<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:atom="https://www.w3.org/2005/Atom" xmlns:sy="https://purl.org/rss/1.0/modules/syndication/" xmlns:dc="https://purl.org/dc/elements/1.1/" xmlns:content="https://purl.org/rss/1.0/modules/content/" xmlns:wfw="https://wellformedweb.org/CommentAPI/" xmlns:slash="https://purl.org/rss/1.0/modules/slash/"
  version="2.0">
  <channel>
    <title>Why is my system not booting?</title>
    <atom:link
      href="https://docs.microsoft.com/archive/blogs/noboot/feed.xml"
      rel="self"
      type="application/rss+xml" />
    <link>https://docs.microsoft.com/archive/blogs/noboot/feed.xml</link>
    <description>Suggestions for troubleshooting systems that do not boot correctly</description>
    <lastBuildDate>Wed, 17 Apr 2019 03:13:02 GMT</lastBuildDate>
    <language>en-US</language>
    <sy:updatePeriod>hourly</sy:updatePeriod>
    <sy:updateFrequency>1</sy:updateFrequency>
    <item>
      <title>Bugcheck 0xC4 on Windows 2008 R2 when Driver Verifier is not enabled</title>
      <link>https://docs.microsoft.com/archive/blogs/noboot/bugcheck-0xc4-on-windows-2008-r2-when-verifier-is-not-enabled</link>
      <pubDate>Fri, 02 Mar 2018 11:10:59 GMT</pubDate>
      <dc:creator><![CDATA[Adrian Zamfirescu]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/noboot/?p=85</guid>
      <description><![CDATA[Hello everyone,

&nbsp;

It's been a while since I have posted something, but I've been seeing a...]]></description>
      <content:encoded><![CDATA[Hello everyone,

&nbsp;

It's been a while since I have posted something, but I've been seeing a new trend now and though I'd share it with you.

I've seen a lot of situations lately where Windows 2008 R2 servers are crashing with bugcheck 0xC4 (DRIVER_VERIFIER_DETECTED_VIOLATION) after a reboot even though Driver Verifier is NOT enabled on the system... a bit strange but it seems to be related to some CBS corruption that is already present on the machine.

Here are a few steps to help get you on your way:

&nbsp;
<ol>
 	<li>Boot the system into Recovery Mode (by either booting with a Windows DVD and choosing Repair your computer or by pressing F8 reputedly at boot and choosing Repair your computer)</li>
 	<li>Open Command Prompt</li>
 	<li>Use diskpart to identify the OS drive letter and the System Reserved partition drive letter that have been assigned in the recovery environment:
<ol>
 	<li>diskpart</li>
 	<li>list volume</li>
 	<li>note down the drive letter of the OS drive and of the System Reserved partition</li>
</ol>
</li>
 	<li>I will use C: for the system reserved partition below and D: for the OS partition but please change them to what you have on your system</li>
 	<li>Load the SYSTEM registry hive from the OS so that we check and make sure Driver Verifier is not enabled:
<ol>
 	<li>regedit</li>
 	<li>Select HKEY_LOCAL_MACHINE</li>
 	<li>Click on File -&gt; Load Hive</li>
 	<li>Browse to D:\Windows\System32\config</li>
 	<li>Click on the SYSTEM file (the one that has no extension)</li>
 	<li>Click Open</li>
 	<li>Give it the name offlineSystemHive</li>
</ol>
</li>
 	<li>Expand HKEY_LOCAL_MACHINE\offlineSystemHive\Select</li>
 	<li>Check the Default value
<ol>
 	<li>If Default is set to 1 then expand HKEY_LOCAL_MACHINE\offlineSystemHive\ControlSet00<strong>1</strong>\Control\Session Manager\Memory Management</li>
 	<li>If Default is set to 2 then expand HKEY_LOCAL_MACHINE\offlineSystemHive\ControlSet00<strong>2</strong>\Control\Session Manager\Memory Management</li>
 	<li>and so on</li>
</ol>
</li>
 	<li>Check if the following registry keys are present:
<ol>
 	<li>VerifyDriverLevel</li>
 	<li>VerifyDrivers</li>
</ol>
</li>
 	<li>If they are then delete them and reboot the system</li>
 	<li>If not then close Registry Editor and go back to the Command Prompt</li>
 	<li>Run the following commands:
<ol>
 	<li>D:</li>
 	<li>cd D:\Windows\WinSxS</li>
 	<li>dir *.xml</li>
</ol>
</li>
 	<li>If you see a file called pending.xml run the following command:
<ol>
 	<li>ren pending.xml pending.xml.old</li>
</ol>
</li>
 	<li>Run the following command in Command Prompt
<ol>
 	<li>sfc /scannow /offbootdir=C: /offwindir=C:\Windows</li>
</ol>
</li>
 	<li>Once finished reboot the system</li>
</ol>
Hope this helps someone get out of this sort of situation.

Best of luck!]]></content:encoded>
    </item>
    <item>
      <title>0xc000021a after Windows Updates</title>
      <link>https://docs.microsoft.com/archive/blogs/noboot/0xc000021a-after-windows-updates</link>
      <pubDate>Tue, 03 Oct 2017 14:03:58 GMT</pubDate>
      <dc:creator><![CDATA[Adrian Zamfirescu]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/noboot/?p=45</guid>
      <description><![CDATA[If, after you apply Windows Updates and reboot your computer, you get a blue screen with code...]]></description>
      <content:encoded><![CDATA[If, after you apply Windows Updates and reboot your computer, you get a blue screen with code <span class="KeywordHighlight" id="#h13">0xc000021a here are a couple of things that you can try:</span>

<strong>Corrupt Driver Signature Catalog Files</strong>
<ol>
 	<li>When the systems boots up, press F8 repeatedly until you get the Advanced Boot Option Screen</li>
 	<li>Choose the option "Disable Driver Signature Enforcement"</li>
 	<li>If the system boots up then you most likely have corrupt driver signature catalog files. To check which drivers are not signed you can use <a href="https://technet.microsoft.com/en-us/library/bb490785.aspx">sigverif</a></li>
</ol>
<strong>Corrupt Registry Entries</strong>
<ol>
 	<li>When the systems boots up, press F8 repeatedly until you get the Advanced Boot Option Screen (or boot with a Windows DVD)</li>
 	<li>Choose the Repair Your Computer option</li>
 	<li>Open Command Prompt</li>
 	<li>Replace the SYSTEM and SOFTWARE registry hives by running the following commands (assuming OsDrive as C:\ below but it may differ on your system):
<ol>
 	<li>cd C:\Windows\System32\config</li>
 	<li>ren SYSTEM SYSTEM.old</li>
 	<li>ren SOFTWARE SOFTWARE.old</li>
 	<li>copy C:\Windows\System32\config\RegBack\SYSTEM C:\Windows\System32\config\</li>
 	<li>copy C:\Windows\System32\config\RegBack\SOFTWARE C:\Windows\System32\config\</li>
</ol>
</li>
 	<li>Reboot system</li>
</ol>
&nbsp;]]></content:encoded>
    </item>
    <item>
      <title>System boots directly to recovery</title>
      <link>https://docs.microsoft.com/archive/blogs/noboot/system-boots-directly-to-recovery</link>
      <pubDate>Mon, 02 Oct 2017 16:35:29 GMT</pubDate>
      <dc:creator><![CDATA[Adrian Zamfirescu]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/noboot/?p=26</guid>
      <description><![CDATA[In some scenarios when Windows detects a critical boot error it goes directly to the recovery mode....]]></description>
      <content:encoded><![CDATA[In some scenarios when Windows detects a critical boot error it goes directly to the recovery mode. This is so that we can troubleshoot the problem, but sometimes it is good to know what the error is in order to know where to start troubleshooting.

The good news is that we do have a way to tell Windows to stop going to recovery and stop at the error screen instead:
<ol>
 	<li>In the recovery menu open Command Prompt</li>
 	<li>Run the following command: <strong>bcdedit /set {default} recoveryenabled no</strong></li>
 	<li>Reboot</li>
</ol>
On next reboot Windows should not go to recovery anymore and you will be able to see the error code on the screen. If the message is not self explanatory then you can try using err.exe to find out what the error code means. You can get err.exe from <a href="https://www.microsoft.com/en-us/download/details.aspx?id=985&amp;751be11f-ede8-5a0c-058c-2ee190a24fa6=True">here</a>.

There is a downside to this though: in some cases, you will not be able to go back in Recovery Mode as the error will appear before you can press F8 and get the Advanced Boot Options menu. This, in most cases, is not really a problem as we can boot off a Windows DVD and go into recovery that way.]]></content:encoded>
    </item>
    <item>
      <title>System stopping with a BugCheck code 7B (INACCESSIBLE_BOOT_DEVICE)</title>
      <link>https://docs.microsoft.com/archive/blogs/noboot/system-stopping-with-a-bugcheck-code-7b-inaccessible_boot_device</link>
      <pubDate>Mon, 02 Oct 2017 16:05:03 GMT</pubDate>
      <dc:creator><![CDATA[Adrian Zamfirescu]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/noboot/?p=25</guid>
      <description><![CDATA[I'm seeing more and more people that have issues with systems stopping into a 7B...]]></description>
      <content:encoded><![CDATA[I'm seeing more and more people that have issues with systems stopping into a 7B (<span class="st">INACCESSIBLE_BOOT_DEVICE</span>) BugCheck code.

The troubleshooting for this is actually quite simple and there are, under normal circumstances, only a few things to check.

<strong>Please note that the below do not apply for systems that boot of SAN. This is only for systems booting off local disks.</strong>
<ol>
 	<li>First thing that we need to do is boot the system in Recovery Mode (either with a Windows DVD or by choosing Repair your computer from the Advanced Boot Options Menu - also known as the F8 menu)</li>
 	<li>In WINRE open command prompt</li>
 	<li>If the system has crashed at the first reboot after installing Windows Updates then the first thing that we should do is to revert the pending actions:
<ol>
 	<li><strong>dism /Image:C:\ /Cleanup-Image /RevertPendingActions</strong> - replace <strong>C:</strong> with the actual driver letter that WINRE has assigned to your OS drive</li>
 	<li>Browse to<strong><em> OSdriveLetter</em>:\Windows\WinSxS</strong> and check if you have a <strong>pending.xml</strong> file. If it is present the rename it to <strong>pending.xml.old</strong></li>
</ol>
</li>
 	<li>Check to see if the Boot Configuration Database (BCD) has all the correct entries:
<ol>
 	<li>The command for this is <strong>bcdedit /enum all</strong> If you don't know exactly what to look for you can compare it to a similar system, but we will mainly look at the following:
<ol>
 	<li>Under <strong>Windows Boot Manager</strong> with the identifier <strong>{bootmgr}</strong> make sure that <strong>device </strong>and <strong>path</strong> point to the correct device and boot loader file</li>
 	<li>Under <strong>Windows Boot Loader</strong> with the <strong>{default}</strong> make sure that <strong>device, </strong><strong>path, osdevice </strong>and<strong> systemroot </strong>point to the correct device/partition, winload file, OS partition/device and OS folder</li>
</ol>
</li>
 	<li>If any of the information is wrong or missing I would advise that you create a backup of the BCD store... just in case: <strong>bcdedit /export C:\temp\bcdbackup</strong> - this will create a backup in <strong>C:\temp\ </strong>called<strong> bcdbackup</strong>. To restore the backup just use <strong>bcdedit /import C:\temp\bcdbackup </strong>and all BCD settings will be overwritten with the ones in <strong>bcdbackup</strong></li>
 	<li>After the backup is complete you can use the <strong>bcdedit /set <em>{identifier}</em> <em>option value </em></strong><em></em> in order to do the changes that you want. For example if the device under {default} is wrong or missing you can use this command to set it: <strong>bcdedit /set {default} device partition=C:</strong></li>
 	<li>If you would like to recreate the BCD altogether (although personally I do not like doing that) or if you get a message that "<strong>The boot configuration data store could not be opened. The system could not find the file specified</strong>" you can run <strong>bootrec /rebuildbcd</strong></li>
</ol>
</li>
 	<li>If the BCD look OK we need to check that all the drivers that should start at boot time are set as such and are available:
<ol>
 	<li>Open the <strong>Registry Editor</strong> (type <strong>regedit</strong> in the command prompt)</li>
 	<li>Select <strong>HKEY_LOCAL_MACHINE</strong><strong></strong>, go to<strong> File-&gt;Load Hive</strong>, browse to <strong>OSdriveLetter:\Windows\System32\config</strong>, click on the file called <strong>SYSTEM</strong> (no extension),click <strong>Open </strong>and when asked to name the new hive type in<strong> OfflineHive</strong></li>
 	<li>Expand <strong>HKEY_LOCAL_MACHINE\OfflineHive</strong> and click on the Select key. Check what is the data in the value <strong>Default</strong>.</li>
 	<li>If the data in <strong>HKEY_LOCAL_MACHINE\OfflineHive\Select\Default</strong> <strong></strong>is <strong>1</strong> then expand <strong>HKEY_LOCAL_MACHINE\OfflineHive\ControlSet001</strong>, if it is <strong>2</strong> then expand <strong>HKEY_LOCAL_MACHINE\OfflineHive\ControlSet002</strong>, etc</li>
 	<li>Expand <strong>Services</strong></li>
 	<li>Make sure that the following registry keys exist under <strong>Services</strong>:
<ol>
 	<li>ACPI</li>
 	<li>DISK</li>
 	<li>VOLMGR</li>
 	<li>PARTMGR</li>
 	<li>VOLSNAP</li>
 	<li>VOLUME</li>
</ol>
</li>
 	<li>If they exist then check each one and make sure that they have a value named <strong>Start</strong> and it is set to <strong>0</strong>. If it is set to anything else than 0 then change it.</li>
 	<li>If any of them do not exist then you can try to replace the current registry hive with the one from RegBack:
<ol>
 	<li>cd OSdrive:\Windows\System32\config</li>
 	<li>ren SYSTEM SYSTEM.old</li>
 	<li>copy OSdrive:\Windows\System32\config\RegBack\SYSTEM OSdrive:\Windows\System32\config\</li>
</ol>
</li>
 	<li>Check and make sure that that the following .sys files are present in <strong>OSdrive:\Windows\System32\drivers</strong>:
<ol>
 	<li>acpi.sys</li>
 	<li>disk.sys</li>
 	<li>volmgr.sys</li>
 	<li>partmgr.sys</li>
 	<li>volsnap.sys</li>
 	<li>volume.sys</li>
</ol>
</li>
 	<li>If any are missing, copy them over from an identical system with the same patch level</li>
</ol>
</li>
</ol>
If the system is still not booting after doing all of the above then you can try to do a checkdisk on the OSdrive and also run System File Checker. These are also run from WinRE Command Prompt:
<ol>
 	<li>chkdsk /f /r OsDrive:</li>
 	<li>sfc /scannow /offbootdir=OsDrive:\ /offwindir=OsDrive:\Windows</li>
</ol>
&nbsp;

In order to assist with steps 5 through 9 I have created a "small" batch sample script that loads the registry hive offline, checks for pending updates on the system, checks for the presence of the drivers on the disk, checks for the presence of the drivers in registry and it's Start value.

Just copy the below code in a file, rename it to .bat and then run it from WinRE Command Prompt. When it finishes it will create a file called 7blog.txt in the same location where the .bat file is. Look at the log file to see the results.

Please note that the batch file just reports what it finds, it does not fix anything.

<span style="text-decoration: underline"><strong>DISCLAIMER:</strong></span>
<strong>The sample scripts are not supported under any Microsoft standard support program or service.</strong>
<strong>The sample scripts are provided AS IS without warranty of any kind.</strong>
<strong>Microsoft and myself further disclaim all implied warranties including, without limitation, any implied warranties of merchantability or of fitness for a particular purpose.</strong>
<strong>The entire risk arising out of the use or performance of the sample scripts and documentation remains with you.</strong>
<strong>In no event shall Microsoft, its authors, or anyone else involved in the creation, production, or delivery of the scripts be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of the use of or inability to use the sample scripts or documentation, even if Microsoft has been advised of the possibility of such damages. </strong>

&nbsp;
<blockquote>
<pre>@echo off

REM Disclaimer:                                           
REM The sample scripts are not supported under any Microsoft standard support program or service.
REM The sample scripts are provided AS IS without warranty of any kind.
REM Microsoft further disclaims all implied warranties including, without limitation, any implied 
REM warranties of merchantability or of fitness for a particular purpose.
REM The entire risk arising out of the use or performance of the sample scripts and documentation remains with
REM you.
REM In no event shall Microsoft, its authors, or anyone else involved in the creation, production,
REM or delivery of the scripts be liable for any damages whatsoever
REM (including, without limitation, damages for loss of business profits, business interruption, loss of
REM business information, or other pecuniary loss)
REM arising out of the use of or inability to use the sample scripts or documentation, even if Microsoft has
REM been advised of the possibility of such damages.


REM Set global variables
SET bootStart=0x0
SET systemStart=0x1
SET autoStart=0x2
SET manualStart=0x3
SET disabledStart=0x4

REM Ask user for OS drive letter in to format C:
SET /p osdrive="What is the drive letter of the Windows installation: "
ECHO Using Windows path %osdrive%\Windows &gt;&gt; 7bLog.txt

REM Attempt registry mount to HKLM\liveOSSystemHive - exit if error
ECHO Atempting registry mount... &gt;&gt; 7bLog.txt
reg LOAD HKLM\liveOSSystemHive %osdrive%\Windows\system32\config\SYSTEM || ECHO Could not load hive %osdrive%\Windows\system32\config\SYSTEM to HKLM\liveOSSystemHive &gt;&gt; 7bLog.txt
IF ERRORLEVEL 1 EXIT /b

REM Get the control set used by the machine at boot
FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\Select /v Default`) DO (
SET select=%%F
)
FOR %%A IN (%select%) DO SET cs=%%A
SET controlSet=ControlSet%cs:x=0%
ECHO System is booting off %controlSet%... &gt;&gt; 7bLog.txt

REM Check for pending updates

IF EXIST %osdrive%\Windows\WinSxS\pending.xml (
 ECHO WARNING: The system has pending updates &gt;&gt; 7bLog.txt
) ELSE (
 ECHO No pending updates found on the server &gt;&gt; 7bLog.txt
 SET pendingUpdatesResult=0
)

REM Check for drivers

REM Check for ACPI
FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\ACPI`) DO (
SET acpiService=%%F
)
IF "%acpiService%" == "" (
 ECHO ERROR: Could not find the ACPI service in %controlSet%\Services\ACPI &gt;&gt; 7bLog.txt
) ELSE (
 FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\ACPI /v Start`) DO (
 SET acpiServiceStart=%%F
 )
)
IF "%acpiServiceStart%" == "" (
 ECHO ERROR: Could not find the ACPI Start value in %controlSet%\Services\ACPI\Start &gt;&gt; 7bLog.txt
) ELSE (
 FOR %%A IN (%acpiServiceStart%) DO SET acpiStart=%%A
)
IF "%acpiStart%" == "%bootStart%"  ECHO ACPI service start value is set to %acpiStart% ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%acpiStart%" == "%systemStart%" ECHO ERROR: ACPI service start value is set to %acpiStart% ^(SYSTEM^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%acpiStart%" == "%autoStart%" ECHO ERROR: ACPI service start value is set to %acpiStart% ^(AUTO^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%acpiStart%" == "%manualStart%" ECHO ERROR: ACPI service start value is set to %acpiStart% ^(MANUAL^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%acpiStart%" == "%disabledStart%" ECHO ERROR: ACPI service start value is set to %acpiStart% ^(DISABLED^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt

IF EXIST %osdrive%\Windows\system32\drivers\acpi.sys (
 ECHO ACPI driver ^(acpi.sys^) was found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
) ELSE (
 ECHO ERROR: ACPI driver ^(acpi.sys^) was NOT found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
)

REM Check for DISK
FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\disk`) DO (
SET diskService=%%F
)
IF "%diskService%" == "" (
 ECHO Could not find the DISK service in %controlSet%\Services\disk &gt;&gt; 7bLog.txt
) ELSE (
 FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\disk /v Start`) DO (
 SET diskServiceStart=%%F
 )
)
IF "%diskServiceStart%" == "" (
 ECHO Could not find the disk Start value in %controlSet%\Services\disk\Start &gt;&gt; 7bLog.txt
) ELSE (
 FOR %%A IN (%diskServiceStart%) DO SET diskStart=%%A
)
IF "%diskStart%" == "%bootStart%"  ECHO Disk service start value is set to %diskStart% ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%diskStart%" == "%systemStart%" ECHO ERROR: Disk service start value is set to %diskStart% ^(SYSTEM^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%diskStart%" == "%autoStart%" ECHO ERROR: Disk service start value is set to %diskStart% ^(AUTO^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%diskStart%" == "%manualStart%" ECHO ERROR: Disk service start value is set to %diskStart% ^(MANUAL^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%diskStart%" == "%disabledStart%" ECHO ERROR: Disk service start value is set to %diskStart% ^(DISABLED^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt

IF EXIST %osdrive%\Windows\system32\drivers\disk.sys (
 ECHO DISK driver ^(disk.sys^) was found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
) ELSE (
 ECHO ERROR: DISK driver ^(disk.sys^) was NOT found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
)

REM Check for PARTMGR
FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\partmgr`) DO (
SET partService=%%F
)
IF "%partService%" == "" (
 ECHO ERROR: Could not find the PARTMGR service in %controlSet%\Services\partmgr &gt;&gt; 7bLog.txt
) ELSE (
 FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\partmgr /v Start`) DO (
 SET partServiceStart=%%F
 )
)
IF "%partServiceStart%" == "" (
 ECHO ERROR: Could not find the PARTMGR Start value in %controlSet%\Services\partmgr\Start &gt;&gt; 7bLog.txt
) ELSE (
 FOR %%A IN (%partServiceStart%) DO SET partStart=%%A
)
IF "%partStart%" == "%bootStart%"  ECHO PARTMGR service start value is set to %partStart% ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%partStart%" == "%systemStart%" ECHO ERROR: PARTMGR service start value is set to %partStart% ^(SYSTEM^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%partStart%" == "%autoStart%" ECHO ERROR: PARTMGR service start value is set to %partStart% ^(AUTO^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%partStart%" == "%manualStart%" ECHO ERROR: PARTMGR service start value is set to %partStart% ^(MANUAL^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%partStart%" == "%disabledStart%" ECHO ERROR: PARTMGR service start value is set to %partStart% ^(DISABLED^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt

IF EXIST %osdrive%\Windows\system32\drivers\partmgr.sys (
 ECHO PARTMGR driver ^(partmgr.sys^) was found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
) ELSE (
 ECHO ERROR: PARTMGR driver ^(partmgr.sys^) was NOT found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
)

REM Check for VOLMGR
FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\volmgr`) DO (
SET volService=%%F
)
IF "%volService%" == "" (
 ECHO ERROR: Could not find the VOLMGR service in %controlSet%\Services\volmgr &gt;&gt; 7bLog.txt
) ELSE (
 FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\volmgr /v Start`) DO (
 SET volServiceStart=%%F
 )
)
IF "%volServiceStart%" == "" (
 ECHO ERROR: Could not find the VOLMGR Start value in %controlSet%\Services\volmgr\Start &gt;&gt; 7bLog.txt
) ELSE (
 FOR %%A IN (%volServiceStart%) DO SET volStart=%%A
)
IF "%volStart%" == "%bootStart%"  ECHO VOLMGR service start value is set to %volStart% ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volStart%" == "%systemStart%" ECHO ERROR: VOLMGR service start value is set to %volStart% ^(SYSTEM^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volStart%" == "%autoStart%" ECHO ERROR: VOLMGR service start value is set to %volStart% ^(AUTO^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volStart%" == "%manualStart%" ECHO ERROR: VOLMGR service start value is set to %volStart% ^(MANUAL^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volStart%" == "%disabledStart%" ECHO ERROR: VOLMGR service start value is set to %volStart% ^(DISABLED^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt

IF EXIST %osdrive%\Windows\system32\drivers\volmgr.sys (
 ECHO VOLMGR driver ^(volmgr.sys^) was found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
) ELSE (
 ECHO ERROR: VOLMGR driver ^(volmgr.sys^) was NOT found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
)

REM Check for volsnap
FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\volsnap`) DO (
SET volsnapService=%%F
)
IF "%volsnapService%" == "" (
 ECHO ERROR: Could not find the volsnap service in %controlSet%\Services\volsnap &gt;&gt; 7bLog.txt
) ELSE (
 FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\volsnap /v Start`) DO (
 SET volsnapServiceStart=%%F
 )
)
IF "%volsnapServiceStart%" == "" (
 ECHO ERROR: Could not find the volsnap Start value in %controlSet%\Services\volsnap\Start &gt;&gt; 7bLog.txt
) ELSE (
 FOR %%A IN (%volsnapServiceStart%) DO SET volsnapStart=%%A
)
IF "%volsnapStart%" == "%bootStart%"  ECHO volsnap service start value is set to %volsnapStart% ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volsnapStart%" == "%systemStart%" ECHO ERROR: volsnap service start value is set to %volsnapStart% ^(SYSTEM^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volsnapStart%" == "%autoStart%" ECHO ERROR: volsnap service start value is set to %volsnapStart% ^(AUTO^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volsnapStart%" == "%manualStart%" ECHO ERROR: volsnap service start value is set to %volsnapStart% ^(MANUAL^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volsnapStart%" == "%disabledStart%" ECHO ERROR: volsnap service start value is set to %volsnapStart% ^(DISABLED^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt

IF EXIST %osdrive%\Windows\system32\drivers\volsnap.sys (
 ECHO volsnap driver ^(volsnap.sys^) was found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
) ELSE (
 ECHO ERROR: volsnap driver ^(volsnap.sys^) was NOT found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
)

REM Check for volume
FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\volume`) DO (
SET volumeService=%%F
)
IF "%volumeService%" == "" (
 ECHO ERROR: Could not find the volume service in %controlSet%\Services\volume &gt;&gt; 7bLog.txt
) ELSE (
 FOR /F "tokens=* USEBACKQ" %%F IN (`REG QUERY HKLM\liveOSSystemHive\%controlSet%\Services\volume /v Start`) DO (
 SET volumeServiceStart=%%F
 )
)
IF "%volumeServiceStart%" == "" (
 ECHO ERROR: Could not find the volume Start value in %controlSet%\Services\volume\Start &gt;&gt; 7bLog.txt
) ELSE (
 FOR %%A IN (%volumeServiceStart%) DO SET volumeStart=%%A
)
IF "%volumeStart%" == "%bootStart%"  ECHO volume service start value is set to %volumeStart% ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volumeStart%" == "%systemStart%" ECHO ERROR: volume service start value is set to %volumeStart% ^(SYSTEM^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volumeStart%" == "%autoStart%" ECHO ERROR: volume service start value is set to %volumeStart% ^(AUTO^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volumeStart%" == "%manualStart%" ECHO ERROR: volume service start value is set to %volumeStart% ^(MANUAL^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt
IF "%volumeStart%" == "%disabledStart%" ECHO ERROR: volume service start value is set to %volumeStart% ^(DISABLED^) - Should be 0x0 ^(Kernel^) &gt;&gt; 7bLog.txt

IF EXIST %osdrive%\Windows\system32\drivers\volume.sys (
 ECHO volume driver ^(volume.sys^) was found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
) ELSE (
 ECHO ERROR: volume driver ^(volume.sys^) was NOT found in %osdrive%\Windows\system32\drivers\ &gt;&gt; 7bLog.txt
)

REM Unload registry Hive
reg UNLOAD HKLM\liveOSSystemHive 
IF ERRORLEVEL 1 (
 ECHO ERROR: Could not unload the registry hive HKLM\liveOSSystemHive &gt;&gt; 7bLog.txt
) ELSE (
  ECHO Registry hive unloaded succesfully &gt;&gt; 7bLog.txt
)</pre>
</blockquote>
&nbsp;]]></content:encoded>
    </item>
  </channel>
</rss>