PoÄŤĂ­taÄŤová škola GOPAS  

   


   print

GOC7 - Windows Internals & Advanced Troubleshooting

This course is intended for IT consultants, developers and administrators who are interested in low-level functionality of the Windows operating system. It provides students with detailed description of the internal architecture, reveals functionality of subsystems and shows the way the system processes run. Overall explanation of memory management, threads, processes, I/O subsystem and storage concepts is provided as well. Students will also gain experience using diagnostic tools and learn how to solve problems of the operating system startup, drivers malfunction and application crashes.

Who the course is for

The course is intended for experienced administrators of Windows NT family of operating system such as Windows 2000, XP, Vista, 2003 and 2008

What we teach you

We will teach you how to understand the Windows Internals the way you will never ever want to use any other operating system.

Required skills

Basic work with Windows XP/2000/Server 2003 platform, network technologies summary and their configuration to Windows.

Teaching methods

Instructor–led classroom training with practical demonstrations and excercises on computers in a virtual environment

Teaching materials

Printed PowerPoint presentations and the original Windows Internals book.

Course syllabus

Topic overview

  • History and evolution of Windows NT
  • Windows 2000 overview
  • Changes in Windows XP/2003

    Related tools

  • Support Tools
  • Resource Kits
  • SDK’s
  • Kernel Debuggers
  • Sysinternal’s free tools

    Operating system architecture

  • Basic concept
  • Architecture overview
  • Main subsystems (Win32,Posix,OS/2 …)
  • Kernel–mode components
  • Operating system threads/processes
  • Interrupt requests management & DPC

    Processes, threads and time synchronization

  • Process, thread and job
  • Starting, finishing and collapse of process
  • Priorities
  • Time synchronization of threads
  • Priorities adjustment
  • Environment of multiprocessing

    Memory Management

  • Virtual memory – arrangement (2G,3G,64–bit, PAE)
  • Paging file
  • Virtual Address Translation
  • Page fault handling (Hard, Soft)
  • Working Set
  • Physical memory

    Management

  • Win32 services
  • Registry
  • WMI

    Security

  • Security Ratings
  • Security Components
  • Object Protection
  • Auditing, Impersonation and Privileges

    I/O System

  • I/O System Components
  • Drivers installation
  • Kinds of drivers
  • Driver Operation
  • Plug–and–Play Manager
  • Power Manager

    Storage

  • SCSIPort drivers
  • Storport drivers
  • iSCSI drivers
  • Partitioning
  • File systems
  • NTFS I/O
  • NTFS features
  • NTFS on–disk structures
  • Backup & Restore Technologies
  • Volume Shadow Copy Service

    Cache Manager

  • Cache Virtual Structure
  • Cache Size
  • Cache Operation

    Startup, shutdown and system crashes

  • Startup process
  • Prefetch mechanisms
  • Logon process
  • Shutdown
  • System Restore
  • Last Known Good
  • Safe Mode
  • Recovery Console
  • ERD Commander
  • Crashes
  • Crash dump files analysis
  • On–line Crash Analysis
  • Driver Verifier

    Solving problems

  • Usage of system auditing
  • Performance monitor & Task Manager
  • Process Explorer
  • Filemon and Regmon tools
  • Autoruns
  • Tdimon,Tcpview
  • Load order
  • PS Tools suite

    Recommended prior courses

    MOC 6419 - Windows Server 2008 – Configuring, Managing and Maintaining Windows Server 2008 Servers

    Recommended subsequent courses

    GOC11 - Windows Storage Internals & Troubleshooting
    GOC12 - Microsoft Windows – Applications Troubleshooting & Fighting Malware

    Catalog price of course and handbook

    Locality Course price ex VAT Price of handbook ex VAT Number IT points
     Praha   19500 Kč  1700 Kč   50 items
     Brno   19000 Kč  1700 Kč   50 items

    Course dates

    Course date Course length Locality Price ex VAT Handbook ex VAT  Speaker language  
     20.09.2010   5   GOPAS Praha   19500 Kč 1700 Kč Course Guaranteed course date
     01.11.2010   5   GOPAS Praha   19500 Kč 1700 Kč Course Guaranteed course date
     03.01.2011   5   GOPAS Praha   19500 Kč 1700 Kč Course
     07.03.2011   5   GOPAS Praha   19500 Kč 1700 Kč Course Guaranteed course date
     22.11.2010   5   GOPAS Brno   19000 Kč 1700 Kč Course
     21.02.2011   5   GOPAS Brno   19000 Kč 1700 Kč Course
     18.10.2010   5   GOPAS Bratislava   650 EUR 70 EUR Course
     13.12.2010   5   GOPAS Bratislava   650 EUR 70 EUR Course
     21.02.2011   5   GOPAS Bratislava   650 EUR 70 EUR Course

    If none of the offered dates suits you, please contact our customer service department on tel. +420 234 064 900-3 (Prague), +420 542 219 935-6 (Brno).