachers

Learn From Anywhere

Take classes on the go with the Skillshare app. Stream or download to watch on the plane, the subway, or wherever you learn best.


1. Create Your Lab: You must practice while learning. I'm a big believer in that. It has been proven that when you practice, you will get better results from your learning. This is why I have created a step-by-step tutorial to create your virtual lab so that you can practice the lessons you are going to learn and do the exercises I'm going to give you. The virtual lab consists of creating a Windows ten virtual machine on your computer or laptop using virtual box. If you are not familiar with virtual box, it's a software that emulates a computer. So you can install an operating system and use these virtual machine as if it was a real computer. The first advantage of a virgin machine is that it's free, completely free. You don't need to buy any hardware or software. And the second advantage is that you can practice and do desks on the virtual machine without worrying about your break in your computer. And this is what we are going to do, break the virtual machine and tried to fix it, because you are going to learn how to troubleshoot Windows ten computers. So before jumping to the next lesson, download the PDF file attached to this lesson. For load the tutorial, set your virtual machine up, then you will be ready to go. So are you ready? Let's go. 2. Information Gathering: The first thing you should do in a computer troubleshooting is to make a diagnostic by gathering information. Before you can fix any computer problem, you need first to know what the problem is. You can't fix the problem until you identified. These are the fundamentals of troubleshooting. Take the example of the doctor. He can't give you a mitigation order straight away before he can put a diagnostic and identify your disease. The doctor first asks you questions, then he makes you some examinations, and finally, he gives you the treatment. The same thing is true in computer troubleshooting world. First, start by asking questions. Ask questions to the person that reports the problem to you. For me, there are mainly for question you should ask. The first question is, what's the problem? Describe the issue. Get a clear idea of the problem. A user can say, hey, my computer is slow. Ugandan, ask, is your computer slow when it starts or when you open a file, or when you browse on the internet. For each of those slowness problems, very different approach to take to fix it. The second question is, what change it? This is an important question to ask because nothing goes wrong until something has changed. What changed? It can be a new program that has been installed. It's gonna be a new hardware that has been ad. So if the user says that he started experiencing a problem since he has installed these new software. Your action can be an astonishing these new software and see if it has solved the problem. There is a caveat, however, especially for this example, never an a status software before you make sure you can re-install it and activates the license key properly. Otherwise, you are going to deal with another problem on top of the primary problem. The third question is, when did the problem start? This question? To focus your investigation on a specific time range, especially when you check the log files. If you find some errors occurring during this time range, this can be a clue you can start from to dig deeper into your analyses. The fourth question is, is anybody else experiencing the problem? If the first questions didn't help you to solve the problem. This one can. Because the more people who are experiencing the same problem, the higher are the chances that someone did found the solution. So by doing a quick search on the web, you can find some blogs or forums that report these issue and give the solution. So the first step in any troubleshooting consists of gathering information by asking questions to diagnose the problem. Once the problem, identify it, you can jump to the next phase, which is fixing the problem. In the next lessons, you are going to see some tools you can use to gather information on users computers. Okay, now let's wrap up. You start your troubleshooting by gathering information to identify the problem. This is the first phase. The second phase consists of fixing the problem based on the information gathered. Thanks for watching. See you in the next lesson. 3. Steps Recorder: One of the tools that can help you gathering information and give you an idea about the debt problem is steps recorder. Steps recorder is a Windows ten built-in tool that can be run on the computer and experiencing the problem to record the actions taken by the user that lead to the problem. It's a simple tool that can be used even by an inexperienced user to run steps recorder, open the Windows, Start menu, and type steps. To start the application. When it starts, it shows a small window width buttons. There is the start recording button, the Stop button, and the added comment button. I have prepared a scenario that emulates a burger in the Windows Calculator application. So I'm going to start recording while trying to open the calculator. Here e is the error message. Going out to copy the error message to add it as a comment. I do paste here. Okay, close this. Now I'm going to stop the recording. The application is now generating the report. Let's maximize the view. Here we have a kind of an integral, and here we have the steps. Step one, there are the date and time when the action was recorded. Here, the action that was taken using left-click on start button. And that just here, you can't see a green square surrounding the start button. Step two, the same thing. There are the date and time. The action name, user left-click on calculator. And you can see here the mouse pointer over the calculator icon, scrolling down. Step three, you as a left click on Copy to Clipboard the button. Step four, click on the button. Step five. When I added the command. Step six, click on the Start menu. In the end, there are additional details like the recording, start and end time, the number of steps recorded. There are six and there is 0 error in the recording. The operating system version. It's important information that can help in the troubleshooting process. And here there are more details on the steps with the names of programs involving. The final step consists of saving the recording by clicking on the Save button. Give it a name. Save. The recording is a comprehensive as a zip file. It can be attached to an e-mail and send that to the IT support. Let's open it and take a look. The recording file is an HTML document that can be open it in any browser. That is the same content as in the application with the screenshots and the details of the steps. So this tool can be of great help for IT supports to understand what the problem is and what the user did before the problem occurs. And the most of all, it's a Windows ten built-in tool and easy to use even by no-tech users. Thanks for watching. See you in the next lesson. 4. Quick Assist: Quick assist is a built-in tool that allows you to remotely assist the user on his computer by sharing the remote computer screen and even having full control over this computer. To use quick assist, you will need to have a Microsoft account to log in. Quick assist. If you don't have one, you can create one quickly. The end-user though, don't need to have a Microsoft account to use quick assist. He will just need to enter a court sent by the IT support technician. Quick assist, open the Windows Start menu and type. Quick Harris the quick assist the application. What I frequently do with the apps I use the most is to pin them on the start menu to access them quickly in the future. Now, I click to start the application. Quick assists offers you two options. If you need assistance, you enter this field, decode that the IT support technician sends you, and you start sharing your screen with the support. If you are the IT support technician and want to assist a remote end user, click on the assist another person button. Here, I need to enter my Microsoft account icon. Use an email, a phone number associated with my Microsoft account, or my Skype ID. I'm going to enter my Outlook Email address. Next. I type the password. If you are going to use a quick assist there frequently, you can't check keep me sign beam checkbox so that you will not enter your credential every time I click Sign In. Now I am signed in into quick assist and it gives me a security code to communicate it to the end user. The code we generally expire in ten to 15 minutes. You can copy the code to the clipboard and then paste it into an email you sent to the user, or into an instant messaging application like Skype, vibrator or Whatsapp. You can also click on send email, then type the recipient's email address. The end-user will receive the code with the instructions on how to use Greek assist. And here are the instructions the user will receive in his mailbox. There are three steps to explain how to use the quick assist to. Now I'm going to switch to the end-user computer that needs my assistance. I launch a quick assist. Now I'm going to paste the code and click on the Share Screen button. Let's go back to that Technicians computer. Quick assist asks me to choose and my sharing option. The first option is to take full control of the remote computer. I can't then open the explorer, type a command on the command prompt or whatever. The second option is to view the remote screen without having full control. The option you choose depends on the nature of your assistance and the agreement you take with the assisted person for this demo, I'm going to take full control. Now I switch to the end user computer. The end user is asked to allow the Zantac technician to view his green. I click Allow. Let's switch back to the IT support computer. Okay, I can now see the desktop of the end-user computer. Let's maximize the view. Now, I can open the Start Menu, for example, open explorer. Let's open the command prompt and issue some commands. Ip config to display the network configuration. Okay, on the top of the quick assist window, there are some buttons here. The first button allows you to select the monitor you want to see. It's useful when the remote computer has more than one monitor. This button allows you to add annotations to highlight an area on the screen. For example, you can select the pen and the color, and you can draw something on the screen. This annotation will be visible on the desktop, on the remote computer. Let's clean the screen. This button allows you to resize the screen. This is better. This button allows us to send instructions to the end-user in text mode. You can use it when you are not communicating with the end-user over the phone, or to send some specific commands that can be difficult to spend over the phone. I'm going to type something. Send, message, sent. The end user will notice a small red ball here. When he clicks here, we'll see the message. If you need to restart the remote computer, you can use this button. I get a confirmation message. This button lets you open the Task Manager. Head is the task manager so that you can check, for example, the computer resource usage, like the CPU, the memory, and the disk. This button allows you to pose the screen-sharing for a moment and that is zoom it later. You can notice the end-user also has the same button and Campos the screen sharing with the technician. This button, as you guess, we'll end the screen sharing. That's all for this lesson. Thanks for watching. 5. Remote Desktop: Remote desktop is a Windows ten built-in tool that allows an administrator to take control of the remote computer. Usually, it's used it to administer servers. But in some cases, you can use it to connect it to a remote computers to install an application. For example, the Remote Desktop connection is available on Windows ten Professional Edition and Windows ten Enterprise edition. It's not available on the Windows ten Home Edition. The remote desktop connection allows only one session at a time. The user logged in will be logged out when you open a remote desktop session, the Remote Desktop connection doesn't allow under active activities, the remote user can't see what the IT support technician is. The wind on his computer. To be able to connect it to the remote computer, you need to enable the remote desktop on the windows parameters of the remote computer to lunch, Remote Desktop connection leak on the start menu, then type remote, click on the remote desktop connection up. In the computer field. You need to type the remote computer name or its IP address. Now, it's trying to connect. It usually connects instantaneously. I get a pop-up window with an error message that says that the remote desktop can't connect to the remote computer. And it gives me three possible reasons. The first possible reason is that remote access is not enable it on the remote computer. The second reason is that the remote computer is turned off. The third reason is that the remote computer is perhaps not available on the network. To troubleshoot that, you need to check for these three points. In our case, I know that I didn't enable the remote access on the remote computer. So I'm going to enable that on the remote computer. I'm going to open the windows settings and enable the remote connection. Click on the System, scroll down and click on remote desktop. You should toggle this button to enable remote desktop. I click confirm. Now that it is enabled, lets try the remote connection again. Yes. This time I'm invited to enter my login. I type the username and the password. I get a certificate warning. This is normal. Just click yes. And here it is. I'm now connected to the remote computer. To terminate the remote connection, you can click on this cross button to close the connection. Or you can sign out by clicking on the Start Menu, then on the user, and then click Sign out to completely close your session. That's all for this lesson. Thanks for watching. 6. PSExec Part01: Ps exec is a Microsoft tool that allows you to remotely run commands and programs without having to open an interactive session on the remote computer, and without having to install a client software manually. Ps exact 2D is a part of the seasoned journalist suite that contains several tools handy for troubleshooting and system administration. It's portable tool so you don't have to install it to use BS exec, both computers should be part of the same work group or the same domain. You need to know the password to the administrator account on the remote computer. Make sure the administrative share is available on the remote computer. You need to allow file and printer sharing on the firewall. First, I'm going to denote the PS exact from the Microsoft website. I type ps exact download. I click on the Microsoft Lync. As I said, PS exact is part of the C centeredness sweet. You can't see here the order tools available in the season terminals. Sweet. Each one can be used in specific fields like system, network, security and so forth. If you want to download the entire suite, leak on the sea centeredness sweet link. To download the PS exact tool alone, click on the download link. I'm not going to download the tool as I already did it. And now I'm going to open the command prompt and run the ps exec tool. I need first to change the current directory to seize and journals. Then I type the following command, PS, exec dot X-Y, backslash, backslash. Then I type the computer name or its IP address. Thus, you to indicate the account under which I would run the commands on the remote computer. Both computers I'm using in this demo are part of a domain. So I typed the domain name syntax. Backslash. Administrators. If you don't explicitly indicated the account PS exact we'd run under the currently connected user accounts. And finally, I type the command. I want to run cmd.exe to open a command prompt on the remote computer. Here, I need to type the password of the administrator account. Bs executive will not display the password I'm typing for security reasons. Ps exact is now trying to connect to the remote PC. I get an error message that says the network name cannot be found. I should make sure that the default admin share is enabled on the remote computer. It's an unexpected error because I didn't enable the file and the printer share on the remote computer through the firewall. This is what I'm going to fix now to make sure that the admin share is available. Right-click on the Start button and click on Computer Management. Click on shared folders, then open shares. And you can't see that the admins share is available. Now I'm going to enable the file and the printer share on the firewall, on the Windows Settings Search Bar, I type firewall. Then I click on a low enough through windows firewall. I scroll down and search for file and printer sharing heritage. I click to enable the exception on the firewall. Let's go back to the IT support computer and try the command one more time. Type the password. So this time, PS exec has successfully connected to the remote PC, and it's starting the ps exec service. Now, I'm supposed that you ran the command prompt on the end-user PC. Let's make sure that connected to the remote computer. So I'm going to type the hostname command and its end-user PC. So effectively connected to the remote computer. You can also check that in the title bar of the command prompt console. Now, I can issue any command that will run on the remote PC. For example, IP config to display the IP configuration. I can type dir asterix to display the folders. To end connection with the remote PC type exits the CMB that terminates on the end user pc without any error. Alright, in the next lesson, we are going to see more advanced use of BS exec by studying the Firefox browser on the remote computer without disrupting the user's session. Seems interesting. So see you in the next lesson. Thanks for watching. 7. PSExec Part02: In this lesson, you are going to learn how to install a program on the remote computer using BSE executive would end without disrupting the user session. You are not going to want to rent that OK, that visually we had the use of session and the user will not notice any setup program window that will pop up in his session. The advantage is that the user will not stop working. Why the support technician is installed in the program. And the advantageous for the support technician is that he has not to wait for the user to end working on his computer to start installing the program. In this lesson, I'm going to install the Firefox browser as an example. The first thing to do is to download the Firefox MSI installer package in the browser search bar. I type Firefox MSI download. Here it is. I click on the Mozilla supports websites. Okay, I scroll down under the MSI and honors section. I click on the link to get the MSI package. On this page, I need to choose which Firefox browser I need to download. In the first list, I select Firefox. In the second list, I select Windows 64-bit MSI package. To be able to install Firefox remotely, you need to use the MSI installer and the d z installer. In the third list, you select the language you are using. I keep the English US. And finally, you need to download the package. I'm not going to do that because I already did it. Now that I have downloaded the package on my PC, My next step will consist of copying this package on the remote computer. I'm going to do that using the command prompt. Admin privileges in order to run a PSA Zika. Come on that later on, I type the copy command. I entered the source file, and I enter the destination path. The destination path already contains the installation package. So just going to type yes, to overwrite. The package has been copied. Now I'm going to change the directory to seize and Germans so that I can run the ps exec command. Now, I'm going to copy the command I already prepared because it's a little long and I will discuss that in detail. So Iran PS exactly on the end user pc. The dash i parameter means that the command I want to run, we interact with the user session. Here the interaction is not necessarily visible. The dash S parameter ten ps exec to run the command in the system account is the account that has the highest privileges in windows more than the administrator account. Here is the program I want to run, MSI exec dot X-Y, the slash i parameter tense, MSI exact that I want to install a program that is located in this path slash QN parameter. Since MSI exec that I want to run the setup without showing any user interface. The destination will run quietly. These luxury start parameter will prevent the system from restarting after the Setup, Complete. Some programs require the system to restart to complete the installation. And I don't want the system to restart while the user is logged in. Now, I type the Enter key to run the command. The PS exact service is starting on the end user pc. So let us go to the end-user BC to see what happens. It seems that nothing is happening and this is normal because I did run the setup in the quiet mode. I will just wait till the setup completes and create the Firefox shortcut on the desktop. Yes, Harris, the Firefox shortcuts. The setup has successfully completed. And as you have seen, there was no disruption on the user's session. That's all for this lesson. Thanks for watching. 8. Create Recovery Drive: One of the biggest disasters that can happen to a computer is not being able to boot. If the computer can't boots, Dan, you can't access your desktop, your files, and your data. And if you can't fix this issue, you need to reinstall Windows ten from scratch, sets all the PC configuration back, and start all the applications. Again. I let you imagine the time it will take and the pain that can generate the Recovery DR will allow you to start your computer in the recovery mode where you can reinstall Windows ten, as well as gaining access to the command line tools to repair disc and startup problems. So without further ado, I'm going to show you how to create a recovery drive from my Windows ten desktop. I click on the Windows Start button. Then I click on settings. In the sittings search bar. I type recovery. Then I see lecture creates a Recovery. Dr. I click Yes. The create a Recovery DR. Wizard is easy to follow, but you need to pay attention to this checkbox here. Backup, system recovery to the Recovery DR. And it's enabled by default. As mentioned that here, if you backup system files to this drive, you will be able to use it to reinstall Windows. If you inject this box, your recovery drive will allow you to start your computer in the recovery mode so that you can troubleshoot it using the recovery towards earned at the command line tools. But you will not be able to reinstall Windows ten. I prefer to have the possibility to reinstall Windows ten in case the troubleshooting doesn't work. So I keep this option, enable it, and I click Next. Now the wizard is preparing the system to create the Recovery DR, and it can take a few minutes to accomplish. At this step of the wizard asks me to connect to a USB drive that must be able to hold at least eight gigabytes of data. Be aware that all the data on the USB disk will be deleted. So check your USB disk before you use it. Okay, so I insert my USB disk. I opened the Virtual Box device menu, expand the USB sub menu. The menu will show you all the USB devices available and that can be connected to your virtual machine. So I'm going to select the data USB flash drive. My data USB drive, I plugged in my laptop. This way, my virtual machine will be aware of this USB disk and will allow me to use it. As you can see now, the Virtual Machine has detected my USB drive and they give it the drive letter H. Now the Recovery DR wizard will analyze the USB D sketch. We check if there is enough space to create the Recovery. Dr. Again, I get the warning that my USB drive should be at least eight gigabytes in size and everything on it will be deleted. Here, I have the available USB disk with the drive letter. Okay, with that. So I click connects that to continue. A warning again, thanks. I'm aware. I'm going to click on the Create button to start creating the recovery drive. This process may take several minutes to hours depending on your computer speed. So be patient and wait till the process complete. Alright, the Recovery DR is now ready. I click on the finish button to close the wizard. So know, let's open the windows explorer and check the USB drive accountants. Here is my USB drive. The Recovery DR program gave it the name recovery. Here you can't see the system folders and files necessary for recovery in my system. Now, let's check the USB drive content sites. The data size on the USB drive is about five gigabytes, so it's less than eight gigabytes initially claimed by the Recovery DR program. But the size can change depending on each computer configuration. Now, I'm going to ask you to grab a USB drive of eight gigabyte and create a Recovery DR for your computer. Following the steps Joan, In this lesson, this is very important so that you can recover your system in case it's damaged and avoid yourself a pain of losing your data as well as your configuration. Thanks for watching. See you in the next lesson. 9. Create Restore Point: The system restored point is a feature that Windows ten uses to save the system state before any event that can impact the system, performance or stability happens. So if there is any issue caused by these events, the user is able to undo the changes made to the system and come back to the last stable system state. Windows ten automatically creates restore point before any of the following events, application installation. If the application installation causes system problems, you can restore the system to the state that precedes the installation. Windows Updates. Windows ten creates a restored point before and nobody is installed. So if the update causes some issues and this happens sometimes you can restore the system to a stable state system, restore point windows then automatically creates a restored point as a backup before any restore operation starts. This way, if you accidentally restore windows to an incorrect restored point, you can't undo that restoration besides creating a restored point automatically, Windows ten allows you to create money on restored points. This is useful when you want to make changes to the system that can lead to some issues, like, for example, modifying the registry keys to create a restored point, open the windows sittings in the search bar. I type restore point. I click on the best match on the system properties by an under protection settings, you can see that the protection is enabled for the C Drive, which is the system drive on which windows Jen is installed. This means that Windows ten is able to create a restore point. The system protection is enabled by default, but if for any reason this is not enabled, you can enable it. Just click on the configure button, then click on journal on system protection. Under the disk space usage section, you can set the disk space, use it for system protection. By default, Windows ten allocates the space based on the size of the hard-drive. In most cases, you don't have to change these parameter. Now, let's create a restaurant point for the C drive. For that, I click on the Create button. Then I need to type a description for the restore point. You need to give your restaurant point a meaningful description that reflects the event you are going to create. For example, creating these restore point before starting the Sikh leaner software. So I enter before sickling are installed. So if I face any issue caused by these software icon selected these restore point and restore my system state from there. The restore point was created successfully. Okay, now let's check the restore point I just created by clicking on the System Restore button. This table lists the existing restored points on my computer. There is the automatic restored point created automatically by Windows ten. You have to note that besides the events that lead to create in an automatic restore point, we listed at the beginning of this lesson that our application estimation, Windows Update and restore operation. If any of those events happened during seven days, Windows ten will automatically create a restored point. And here is my restore point. I, my newly-created. In this column, you can see the type of the restored point manual or system. Okay, so now I'm going to install the SQL enough software, then I will try to restore my system to the state that preceded this installation and see how all these things work. Now that the software has been installed. And I'm going to open the restored point bimodal and check if Windows ten has automatically created, did restore points on the table? I have to restore points, the manual restore point, and the automatic restored points. I'm going to select the automatic one and click on the scanned for affected programs button to see what programs will be affected if I restore my system state. On this banana, we have two tables. The first one lists the programs and drivers that will be deleted after restoring. You can't see the Sikh leaner program and Google Chrome, which was installed by the SEC leaner installer, are the latest Programs I recently installed. So if I do a System Restore, I will lose those programs. The second table, lists on programs and drivers that maybe are sort, in my case, the list is empty. Now I'm going to select the automatic restored point and go head. I click on finish. A warning message pops up. It says that the system restore cannot be interrupted to one started. I'm okay with that. The system is now preparing restore. This process can take a few minutes to complete and lead to a computer restarts. After I login, I get these information message that the system restores completed successfully and in my documents have not been affected. Good news. I already concede that the SEC leaner and Chrome icons have disappeared from my desktop. But let's do another verification by checking the installed applications from the Windows settings panel. Click on apps. I scroll the list and see if c cleaner or Chrome in the absolutists. It seems that the restore, remove it them as expected. Thanks for watching. See you in the next lesson. 10. Case Study Restore Point: Wow, look at this scary blue screen of death. Just after boot in my computer. It says that my computer run into a problem and needs to restart, and the stop code indicates inaccessible Boot Device. Wow, this is scary. Windows ten is now restarting and we've tried to repair itself automatically. If you get these blue screen of death after you boot your system and you are unable to get to your desktop, many dots starts popping up in your head. However, recent backup but of my data so that I can restore them in case I have to reinstall the wall system. And at this moment, you will realize that you don't have one. Fortunately, this crash happening on my virtual machine and not on my laptop. I have emulated these incidents by modifying a registry key to prevent Windows ten from loading a critical boot drive. In the next video, I will show you how to do that so that you can practice on your site. But for now, I'm going to walk you through the necessary steps to fix this problem using the system, restore PointFeature. Before I made the registry key change, I have created the manual system restore point that I am going to use to get my system back to a functional state. So it seems that the Automatic Repair has faded to fix this problem, it asks me to restart my PC to fix the problem, or to press the Advanced Options button to try other options. I know that restarting my PC a second time will not fix this issue. So I'm going to press the Advanced Options button. This menu gives me the following options. The troubleshooting menu and continue to put the troubleshoot button will display another menu we troubleshooting options. And I can turn off my PC. I'm going to click on the troubleshoot button. Then I click on advanced options. Here I have a bunch of troubleshooting options. The startup repair, this will try to automatically fix problems that keep windows from loading. This is what Windows ten to do earlier without success, the startup sittings allows you to change windows startup behavior. For example, if you want to start Windows ten in the safe mode, you can do it from here. The Command Prompt allows you to use comments to troubleshoot when those issues. In the upcoming lessons, I'm going to cover this topic on how to use the common prompted to fix Windows, ten boots issues. I can also understand updates that I suspect cause problems. The system restore and lows meter is store windows from a restore point. This is the options I'm going to use in a few seconds. The last option, system image recovery, allows me to recover windows from a system image backup. I'm going to cover this topic in the following lessons. So now I'm going to click on System Restore. I click Next to display the list of available restore points. I selected the latest one I created before changing the registry key and the continuum. I click Yes to confirm. Now, I have to wait till the system restore completes. The system restore completed successfully. I need now to restart my computer. My computer successfully started this time and the system restore did fixed my boot problem. In the next video, I will show you how to emulate these boots crash so that you can practice what you have learned. Remember, watching the videos is good for learning, but practicing is better to muster what you have learned. Thanks for watching. See you in the next lesson. 11. Its Your Turn Restore Point: In this video, I'm going to show you how to emulate a boot crash so that you can fix it using a restore point. But before we begin, I insist that you do this experience on your virtual machine. Don't do that on your PC or laptop. Never play with this on your physical computer. Ok. So the first action you need to accomplish is to create a manual that historic point. Very important. If you don't have a restored point, you can't get your system back to a functional state. Next, after creating the historic point, you will need to change a registry key to prevent Windows ten from Buton correctly. To do that, opened the registry editor by typing regulated in the window's title. Expanded the ascii local machine, Andre. Then expand the system. Andre, expand the current control set services, then search for the store a, H, C, andre. On the left side, double-click the start key and change its value from 0 to four. The value four will prevent windows from starting this critical driver at the boot and hence the system crash. After changing the registry key, restart Windows, you will see the blue screen with an error message. Then your system will start a second time and try to fix the error automatically. After it fails to repair the issue, it will prompt you to use advanced options to troubleshoot that. From there, restore your system using the restore point. Now, it's your turn. 12. Create System Backup: In Windows ten, you can create a system image backup data includes the operating system and standard obligations and programs, the users profiles and your data. It's a complete backup that allows you to recover your system and data from a major crash. Even if you lose your hard disk, you can place a new one and use the system image backup or to reinstall your system. We call this operation reimagine the computer. To create a system image backup, I need to open windows settings from the Start menu in the search bar, I type backup. Then I click on backup sittings. Are they looking for an older backup section? Click on go to backup and restore Windows seven. This is the legacy backup utility still available on Windows ten. I think Microsoft Tech EPI to allow users migrating from Windows seven to Windows ten to restore their data bucket by Windows seven. But I think that sooner or later Microsoft will replace this utility with a where version. Next, I click on create a system image. Here I need to choose where to save the backup. I'm going to choose my external disk drive. The wizard asks me, what are the drives I want to include in the backup? By default, the drives that are required for Windows to run will be included and you can't change that. So my system image, we include the system reserved partition, the C partition, and the windows recovery environment partition. Click Next. On the summary page. I have the backup location and the drives that will be backed up. Finally, I click on the Start Backup button. The backup process can take several minutes depending on the size of your drives. I'm going to pause the recording and resume afterwards. At the end of the backup process, pop-up window asks me if I want to create a repair disc. If I click, Yes, I get an error message saying that windows did not find a CD or DVD burner as my computer didn't have one, either the new machines, this step is worthless. I close this. Now let's check the content of the bucket. The bucket is save it under this folder, Windows image backup. There is another subfolder, label it with the computer name. This folder contains my system image backup and it's more than 20 gigabytes. The order folders contain the catalog and the logs and necessary for the restore operation. In the next lesson, I'm going to show you how to use the system image backup jury image, a computer that fails to boot correctly. Thanks for watching. See you in the next lesson. 13. Restore System Image Backup: In this lesson, we are going to use the system image backup we created in the previous lesson to fix a computer that failure to boot buyers storing the system image. In this scenario, Windows ten detected that there was a boot issue and underestimated the computer and around the Automatic Repair, which didn't succeed in fixing the problem. When you face such a situation, when the Automatic Repair fades to fix the problem and you can't restore from a restore point and all the other fixes you tried failed. As a last resort. You can reimburse your computer by restoring the system image backup. And here comes in mind that the backup frequency, if you made a system image backup a year ago, you would have to deal with a year worth of Windows Update, which can make time to download to understand and the deed wheat or the system restarts. You also have to reinstall the missing programs and software. To avoid this pain, you need to create a system image backup, at least every six months, every three months would be better. So to re-image these computer, I'm going to click on the Advanced Options button to display the troubleshooting menu. Click on the troubleshoot option. Advanced options, then click on the system image recovery option. I get to this warning message telling me that windows cannot find a system imager on this computer. In fact, I plugged my external USB disk on my laptop. But to be recognized by the virtual machine, I need to connect it explicitly by using the virtual device menu. Go under USB, and I select Seagate back-up my Seagate external USB disk. You might see another thing, depending on the brand of the West BED SQRT wisdom. So now I'm going to click on the retry button to check for the system image on my external hard disk? Yes. This time, the restore tool found a system image on the HCI drive. Here are the dates and times that of the image backup file. And here is the computer name from which I made the system image backup. So check that information carefully. Make sure you are going to restore the more recent system image for the right computer. If you are okay, click next to continue. I'm not going to choose additional restore options on this page. I click next. Finally, check the summary page for the sittings. You are going to validate the bottom and there is a warning stating that if you're interrupted the restore process, your computer might not start up. So if you are restoring a system image backup on a laptop, make sure that the power cable is plugged. So data the laptop we might shut down in the middle of the restore operation. Finally, click on the finish button to start the restore process. I get another warning message that all data on the drives that you'll be restarted will be replaced with the data in the system image. Yes, it's logical. I click Yes to confirm. The tool starts to re-image my computer by restoring the system image. This operation might take from a few minutes to a few hours, depending on the system image size. Once the system restore it, the computer will restart and you will be able to login and use it again. 14. Create Windows 10 Installation Media: In the previous lessons, you have learned how to create a system restored points, how to create a Recovery DR, and how to create a system image backup. All these types of backups help you to recover your system from significant issue that can cause instability or can't prevent your computer from Boudin correctly. But imagine if you didn't have any of those backups, neither a Recovery DR nor a system image backup to fix your boots problem. And we understand count even boots in the recovery mode to let you use the restore point. In this case, you can create a Windows ten installation media that you can use to troubleshoot the computer boots issues. And also to install Windows ten. You create a Windows ten installation media. You need to download the Windows ten media creation tool from the Microsoft website. To do that, go into open the web browser and type in the Google search bar, Windows ten download. I click on the Microsoft Download link. On the Windows ten download page, you have two options. You can update your computer to the latest Windows ten version right away. Or you can download the tool so that you can create a USB installation drive or downloaded a Windows ten ISO file that you can burn on a DVD, use it to boot virtual machine and even create a USB installation drive. I click save to start the download. Once the download completes, I click on the View downloads button. I click on the media creation to an executable. On the application notices and license theorems, I click on the Accept button. Here the tool asks me, what do I want to do? The first option selected by default is to upgrade these B.C.. Now, this will start upgrading your computer to the latest Windows ten version. Right now. The second option is to create an installation media, USB flash drive, a DVD, or ISO file. This will allow me to use one of those media on another bc. And this is what I'm going to choose. On this page. You can select the language, the decision, and the architecture you want to use. By default, the option selected are the recommended ones for this BC. I will keep the default options and click Next. Here. I need to choose the media I want to create. If I want to create a USB flash drive, I need that one week, eight gigabytes of size. I can also choose to downloaded the ISO file with the ISO file icon, do many things. I can use the bisulfite to install Windows ten on Virtual Machines. I can also burn the ISO file to a USB drive, and so I can use the USB on older computers. This is the option I'm going to choose. So I click Next to continue. Here, I need to select the bath where I'm going to save the ISO file. I keep the default selection and change the file name to Windows ten and start to give it a meaningful name. Now the tool starts downloading Windows ten. So this can take a few minutes to several minutes depending on your internet speed. So I'm going to pause the video and resume when the download is complete. The media creation tool has completed downloading the ISO file. Now I'm going to use the Rufus free tool to create the USB drive from the ISO file. Rufus has automatically detected the USB drive connected to my machine, and it's 16 gigabytes USB drive, so it can contain the ISO file contents without a problem. In the Buddhist section, drop-down lists, you can choose to create a non-potable drive, a free dose drive, or an ISO image. I selected the ISO image option. Then I need to choose the ISO file I want to use. I will keep the default selected options here. I will rename the volume level to Windows ten media. I keep the file system method, that 32, it's the default. Finally, I click on the Start button. I get a warning message that all data on the device will be destroyed. I click OK. Rufus is now creating the installation flash disk. Now that the USB installation DR has been created, let's check it. Here is my USB drive with the Windows ten label. The label has been truncated. It seems that there is a limit in the numbers of characters. We can't exceed. Its not a big deal. Let's check the disc content. You can see that Rufus has copied the ISO file contents with the necessary files that you boot from the USB Drive, as well as running a Windows ten setup. So now you can use these USB drive to onStart Windows ten on a new computer or troubleshoot a boot issue by running the troubleshooting tools. In the next lesson, I will show you how to enter the troubleshooting menu when Putin from the Windows ten Installation USB drive, unlike the Recovery DR, that starts the computer into the recovery mode, when you boot from the Installation USB drive, it will display the Windows ten installation menu. And you need to go into a few extra steps to display the troubleshooting menu. Thanks for watching. See you in the next lesson. 15. Use The Install Media To Troubleshoot Windows 10: In this lesson, we are going to start our ritual machine using the Windows installation ISO file. To do that, you need to have the ISO file on your host machine so that you can mount it as a DVD drive. Tomorrow to the ISO file, selects your virtual machine from the VirtualBox Manager. Then click on the settings icon, click on storage, then on the DVD drive, Click on the DVD icon here. Then click on choose a disk file. Browse your computer and select the Windows ten ISO file. Now the ISO file has been mounted as a DVD drive and I can't use it to put my VM, I start my VM. I need to press a keyboard key to start from the DVD. And as expected, the DVD starts the Windows ten installation program. From here, I can start and start in Windows ten on this machine, or I can't continue and entered the troubleshooting mode. But first, I'm going to change the keyboard layout to French too much my computer keyboard. I click Next on this page icon and start and starting Windows ten right away. It's not my God. Instead, I'm going to click on the repair, your computer link, Harris, the troubleshooting menu. So now I can't display the troubleshooting options and use them to fix my computer issues. So in this lesson, I showed you how you could enter the troubleshooting mode even if you don't have recovery drive. But I recommend you to have on hand and recovery drive because in case your computer can't boot, you showed there find the northern one to download the installation media and that this is not always abuse, especially for individuals. If you are working on an organization, you can always find the computer you can use, but it can take you time to create the USB installation drive. As a mighty supports professional, you should always act quickly to reduce the downtime for the end-users. Thanks for watching. See you in the next lesson. 16. Automated Troubleshooters: Windows ten offers a quick way to fix the most common problems by using automated troubleshooters. What are the automated troubleshooters? The automated troubleshooters, our applets that fixed common problems by receding components to their default state. For example, if you have a network issue and the computer is not connected to the internet, automated troubleshooter, we'll reset the network interface among other troubleshooting tasks he performs. So use Windows automated troubleshooters as a first step to troubleshoot problems like internet connection problems, printer problems, sound problems, and so on. In most cases, the automated troubleshooters can fix those day-to-day minor problems and hence save you time. So don't hesitate to use this tool. First, I'm going to check the troubleshoot journeys and settings by opening windows sittings. Then I click on update and security. Then I click on the rubbish root in the left sidebar. Click on Recommended troubleshooting settings. Under the recommended the troubleshooting section, you can read the following. Microsoft automatically fixes certain critical issues on your device to keep it running smoothly. We may also recommended Robert shooting for order problems we think will improve your experience. Nice. In the drop-down list, you can select the behavior of the troubleshooter. The first option is fixed problems for me without asking, this will tend to troubleshooter to act on the issue that he identifies and fix it without bothering me with notifications. The second option, tell me when problems get fixed. It it does the same as the first one by automatically fixing the problem. But this time the troubleshooter will inform me about the problem, he fix it. The third one, ask me before fixing problems, we let you know about the problem found and the Yukon review the changes that troubleshooter will make to fix the problem. The last option is only fixed critical problems for me will lead to the troubleshooter fix the critical problems only. The minor problems will not be fixed automatically. I keep it a default option and go back to the troubleshooter sittings. You have to note that the automated troubleshooters split into different categories. There is the internet connection is a category that finds and fixes problems that we're connecting to the internet. The play in audio category, find and fix problems. We're playing a sound, the printer category, find and fix problems with the printing and the Windows update a category to resolve problems that prevent you from updating Windows. Among those categories, you can run the troubleshooter for a specific problem that doesn't fit into those categories, you can fix a Bluetooth problems, keyboard problems, network adapter by our problems, Windows Store Apps amongst orders. In the next lesson, I'm going to show you how to use automated troubleshooters to fix issues like internet connectivity problems. Thanks for watching. See you at the next lesson. 17. Automated Troubleshooters Case Study: In this practice lesson, I'm going to fix an Ethernet deck connectivity problem on my computer. Indeed, it seems that my computer doesn't have an internet connectivity, and yet I have set all the parameters correctly. So let's troubleshoot that. I'm going to use internet connections troubleshooter to try to fix semi Internet connectivity issue. So I run the troubleshooter. The troubleshooter is now trying to detect any problem that prevents my computer from connecting to the internet. The troubleshooter is now asking me to select the issue it should that troubleshoots, I'm going to select the first option, troubleshoot my connection to the Internet by trying to access the website. You can see that it did. Troubleshooter is looking for problems in web connectivity. Now, looking for problems in a network configuration network adapter, it's going fast. Now, it seems that the problem is being resolved. It's resetting the Ethernet adapter. Things are going fast again. The troubleshooter has now finish it and it has found a problem related to the default gateway that was not available and that this is what causes my internet connectivity issue. The troubleshooter fix it, that it's a green, a beautiful color. To see more details about the issue and the fix it, click on view detailed information link. There is more information about the internet, that connection issue. It shows the details about the default gateway and even it explains what the default gateway is. It also displays the task is accomplished by the troubleshooter to fix the issue. Resetting the Ethernet adapter was one of those tasks that probably fix it. The problem, again, more details here about the found issues. Okay. I closed a troubleshooter up and I can't see that my Internet connection is available again. So by running the internet connections at Robert shooter, I was able to fix my internet connection problem in a few seconds. It saves me time and effort. Thanks for watching. See you at the next lesson. 18. System File Checker: Another useful tool that can help you solve some critical windows problems is the system file checker tool or SFC for short, you can't use the SFC tool to fix windows and stability problems, which can result in crushing this system with the famous blue screen of death, you can also use it to restore a system fight that integrity has been corrupted may be due to a virus. The SFC tool is easy to use. You need that, you open a command prompt. As an administrator, then type the following command, SFC slash scan. Now these command, we'll set the SFC to scan all system files and replace corrupted files with a cached copy located at the C Windows when Sx as path when the SFC finishes scanning system for corrupted files, you may receive one of the following messages. Windows Resource Protection did not find any integrity violations. This means that you do not have any missing or corrupted the system files. Windows Resource Protection could not perform the requested operation to solve this problem, performed the system file checker scan in safe mode when those resource protection found the correct files and successfully repaired them, details are included in the cbs dot under this bath, Windows Resource Protection found that corrupt files but was enabled to fix some of them. Details are included in the cbs dot log file. You can read the log file, you identify the files, then you can replace them manually by known good. There could be, you can grab from another computer with the same Windows ten version. In the upcoming lessons, I'm going to show you in detail how to use the SFC tool to fix a computer would crash. 19. Microsoft Support and Recovery Assistant: Microsoft support and recovery assistant is a Microsoft troubleshooting tool that helps you diagnose and fix Office Microsoft 365 or Outlook problems. You can even troubleshoot Windows ten activation problems. You can't download it from the Microsoft website. Just type in the search engine Microsoft support and recovery keywords to access the download page. Once you download the tool and install it and run it. The main window looks like this. We, the many icons representing Microsoft Office products. You can fix problems. We that teams are the gain for outlook. Uganda speaks of his installation and activation problems, fixed OneDrive synchronization problems, Outlook on the web, you can run advanced at that the agnostics, this option allows you to fix Windows ten activation problems. If I select it and click Next, and I have only one option selected that says I have installed windows, but I can't activated. You click on the Next button. The tool will diagnose the problem and try to fix it. This option here allows you to resolve over ten different problems on outlook. This specific option works if you have Office 365 installed, so you can fix problems that prevent outlook from starting us this one, If outlook and keeps asking for password, this one fixed outlook that stops responding or freezes. So you select whatever problem you will face with Outlook and click next to let the tool help you fix it. You can also troubleshoot problems related to password synchronization on mobile devices and even troubleshoot Outlook for Mac. Now, let's say you have a problem in Outlook that you want to troubleshoot. If you have Office 365 and stalled on the computer, then use this option here. It's dedicated to troubleshooting Outlook for Office 365. If like me, you have office 2019 or earlier versions use advanced diagnostic options. On this page, the tool asks you to choose the diagnostic you would like to run. You can run the diagnostic for outlook for office that includes the other Office applications like where and excel. And you can't diagnose the Exchange Online. So I select outlook and click on the Next button. The assistant asks me if the problem affects this machine. I select Yes and click Next. The assistances starts by checking whether outlook is around him. If not, it will ask you to run Outlook before continuing with the next steps, then it will check your office configuration looking for potential problems. As mentioned, these tasks can take several minutes, so you have to be patient. Now go into both the video and resume when the task is complete. When the assistant complete check-in outlook for problems, it will display a list of the issues found. It seems that it has found some issues in my Outlook configuration to see more details about the issues, click on this tiny triangle to expand that the cell content and you can read the information on the issue. The detail of the View Panel can show you more details. I have the computer name here. There are details about the machine. Okay. The configuration summary shows information about the computer configuration like the operating system version, hardware information, user information. Here the Office version installed. And here the email address are used in outlook, here some registry keys. Okay, let's go back to the issues list and see how I can use the information given by the assistant to solve them. Let's take these issue here. Outlook is slow to close because of the first shutdown behavior registry value. Let's see more details. The explanation says that the faster shutdown behavior registry and value is not 0. With this configuration, you could experience slower shutdowns of Outlook. At the bottom, there is a link to a Microsoft web page that gives you a step-by-step guide to fix this issue. So when the assistant can't automatically fixes the problem for you, it will give you the needed details to help you manually fix the issue. I click Next. The final step by consists of generating reports about my Outlook configuration and the issue was found. The assistant alerts me that the reports may contain personal information like the email address. You may not want to share a view the contents of the report files in case you need to share them with someone. There are two types of logs. There is the HTML log file that will display the configuration details on a webpage. And there is the text that log file. You can click on the View Log link to review the log details before you send them. Microsoft support and recovery assistant is a great tool to use to fix Office problems or to improve office application performance. If I took the example of my Outlook configuration, I don't experience problems with my outlook, but the Assistant tool discovered some potential issues that can impact my outlook performance. So by fixing them, I can improve my user experience. We'd outlook. 20. The Reliability Monitor: The Reliability Monitor is a Windows tool that has been around since Windows Vista, but is commonly overlooked because it's hidden away and not highlighted in the Control Panel or administrative tools. And the reliability monitor is a valuable tool that helps you understand what's going on on the machine and eventually make a connection between the problem reported by the end-user and the events recorded. To get into the tool, It's pretty simple just to type reliability in the Windows, search bar. Dll liability monitor displays the computers reliability and problem history. The information is presented and they're graphical mode as well as a text mode. The graphical information, it looks like a table or a matrix where each column represents a day and each line represents an events. The events are represented by a color-code read for errors, blue for events and yellow for warnings. To get more details about these events and their acidification, look at the right side of the matrix. Each line of the matrix represents a specific event. This line shows events related to application failures. This one, events related to Windows failures, miscellaneous failures. This line represents the warnings and the last one represents the information events. These area represents the overall stability on a scale from one to 10. This gives you insights on how this machine performance then is being optimal. One is being poor performance. This graph shows me how the machine performance over time. For example, the performance of this computer was pretty medium. And here I notice some deterioration and it got worse on this day. Under the graph, I can get more details about what happened on this particular day. I see straight away that there were several critical events reported this day. If I select the first one, it's about windows that failed it to start because of a problem with the hard disk. If I want to see more technical details, I click on this link. This will show me more technical details if available. For this event. There are no additional details available. Let's take another event, this one for example. Here I can see additional details. For example, there is the error code I can use in my investigation. Here is the path of the program that experience that the error, okay? In practice, reliability history is used in combination with the information given by the end-user to investigate a problem, you can ask the end-user where he starts experiencing the problem, then use the reliability monitor to match up the user information we the events reported, and start your troubleshooting from there. Another tool you can use on top of the reliability monitor is the Event Viewer that can give you additional information about the problem. This is what we are going to see in the next lesson. Thanks for watching. See you at the next lesson. 21. The Event Viewer: The Windows Event Viewer sometimes call it event log, store details of everything that happens in the operating system, from routine operations to crashes and even blue screens of death. To open the event viewer, I tie events are to the Start menu. The different logs are located under the Windows logo folder. The logs are grouped by category. There is the application log that stores or events related to applications and started on the computer. There is the security log, the setup log, and the system log that contains all events generated by the operating system components like Services, drivers, hardware events, and so on. The center and Bannon of the event viewer is where the event logs themselves are displayed. The first column represents the event level that splits into four categories. The warning events are generated when a Windows components and application or service generates a message or error that does not cause unnecessary a problem to the system, but needs to be taken seriously if the frequency of the warnings are high enough, information is generated whenever services starts or stops, when an update is applied or when the computer is shut down. For example, error events are generated when a Windows component, application or service fades. The fourth category that is not visible here is the critical events that are ones that result in a sudden BC shut down a blue screen of death or a power problem. This column displays the date and time of the event. The source column displays the Windows components that originated the event. It can be a service, an application, a driver, or hardware. The event ID column contains the digital code that identifies the event. When you select an event, you can read more information and explanation about the event in the general area, the Event Viewer gives the possibility to filter the log events and display only those I want to focus my search on and get rid of the other events that I might not need. On the actions panel at the right side, I click on Filter current log, then I select the event level I wanted to include in the filter. I can also filter on other parameters like the event sources and choose an event from the list. I can filter on specific events ID or on a particular keyword. I click. Okay, now I can see only errors, events filter. I click on the Clear Filter link in the Actions panel. If you want to find a particular event, use the find that functionality. Let's say I want to find all events related to the disk. I get to the first disk event highlighted to see the next disk event, I press at the F3 keyboard key. I can keep the pressing F3 till I find that the events I'm interested in. Another interesting functionality that the Event Viewer offers is that you can't create a custom view. Let's say I want to create a custom view for the system events that shows me only critical errors and warning events. So I selected those event levels and click Okay, I need to give a name to my custom view. Okay? My custom view is created under the custom views folder. Now, if I scroll the custom view event lists, I will see only those events I selected. Another interesting functionality you can use is the ability to attach an action to a particular event so that when that event occurs, it will trigger a task that will be executed. To do that, I selected the event I want to associate to a task. Then I click on Attach task to this event in the Actions panel, I type the task name in this field and enter the task description. If I want, click Next, I have nothing to enter here. So I click Next on the action page, I need to select the action I want to perform. The first action is start a program. The two other tasks, send an email and display a message are deprecated. You can't use them anymore. So I have only one choice which is start a program. Here. I have to browse the computer and select the program or script I want to execute. You can also added arguments to the program if needed. When done, click on the Finish button to create the task. If you need to share the events with a colleague or the next, nevertheless support. You can always save the events into a fight with the EV txt extension. Now that you are familiar with the events viewer, how can you use it to solve real-world problems? This is what I'm going to cover in the next lesson. Thanks for watching. See you at the next lesson. 22. Case Study: The Event Viewer: How can you use Event Viewer to fix real-world problems? And what should you look at to identify the possible source of the problem? One of the things to look at is the frequency of the generated event. If the event occurs several times in a short period, discount indicates a problem with the component, the app, or the service that originated the event. If, for example, I selected the obligation log and scroll into the events, I can't see these same error generated several times in a very short period. This kind indicates a potential problem with this component. I should look at. The description of the problem is clear enough. It can't give me enough information to help me fix the problem. Otherwise, I can copy the description or part of it and paste it into the Google search bar. If the problem is known by the editor or by the IT community, the chances are that the fixed already exists. Now, I'm going to share with you a system log taken own a computer that took five minutes to boot Windows 10, five minutes to boot a computer with an SSD disk is ridiculous. Usually, I troubleshoot these kind of performance issues using the Windows Performance Toolkit, designated the disc as the source of the problem. I have confirmed this assumption by asking the user to send me the system event logs and HEDIS what I did find, there are several warnings, events generated by the disk. As you can see in the Source column, these events occurred in a short period, about a few seconds in interval. This is a serious warning that something is wrong with the disk on the Junior and Bannon, I can read the following, the IU operation at logical block address, and it gives the disk block address for this CO2 was retried. This means that Windows tried many times to read the data on this block address without success, we did this information in hand and knowing that the problem is related to the disk, I asked the user to run the hard disk sentinel tool to scan that these four potential problems. And here is the scan results. At first glance, the disk performance and the disk health are excellent. But here you can read that problems occurred between the communication of the disc and the host more than 35000 times. In case of sudden system crash reboots blue screen of death in accessible files or folders. It is recommended to verify data and the power cable connections. And this is precisely what we did with the end-user. He has replacing the SATA cable that connects the disk to the motherboard with a new one, and the problem disappeared. So the Event Viewer was offer great help to identify these hardware problem that was the source of the performance issues experienced by the user. Thanks for watching. See you at the next lesson. 23. Understand what can cause a Startup Problem: Nothing is more annoying than a computer that won't boot to the desktop. So knowing how to get Windows 10 working again, is a skill every IT professional should know in the upcoming lessons, I'm going to show you how to manually repair the worst Windows 10 boot problems that you might encounter in the real world. But before you go through those techniques, you can start with some tasks you can do to get Windows 10 butene again, quickly, too quickly repair a Windows 10 start-up problem. It is useful that you understand what can cause those boots problems. Among these problems, improper shutdown. Improper shutdown is by far one of the common causes of Windows 10 being enabled to boot. The improper shutdown can be a result of a user forcing the shutdown of the computer by holding the power button for four seconds or by putting the power cord out from the wall. And improper shutdown can also be the result of a power outage. And in some parts of the world, these can be quite common and improper shutdown can't corrupt some starter files and even the startup partition. In this case, you might need to use advanced methods I will cover in the upcoming lessons, a bad driver can also cause a Windows 10 boot failure. That can include a hardware driver that's not compatible with the Windows 10 version. How did we change or update can also cause Windows 10 or to not start. Windows updates in some cases can cause a Windows 10 to fail to boot by the past, Microsoft released Windows 10 updates, which goes it some and convenience to users from users enabled to connect to the Internet, to users enabled to boost their computers. These can be repetitive from the Windows Recovery Environment by an Australian Debugging Windows update. Malware can corrupt start-up files or change a registry keys that lead to Windows 10 boot failures. After repairing the boot issue, you need to perform a complete computer scan with the antivirus to remove the root cause of the failure. There are ways to easily fix come in startup problems and help you get up and running quickly. Some of them are damped, simple, like turning the device off and on again. Yeah. Oldest trick works. And doing what was done is usually a good way to get the computer to work again, if, for example, a new piece of hardware has been installed or a piece of hardware has been replaced by changing things back the way they were before. We often get the PC to work again and we'll give you the time to diagnose the cause of the problem. Using a minimum boot configuration can also help unplugging all unnecessary cables and the devices like USB drives and order USB peripherals and plugged the network cable. It can have to start the PC and lead to identify the device that causes the problem booting with or without the power cable. Maybe the computer has not enough power to boats properly. Also, changing the power or the power plug that might be damaged, it can help to get the computer to boot again, if none of these work, you need to go through the advanced troubleshooting techniques I will cover in the upcoming lessons. Thanks for watching. See you at the next lesson. 24. Using Startup Repair: If Windows 10 face to start, then the automated started prepare system will be invoked. This works by resetting the operating system components to their default state. For example, if a system driver is missing or corrupted, the automated Startup Repair tool will restore the original version of this driver from its drivers database so we can fix the most common startup issues. You how this works, I have corrupted a system file that to simulate a boot failure so that you can't see the automated started prepare inaction. So now I'm going to start with the virtual machine. I can't see a message that says repairing, automatic repair. So Windows 10 has detected a boot problem and it has invoking the Startup Repair tool. Now, the starter prepared to is diagnosing the system to try to find the problem source. And if it identifies any problem that it can't fix it, we fix it. It seems that the startup repair tool has found something and is now attempting repairs. Windows 10 is now restarting. Let's see if the boot will succeed. Oh yeah, The Startup Repair has successfully found the boot failure problem and the repair it. I can login again to my desktop and we'll check the log file generated by the Startup Repair tool to see what the problem was and what the actions, the tool to fix it. The log file is located under the Windows folder system 32. Log files as RT. The log file is named the SRT tray. At the beginning of the log file, I can't see the number of repair attempts at performed by the starter prepared to. In this case, it's performance only one attempted to solve the problem. Here, there is the number of root causes, one in this case, here are the test is performed by the tool to identify the problem. It has a jacket for updates, don't system disk test, disk failure diagnosis and other tests. At the end of the log file, it shows details about the root cause. I can read that boot critical file and it gives the path and the name of the file that was corrupted. And this is what causes the boot failure. The action performed by the tool after identifying the root cause was repairing, defined by restoring the original version. So the Startup Repair can fix some of the boot failures for you without you having to do something. But this is not always the case. The Startup Repair can't fix all boot failures and you need to repair by yourself. This is what I'm going to cover in the next lessons. Thanks for watching. See you at the next lesson. 25. Its Your Turn: Using Startup Repair: In this video, I'm going to show you how you can emulate a Windows 10 boot failure so that you can't see the Startup Repair tool in action. The first thing to do is to restart the Windows 10 VM into the recovery mode. Click on the startup button, then on the power button, press the Shift key while you click on the restart button. When Windows 10 shows the recovery on government, click on the troubleshoot menu, then on advanced options, then click on the command prompt. Windows 10 will restart and we'll ask you to login using an administrator account. I selected the administrator account. Before I enter my password, I need to change the keyboard layout it to French, too much mine. Now, I type my administrator account password. You have to note that when Windows 10 starts in the recovery mode, it will affect the C drive letter to the reserved partition that hosts the recovery operating system, the Windows 10 boot drive. We'll have a model drive letter to identify your Windows 10, the drive letter, use the BCD. Come and visit aided is a tool for managing the boot configuration when you type it without other parameters, it displays the boot configuration. As you can see, the partition C hosts the Windows boot manager. The Windows boot manager is the program that loads the Windows 10 operating system after the bios and checking the hardware configuration. My Windows 10 installation is located on the partition E. So I'm going to change their path to the E Drive then to Windows. System 32. See the drivers. Now, I'm going to rename the FV vault dot cc to a V von dot dot back. By doing so, I prevent windows from load in this fight and hence it will consider it as MRD or corrupted. Okay, When don't excite the comment prompts, then click on Continue to boot. Windows 10. Windows 10 will fail to boot because it will not find the driver, you rename it. And we'll invoke the Startup Repair after the Startup Repair to it fixes the problem, log into your desktop and check the log file.