System Recovery
System recovery means bringing a computer or other system back to a working condition after something goes wrong.
Example: Windows Not Starting
Windows suddenly stops starting properly. The user uses System Restore or Startup Repair to make the computer work again.
Advanced Maintenance
Advanced maintenance means doing detailed and technical work to fix difficult problems in a computer or system.
It is needed when normal or basic maintenance cannot solve the problem.
Example: If a computer keeps crashing, a technician may check the hardware, repair system files, update drivers, or replace a damaged part.
Post-Troubleshooting
Post-troubleshooting means the steps taken after fixing a problem to make sure the system is working properly and the same problem does not happen again.
Post-Troubleshooting β Examples
- Internet problem: Check the internet after fixing the connection.
- Computer crash: Restart the computer to make sure it works properly.
- Printer problem: Print a test page after repairing the printer.
- Software error: Open the software to confirm the error is gone.
- Virus problem: Scan the computer again after removing the virus.
Importance of Continuous Maintenance
Continuous maintenance means regularly checking, updating, and taking care of a system to keep it working properly.
Importance
- Prevents problems: Finds issues before they become serious.
- Improves performance: Keeps the system running smoothly and quickly.
- Increases security: Helps protect the system from viruses and attacks.
- Saves money: Prevents expensive repairs and replacements.
- Increases system life: Helps hardware and software last longer.
- Reduces downtime: Keeps the system available and working.
- Keeps data safe: Regular backups help prevent data loss.
Poor Maintenance
Poor maintenance means not properly checking, updating, or taking care of a system.
Its Impacts
- Slow Performance: The system becomes slow and takes more time to perform tasks.
- System Failure: The system may stop working or crash unexpectedly.
- Security Risks: Viruses, malware, and hackers can easily attack an unmaintained system.
- Data Loss: Important files and information may be lost or damaged.
- Hardware Damage: Poor maintenance can cause hardware parts to overheat, wear out, or become damaged.
Introduction to System Health Monitoring
System health monitoring means regularly checking a computer to make sure that all its hardware and software are working properly.
It helps us find problems early, keep the computer running smoothly, and prevent serious damage or data loss.
- Check Memory and Processing Usage: See how much RAM and CPU power the computer is using.
- Monitor Background Applications and Services: Check which programs and services are running in the background.
- View Warnings and Error Messages: Find warnings and errors that may indicate a problem with the system.
- Identify Slow Programs: Find programs that are using too many system resources and may be making the computer slow.
Importance of System Health Monitoring
System health monitoring is like a regular check-up of a computer. It helps us know whether the computer is working properly and allows us to solve problems before they become bigger.
Built-in Diagnostic Tools
Operating systems like Windows provide several built-in tools that help users check the computer's performance and find problems.
1. Task Manager
Shortcut Key: Ctrl + Shift + Esc
Other Way: Type Task Manager in the Windows Search box or search for it from the Start button.
Task Manager shows the programs and processes currently running on the computer. It also shows how much CPU, RAM, Disk, and Network each program is using.
It can be used to:
- Check which programs are running.
- Find programs using too many resources.
- Close a program that has stopped responding.
- Check overall system performance.
Example: If a program is using too much RAM and making the computer slow, Task Manager can help identify it.
2. Resource Monitor
Shortcut: Press Windows + R, type resmon, and press Enter.
Other Way: Type Resource Monitor in the Windows Search box or search for it from the Start button.
Resource Monitor provides more detailed information about how computer resources are being used. It gives information about CPU, memory, disk, and network activity.
It helps users:
- Find which programs are using system resources.
- Check detailed CPU and memory usage.
- See which programs are accessing the disk.
- Monitor network activity.
3. Event Viewer
Shortcut: Press Windows + R, type eventvwr, and press Enter.
Other Way: Type Event Viewer in the Windows Search box or search for it from the Start button.
Event Viewer records important events that happen in Windows, such as errors, warnings, and system activities.
It helps users:
- Find the cause of system problems.
- Check error and warning messages.
- View information about system and application problems.
- Troubleshoot repeated errors.
Example: If a program keeps crashing, Event Viewer may contain an error record that helps identify what went wrong.
System Recovery Options
System recovery options are tools provided by the operating system to repair, restore, or recover a computer when it is not working properly. They are especially useful when Windows has startup problems, crashes, or becomes unstable.
Common System Recovery Options
- Safe Mode β Starts Windows with only basic drivers and essential services to help identify and fix problems.
- System Restore β Returns system settings and files to an earlier working state using a restore point.
- Bootable Recovery Media β A USB or other device that can start the computer and provide tools to repair or recover Windows.
Safe Mode
Safe Mode is a special way of starting Windows with only the basic drivers, services, and essential programs needed to run the computer.
It is mainly used for troubleshooting problems. When Windows works normally but starts causing problems such as crashes, freezing, or errors, Safe Mode can help us find out whether a recently installed program, driver, or setting is causing the problem.
When to Use Safe Mode
Safe Mode can be useful when:
- Windows is freezing or crashing frequently.
- A newly installed program or driver is causing problems.
- The computer becomes very slow or unstable.
- Windows cannot work properly in normal mode.
- We need to remove a problematic program or driver.
- We want to check whether a problem is caused by third-party software.
How to Open Safe Mode
The method can be different depending on the version of Windows.
On Most Modern Windows Systems
In Windows 10 and Windows 11:
- Open Settings.
- Go to System β Recovery.
- Under Advanced startup, select Restart now.
- After the computer restarts, select Troubleshoot.
- Select Advanced options β Startup Settings.
- Click Restart.
- When the options appear, press 4 or F4 to start Safe Mode.
You can also press 5 or F5 to start Safe Mode with Networking.
On Some Older Systems
On some older versions of Windows, pressing the F8 key repeatedly while the computer is starting can open the Advanced Boot Options menu.
From this menu, you can select Safe Mode.
Safe Mode with Networking
Safe Mode with Networking is similar to normal Safe Mode, but it also loads the basic network drivers and services needed for an internet or network connection.
It can be useful when you need to:
- Access the internet to find troubleshooting information.
- Download a required driver or tool.
- Connect to another computer on the network.
- Troubleshoot a problem related to networking.
System Restore
System Restore is a Windows feature that allows us to return the computer's system settings to an earlier working state. It is useful when a problem occurs after installing a program, driver, or update.
System Restore mainly changes system files, drivers, settings, and installed programs. It normally does not affect personal files such as documents, pictures, and videos.
What Are System Restore Points?
A restore point is a saved record of important system settings and files at a particular time.
Windows may create restore points automatically before certain major changes, such as installing software or drivers. Users can also create a restore point manually.
For example, if the computer is working properly today and we create a restore point, we can use that point later to return the system to today's settings if a problem occurs.
Steps to Create a Restore Point
- Open the Start menu.
- Search for Create a restore point and open it.
- In the System Properties window, select the System Protection tab.
- Select the drive where Windows is installed, usually C:.
- Click Create.
- Enter a name for the restore point, such as Before Installing New Software.
- Click Create.
- Wait until Windows finishes creating the restore point.
- Click Close when it is completed.
Steps to Use a Restore Point
- Open the Start menu.
- Search for Create a restore point and open it.
- Go to the System Protection tab.
- Click System Restore.
- Click Next.
- Select the restore point you want to use.
- Check the affected programs if the option is available.
- Click Next and then Finish.
- Confirm the action when Windows asks.
- Windows will restart the computer and restore the system to the selected point.
Bootable Recovery Media
Bootable recovery media is a USB drive, DVD, or another storage device that contains the necessary files to start a computer and repair or recover the operating system.
It is especially useful when Windows cannot start normally or when the system has serious problems.
Understanding Bootable Media and Its Uses
Bootable media is a storage device that a computer can use to start the operating system or recovery environment.
A bootable USB can be used to:
- Install or reinstall Windows.
- Repair Windows startup problems.
- Access recovery and troubleshooting tools.
- Recover or back up important data when Windows cannot start.
- Troubleshoot serious system problems.
- Perform a clean installation of the operating system.
When Do We Use Bootable Media?
Bootable media is useful when:
- Windows does not start.
- The computer repeatedly shows startup errors.
- Important system files are damaged or missing.
- The operating system needs to be reinstalled.
- Normal recovery methods are not working.
- We need to access files or recovery tools without starting Windows normally.
How to Create and Use a Bootable USB
To create a bootable USB, we need a USB flash drive and the installation or recovery files for the operating system.
Steps to Create a Bootable USB
- Get a suitable USB flash drive. A USB of at least 8 GB is commonly used for Windows installation media.
-
Download the ISO image of the operating system you want to install or use. It can be a Windows ISO, Linux ISO, macOS ISO, or an ISO of another operating system.
ISO stands for International Organization for Standardization. An ISO file is a complete image of a CD, DVD, or operating system installation media stored as a single file.
- Use a suitable tool to write the ISO image to the USB drive.
- Select the correct USB drive in the tool.
- Select the appropriate settings, such as the partition style (MBR or GPT), if required.
- Start the process and wait for it to complete.
- Once the process is finished, the USB drive will be ready to use as bootable media.
Steps to Use a Bootable USB
- Insert the bootable USB into the computer.
- Restart the computer.
- Open the Boot Menu by pressing the appropriate key during startup. The key varies by computer manufacturer and may be F12, F9, Esc, or another key.
- Select the USB drive from the boot options.
- The computer will start from the USB instead of the internal drive.
- Choose the required option, such as installing Windows, repairing the system, or accessing recovery tools.
How to Check the Partition Style: MBR or GPT
MBR (Master Boot Record) and GPT (GUID Partition Table) are two different partition styles used to organize data on a storage drive.
Knowing the partition style can be important when creating bootable media because the boot mode and partition style should be compatible.
Method 1: Using Disk Management
- Right-click the Start button.
- Select Disk Management.
- Find the disk you want to check, such as Disk 0.
- Right-click the Disk section on the left side, not one of its partitions.
- Select Properties.
- Open the Volumes tab.
- Look at Partition style.
- It will show either:
- Master Boot Record (MBR)
- GUID Partition Table (GPT)
Method 2: Using Command Prompt
- Open Command Prompt as administrator.
- Type
diskpartand press Enter. - Type
list diskand press Enter. - Look at the GPT column:
- A star (*) under GPT means the disk uses GPT.
- No star means the disk uses MBR.
BIOS/UEFI and Boot Process Awareness
When a computer is turned on, it goes through a startup process before the operating system, such as Windows, begins to load. BIOS and UEFI are firmware interfaces that help the computer perform this startup process.
Firmware
Firmware is a type of software stored on a computer's hardware. It provides basic instructions that help the hardware work and allows the computer to start before the operating system loads.
BIOS
BIOS stands for Basic Input/Output System. It is an older type of firmware used to start the computer.
When the computer is turned on, BIOS:
- Checks the basic hardware components.
- Performs the Power-On Self-Test (POST).
- Identifies available boot devices.
- Finds a bootable device and starts the operating system.
BIOS commonly works with the MBR (Master Boot Record) partition style.
UEFI
UEFI stands for Unified Extensible Firmware Interface. It is the modern replacement for traditional BIOS and is found on most modern computers.
UEFI:
- Checks and initializes hardware during startup.
- Performs startup checks.
- Identifies available boot devices.
- Finds and loads the operating system's boot manager.
- Supports modern features such as GPT (GUID Partition Table) and Secure Boot.
- Generally provides a faster and more flexible boot process than traditional BIOS.
Role of BIOS/UEFI in Computer Startup
When a computer is turned on, BIOS or UEFI controls the initial startup process. It prepares the hardware and finds the device from which the operating system should start.
1. Power On
The computer is switched on.
β
2. BIOS/UEFI Starts
The firmware starts and initializes the basic hardware components.
β
3. Hardware Check (POST)
BIOS/UEFI checks important hardware such as the RAM, keyboard, processor, and storage devices to make sure they are working properly.
β
4. Boot Device is Selected
BIOS/UEFI checks the available devices, such as the SSD, hard drive, or bootable USB, and selects the appropriate boot device.
β
5. Bootloader Starts
BIOS/UEFI loads the bootloader, which is a small program responsible for starting the operating system.
β
6. Operating System Loads
The bootloader starts loading the operating system, such as Windows or Linux.
POST (Power-On Self-Test)
POST stands for Power-On Self-Test. It is a test performed by the computer's BIOS or UEFI when the computer is turned on.
The purpose of POST is to check whether the basic hardware components are working properly before the operating system starts.
What Does POST Check?
POST may check components such as:
- RAM (Memory)
- Processor (CPU)
- Keyboard
- Storage devices
- Display/Graphics hardware
- Other essential hardware components
Example of POST
Suppose you turn on your computer and the RAM is not properly installed. During POST, the computer may detect the problem and:
- Display an error message on the screen.
- Produce beep sounds.
- Stop the startup process until the problem is fixed.
Another example is when the computer starts normally and displays the manufacturer's logo. This usually means that the initial hardware checks have completed successfully and the computer can continue with the boot process.
Shortcut Keys to Access BIOS/UEFI Settings
During startup, a specific key can be pressed to open the BIOS/UEFI setup. The key depends on the computer manufacturer.
| Key | Common Use |
|---|---|
| F2 | BIOS/UEFI Setup |
| Delete (Del) | BIOS/UEFI Setup |
| F10 | BIOS/UEFI Setup on some HP computers |
| Esc | Startup Menu on some computers |
| F12 | Boot Menu on many computers |
| F9 | Boot Menu on some HP computers |
Boot Order
Boot order is the sequence in which BIOS/UEFI checks different devices to find a bootable operating system.
For example, a computer may have the following boot order:
1. USB Drive β 2. SSD β 3. Network
This means the computer first checks the USB drive for a bootable system. If no bootable USB is found, it checks the SSD. If necessary, it then checks the network.
Why Change the Boot Order?
We may need to change the boot order when we want to:
- Start the computer from a bootable USB.
- Install or reinstall an operating system.
- Use recovery or repair media.
- Troubleshoot startup problems.
Example: If Windows is not starting and you have a Windows recovery USB, you can set the USB as the first boot device so the computer starts from the recovery USB.
Steps to Change the Boot Order
- Turn on or restart the computer.
- As soon as the computer starts, repeatedly press the BIOS/UEFI setup key. Common keys include F2, Delete, F10, or Esc, depending on the computer manufacturer.
- Once the BIOS/UEFI screen opens, find the Boot, Boot Order, or Boot Priority section.
-
You will see a list of available boot devices, such as:
- SSD/HDD
- USB drive
- CD/DVD
- Network
- Select the device you want to boot from.
- Move it to the top of the boot order using the keys shown on the screen, such as F5/F6, +/β, or arrow keys.
- Save the changes using Save & Exit. On many systems, F10 is used to save and exit.
- The computer will restart and check the selected device first.
Boot Repair
Boot repair means fixing problems that prevent the operating system from starting normally.
A computer may fail to boot because of:
- Damaged or missing boot files.
- Problems with the boot configuration.
- A failed system update.
- A damaged operating system.
- Problems with the storage drive.
Data Recovery Techniques
Data recovery means recovering files that have been accidentally deleted, lost, or become inaccessible because of problems with the computer or storage device.
There are two common approaches to data recovery:
1. Built-in Data Recovery Tools
Windows provides several built-in features that can help recover lost or deleted files.
Recycle Bin
The Recycle Bin temporarily stores files that are deleted from the computer.
If a file was deleted accidentally:
- Open Recycle Bin.
- Find the deleted file.
- Right-click the file.
- Select Restore.
- The file will be returned to its original location.
File History
File History is a Windows backup feature that regularly saves copies of files from selected folders.
If a file is lost or an older version is needed, File History can be used to restore it from a previous backup.
How to Enable File History
- Connect an external USB drive to the computer.
- Open Control Panel.
- Select System and Security.
- Select File History.
- Click Turn on.
- Windows will start saving copies of your files to the selected drive.
Previous Versions
Previous Versions is a Windows feature that allows users to view and restore an older version of a file or folder. It works when Windows has a suitable restore point, File History backup, or another supported backup available.
How to Check Previous Versions
- Find the file or folder you want to restore.
- Right-click on it.
- Select Properties.
- Open the Previous Versions tab.
- If previous versions are available, they will be displayed in the list.
- Select the version you want to check.
- Click Open to view it before restoring.
- If it is the required version, click Restore to restore it.
2. Third-Party Data Recovery Tools
If built-in Windows tools cannot recover a file, third-party data recovery software may sometimes help.
Some commonly used data recovery tools include:
- Tenorshare 4DDiG
- Recuva
- EaseUS Data Recovery Wizard
- Disk Drill
- Stellar Data Recovery
These programs scan storage devices for data that is no longer visible through the normal file system.
How to Use Tenorshare 4DDiG
Tenorshare 4DDiG is a third-party data recovery program that can scan storage devices and attempt to recover deleted or lost files.
Basic steps are:
- Install Tenorshare 4DDiG on the computer.
- Open the program.
- Select the drive or location where the file was lost.
- Start the Scan.
- Allow the program to search for recoverable files.
- Use the available filters or search options to find the required file.
- Preview the file when possible to check whether it is recoverable.
- Select the required files and click Recover.
- Save the recovered files to a different drive or storage device.
Limitations of Recovery and Best Practices
While data recovery tools can be helpful, they have some limitations.
Limitations of Data Recovery
- Deleted for a Long Time β If a file was deleted a long time ago, it may no longer be possible to recover it.
- Damaged or Formatted Drive β Recovery may not be possible if the hard drive is damaged or has been formatted.
- No Backup β Files may be permanently lost if the Recycle Bin has been emptied and no backup was created.
Best Practices
- Do Not Install Recovery Software on the Same Drive β Never install recovery software on the same drive where the lost file was stored. This may overwrite the deleted data and reduce the chance of successful recovery.
- Check the Recycle Bin First β Always check the Recycle Bin before using advanced recovery tools. It is the easiest and safest way to restore deleted files.
Best Practices for Preventive Maintenance
Preventive maintenance means regularly taking care of a computer to prevent problems before they happen. It helps keep the system secure, reliable, and running smoothly.
1. Disk Cleanup
Disk Cleanup is a built-in Windows tool that removes unnecessary files from the computer. It can free up storage space and help keep the system organized.
Steps to Perform Disk Cleanup
- Open the Start menu.
- Search for Disk Cleanup and open it.
- Select the drive you want to clean, usually C:.
- Windows will calculate how much space can be freed.
- Select the types of unnecessary files you want to remove.
- Click OK.
- Click Delete Files to confirm.
2. Patch Management and System Updates
Patch management means regularly installing updates and security fixes provided by the operating system or software developers.
Updates can:
- Fix security weaknesses.
- Repair software problems.
- Improve system performance.
- Add new features.
- Protect the computer from newly discovered threats.
Users should regularly check for and install Windows Updates and keep important software up to date.
In simple words: Keeping the system updated helps fix problems and protect the computer from security threats.
3. Staying Protected with Windows Defender
Windows Defender, now known as Microsoft Defender Antivirus, is a built-in security feature in Windows that helps protect the computer from viruses, malware, spyware, and other threats.
For better protection:
- Keep Microsoft Defender enabled.
- Keep its security intelligence updates up to date.
- Run regular virus scans.
- Pay attention to security warnings and take appropriate action.
In simple words: Microsoft Defender helps detect and protect the computer from harmful software.
4. Keeping a Maintenance Calendar
A maintenance calendar helps users remember when important computer maintenance tasks need to be performed.
For example:
| Task | Suggested Schedule |
|---|---|
| Check for Windows Updates | Regularly |
| Run a security scan | Regularly |
| Check storage space | Monthly |
| Perform Disk Cleanup | Monthly or when needed |
| Check backups | Regularly |
| Review installed programs | Every few months |
Keeping a maintenance calendar ensures that important tasks are not forgotten.
System Documentation and Logs
System documentation and logs are important for understanding, maintaining, monitoring, and troubleshooting a computer system.
They help users and system administrators keep a clear and organized record of system settings, changes, errors, warnings, and other important activities.
This information can be useful when checking system performance, finding problems, and maintaining the computer over time.
Exercise Short Questions β Answers
1. Write one key function of the Resource Monitor.
Resource Monitor provides detailed information about the use of CPU, memory, disk, and network resources.
2. Define the use of Safe Mode in system recovery.
Safe Mode starts Windows with only basic drivers and essential services. It is used to find and fix problems caused by programs, drivers, or settings.
3. List the steps to create a bootable USB using Rufus.
- Connect a USB drive to the computer.
- Open Rufus.
- Select the USB drive.
- Select the required ISO image.
- Choose the appropriate settings, such as MBR or GPT.
- Click Start and wait for the process to complete.
4. What happens during the Power-On Self-Test (POST)?
POST checks the computer's basic hardware components, such as RAM, processor, keyboard, and storage devices, to make sure they are working properly before the operating system starts.
5. Why is the boot order setting important when using recovery tools from a USB drive?
Boot order is important because it tells the computer which device to check first for a bootable system. Setting the USB first allows the computer to start from the recovery USB instead of the internal drive.
6. List the two benefits of running regular disk cleanup.
- It removes unnecessary files.
- It frees up storage space.
7. How does Windows Defender help in maintaining system health?
Windows Defender helps maintain system health by detecting, blocking, and removing harmful software such as viruses and malware. It also provides real-time protection to help keep the computer safe from security threats.
Multiple Choice Questions (MCQs) on System Recovery and Advanced Maintenance
Test Yourself: Interactive MCQs (System Maintenance, Recovery & Data Recovery)
Multiple Choice Questions (MCQs)
FAQs
System Maintenance, Recovery & Data Recovery FAQs
System recovery means bringing a computer or other system back to a working condition after something goes wrong.
Advanced maintenance means performing detailed and technical work to fix difficult computer or system problems when basic maintenance cannot solve them.
Post-troubleshooting means the steps taken after fixing a problem to make sure the system is working properly and the same problem does not happen again.
Continuous maintenance helps prevent problems, improve performance, increase security, save money, extend system life, reduce downtime, and keep data safe.
Poor maintenance can cause slow performance, system failure, security risks, data loss, and hardware damage.
System health monitoring means regularly checking a computer's hardware and software to make sure they are working properly and to find problems early.
Task Manager shows running programs and processes and displays CPU, RAM, Disk, and Network usage. It can also be used to close programs that have stopped responding.
Resource Monitor is a Windows diagnostic tool that provides detailed information about CPU, memory, disk, and network activity.
Safe Mode is a special way of starting Windows with only basic drivers, services, and essential programs. It is mainly used for troubleshooting problems.
System Restore is a Windows feature that returns system settings, drivers, and software-related changes to an earlier working state.
Bootable recovery media is a USB drive, DVD, or other storage device containing files that can start a computer and provide operating system repair or recovery tools.
MBR (Master Boot Record) and GPT (GUID Partition Table) are two partition styles used to organize data on storage drives. MBR is older, while GPT is commonly used with modern UEFI systems.
BIOS or UEFI initializes hardware, performs startup checks, identifies a bootable device, and starts the bootloader that loads the operating system.
Data recovery means recovering files that have been accidentally deleted, lost, or become inaccessible because of computer or storage-device problems.
First, check the Recycle Bin. Avoid saving new data to the same drive because new data may overwrite the deleted file and make recovery more difficult.