Updating Drivers and System Files

By Dan DiNicolo, May 10th, 2001 Posted in Windows 2000. Subscribe to our RSS Feed

Along the same lines, you should also be aware that Windows 2000 protects system files by not allowing them to be overwritten (sort of – keep reading). One of the things that has made previous Microsoft operating systems less reliable was the fact that any application could potentially overwrite a system file with a ‘newer’ version (the one that worked with the vendor’s product), which could compromise system stability. Windows 2000 protects system files via WFP, or Windows File Protection. WFP works in the background, scanning system files for changes. If an application overwrites a system file, WFP replaces the file with the original ‘official’ digitally signed version. It does this by checking the dllcache directory for a cached copy of the file, or the source files, if they can be found. If the original is found, the OS replaces it transparently. If it cannot be found, the user is prompted to provide the CD (or source file location). Only if the user chooses not to provide a location will the newer version of this file be used. As such, you could say that WFP is passive protection, since it can be potentially circumvented. The good news is that if WFP does replace (or try to replace) a protected system file, an event is written to the System log. A command-line utility called the System File Checker, Sfc.exe, can be used to scan the system for unofficial or unsigned system files, and provide an appropriate course of action (just identify, replace, etc).

Written by Dan DiNicolo - Visit Website

Go To Page: 1 2

All Tutorials by Category:

Entire site Copyright © 1999-2007 2000Trainers.com, all rights reserved.
Content on this site may not be copied or reproduced in any way without permission.

IT Showcase