MCP Switches and Notes

Hello members, here are some common commands, and switches that might
help on the exam, If someone has a more definitive list and even better "alphabetized"
or not, please kindly let me know. I have found that knowing many of the common commands and switches can make the difference in passing or failing the 270 exam.
So if someone else does have a good "list of commands and switches" to know please
kindly let me know, I really could use a more comprehensive list. Thanks, Ric

BOOTCFG.EXE edit the boot.ini file, or system config tool known as msconfig.
Or use control panel system performance tab

BOOTLOGGING FILE located in windir/ntbtlog.txt, is on startup menu in xp

SETUPERR.LOG located in: %systemroot

DEBUG.LOG error level 0-4 4 is highest

SPUNINST.EXE –U : removes a service pack -f used to close all applications

UPDATE –u performs unattended install of service pack

TASKLIST.EXE is a command-line tool that lists all the processes running on a computer

TSKILL.EXE is a command-line tool that ends a process running on a computer

THE SYSTEM FILE CHECKER command-line tool allows you to check the digital signature of files.

SFC /scannow The SFC will run immediately.
/scanonce The SFC will run once at the next restart.
/scanboot The SFC will run every time the system restarts.
/revert SFC settings will return to default.
/purgecache Purges the file cache.
/cachesize=x Sets the file cache size.

MMC: author mode: administrator can manage
MMC: user mode: limits what users can access


NETSHARE: command for cmd line, Netshare sharename=drive and path

NET USE : maps a network drive, Net Use x: \\computername\sharename

DISKPART can create, delete, and resize hard drive partitions as well as assign or reassign drive letters

WINNT.EXE : use in Windows 3.x or MS-DOS
WINNT32.EXE : use in win 9x, me, 2000, nt, and home

Sigverif.exe: file signature verification Tool: in System Informatin tool, show the definitive list of signed drivers. Log File: Sigverif.txt

WINVER.EXE, which you can use to determine what version of Windows you are running and what level of service pack (if any) is installed.

APMSTATE.EXE: : The Advanced Power Management Status tool (Apmstat.exe) is designed
to check whether a computer’s APM-based BIOS is compatible

EVENTTRIGGERS.exe command: specifies “DISK CLEANUP” or “BACKUP” to run automatically if low space is detected or “backup” needs to run. Runs other programs.

TASKLIST.EXE is a utility to list “running Processes and running programs. It's not on every version of Windows but a more powerful alternative is available., similar to Taskmanager

Taskmon: lists tasks running on your computer, NOT USED IN XP

C:\PAGEFILE.SYS: Location of Page File.

SYSTEMINFO.exe : Displays complete system information, display information about the computer and the operating system, including networking information, and installed hotfixes

Tskill.exe is a command-line tool that ends a process running on a computer (similar to ending a process from Task Manager).

FIXMBR – REWRITES AND FIXES MASTER BOOT record (In Recovery console)

FIXBOOT: Rewrites the Volume Boot Sector (In Recovery console)

ZAP FILE: is a text file, which allows the Publishing of an Application to a User on XP,2000

MSP FILE: A Windows Installer patch (.msp file) is a self-contained package that contains the updates to the application and describes which versions of the application can receive the patch

.MSI FILE: To implement an unattended upgrade, you must deploy using the MSI file
reinstalling an updated installation package (.msi file

LDAP: is the protocol used by Windows clients to communicate with the Active Directory service. Remote Desktop Web connection does not require LDAP.

EFSINFO / is a command-line tool that displays information about encrypted files and folders

CIPHER /? is a command-line tool for creating file encryption
keys, viewing encryption settings, encrypting files and folders, and decrypting files
and folders.

MUISETUP: sets default User Interface Language, or add remove UI languages in Multilingual copy of of XP.

IPP: allows a User to print a URL

driverquery /v /fo csv > drvlist.csv : produces a simple list of installed devices and drivers

Netsh Firewall command provides an alternative way to view or modify settings
netsh firewall set opmode enable

This command enables logging of dropped packets in a file named C:\Fw.log:
netsh firewall set logging c:\fw.log 4096 enable

Cacls.exe, a command-line utility available in both Windows XP Professional and Home Edition, provides another way to view and edit permissions

● Schtasks /Delete This variant deletes an existing scheduled task or, optionally, all
scheduled tasks on a computer.
● Schtasks /End This variant stops a program that was started by a scheduled task.
● Schtasks /Query This variant displays all scheduled tasks on a computer, including
those that were created by other users.
● Schtasks /Run This variant immediately starts a scheduled task, ignoring the schedule
that was created for the task…..

● Fsutil This utility (presumably the name means file system utility) is designed for
support professionals and allows you to find files by security identifier (SID), change
the short name of a file, and perform other esoteric tasks.

● Diskpart This utility is actually a console application that allows you to manage
disks, partitions, and volumes from a command prompt. When you run the Diskpart
command, it opens a console window and **** you at the DISKPART> prompt. If
you type help and press Enter, you see a screen that lists all available commands, like
the one shown here.

To convert a FAT or FAT32 disk to NTFS format, use the command-line Convert utility. This
utility uses the following syntax: convert d: /fs:ntfs

run the Convert command with the /Cvtarea switch.
This allows the master file table (MFT), the index of all files and folders on the selected volume, to be created in a single space, rather than being fragmented

Net Share
The Net Share command lets you view, create, modify, or delete shared resources on your
computer. Deleting a User Share To remove a share, simply use the /Delete switch with the Net Share sharename command: C:\>net share spreadsheets /delete
spreadsheets was deleted successfully.

Net Use
The Net Use command connects your computer to shared resources on other computers. It
can also disconnect, or display, all the resources to which you are connected.
Create a Mapped Drive also with Net Use below:

Adding a Mapped Network Drive
You can create drive mappings with a command like this:
C:\>net use e: \\badlands\spreadsheets

Disconnecting a Mapped Drive
To disconnect a mapped drive, simply use the /Delete switch with the Net Use command:
C:\>net use e: /delete e: was deleted successfully.

Net Session
The Net Session command lets you view or disconnect connections between your computer
and clients that are accessing it.

Net File
The Net File command lets you view or close the open shared files on your computer. Typing
net file with nothing following it causes Net File to list all the open files, including a file ID,
the user name of the person who has the file open, and the number of locks each has:

Net Statistics
The Net Statistics command displays the statistics log for the local Workstation or Server service. Type net statistics workstation to view the Workstation statistics. Type net statistics
server to view the Server statistics

● Systeminfo Systeminfo.exe is a command-line utility that displays information
about your Windows version, BIOS, processor, memory, and a few more esoteric items.

APCOMPAT.EXE: command line utility used to Configure compatible application settings for older applicat.



COMPACT: compression utility for managing compression of files and folder command line
/c compress specified file
/u uncompress
/s:dir specify which folder shold be compressed or uncompress
/a displays hidden oir system attributes
/i errors ignored
/f forces file to be compressed
/q reporting critical info

CHKNTFS: used to display or specify whether automatic systemcheck is scheduled w/fat, fat32, ntfs volum

COMSETUP.LOG CREATED during installation process, information on COM + no device drivers.

B: BOOTP packets are used for communication between the DHCP server and the DHCP
clients. Blocking BOOTP traffic would have minimal positive effect on network

A: SFC no. SFC.exe scans all protected system files and replaces
incorrect versions with correct Microsoft versions

A: The /fastdetect switch is used by default. It makes the early boot process,
NTDETECT, skip the detection of parallel and serial devices (Plug and Play will find
them). This makes booting faster. You cannot configure the /fastdetect switch to log
information on device drivers.

The Chkdsk /f command is run to determine if the file system is corrupt.

FTOnline can be used to temporary mount volume or stripe sets that
where created on pre-Windows XP machines.


Sign In or Register to comment.