Windows 2000 and XP machines sometimes run in to a "system CED" registry corrupt message. We used to be able to run the Microsoft chkreg.exe utility to repair these machines. With SafeBoot loaded, this is no longer an option.
The Microsoft utility makes a bootable recovery console ISO. Is there any way to integrate EndPoint Encryption drivers in to something like this? This is a tool our support staff uses frequently and losing this tool will force us to reimage many machines we normally could have repaired.
Any ideas or assistance would be greatly appreciated.
Maybe you can port chkreg.exe to BartPE (with integrated EEPC/SafeBoot support)?
Instructions for adding EEPC/SafeBoot to WinPE environment, exist on distribution CD, KB and forum.
I have already created BartPE bootable flash drives with SafeBoot support. Chkreg.exe is not a Win32 application so it does not run in BartPE. The ChkReg utility creates a Windows Recovery Console boot ISO, not a bootable PE environment.
Chkreg.exe is not a Win32 application so it does not run in BartPE.
Then it is not possible. You need to find windows application for registry checking. I'm sure there are plenty alternatives available.on 11/12/09 9:01 AM
This is a very specific Microsoft utility for repairing a "CED" error. I am not looking for a generic 3rd party registry tool, I need to run the Microsoft utility on my workstations. Unless you have a suggestion for a 3rd party BartPE based tool that performs the same functionality as the Microsoft tool, that is not an acceptable solution.
Then you may need to reevaluate your strategy, if that possibility fails to exist.
Last resort would be to take disk image while WinPE/BartPE is running, put it back, fix it, and then re-encrypt.
It's not a "strategy", it's a Microsoft KB article and solution to a known issue with Microsoft Windows XP and 2000. I find it hard to believe that we are the only ones that encounter this error and I was hoping someone had a better solution that reimaging. Even with your suggested solution, this issue went from a 10 minute fix to a couple hours of work for a desktop technician.
Perhaps McAfee can work on a solution to this as I need a way to load the encryption driver in the Windows Recovery Console environment. I imagine there are others that could benefit from the Windows Recovery Console.
I understand your reasons, but not many companies are using this tool. There might be a way to export hives using WinPE/BartPE, place in some system (could be wirtual), fix them with chkreg and reimport them back. Stil a convoluted process, but without re-encryption.
I haven't used this tool, but it looks like someone was able to get it to run off of a CD here:
http://www.annoyances.org/exec/forum/win2000/t1199876681 (second post).
Perhaps there's a way to get this added to a BartPE WinTech CD? You'd need to authenticate first to unlock your disk, then the utility may work properly.
EDIT: Looks like you've already discussed that above while I was writing :-)Message was edited by: Christopher-Boston on 11/12/09 8:51 AM
Assuming you're running 5.x, try this:
Let us know if this works for you.