Cheatsheet: Windows Operating System

1. Windows Editions and Features

1.1 Windows 10 Editions

1.2 Windows 11 Editions

1.3 Windows 11 Hardware Requirements

• Processor: 1 GHz or faster with 2+ cores on compatible 64-bit processor or SoC
• RAM: 4 GB minimum
• Storage: 64 GB or larger storage device
• System firmware: UEFI, Secure Boot capable
• TPM: Trusted Platform Module (TPM) version 2.0
• Graphics card: DirectX 12 compatible graphics / WDDM 2.x
• Display: >9" with HD Resolution (720p), 8 bits per color channel

2. Windows Installation and Upgrade

2.1 Installation Types

2.2 Installation Methods

• USB Boot: Create bootable USB using Media Creation Tool or Rufus
• DVD/Optical Media: Burn ISO to DVD and boot from optical drive
• Network Installation: PXE boot using Windows Deployment Services (WDS)
• Recovery Partition: Use manufacturer recovery partition on OEM systems

2.3 Upgrade Paths

3. File Systems

3.1 File System Comparison

3.2 NTFS Features

• File and folder permissions (Read, Write, Modify, Full Control)
• Encryption File System (EFS) for file-level encryption
• Disk quotas to limit user storage
• File compression to save disk space
• Shadow copies (Volume Shadow Copy Service) for previous versions
• Journaling for crash recovery
• Support for large files and volumes

4. Windows User Interface

4.1 Desktop Components

• Taskbar: Displays running applications, system tray, Start button, search box, task view
• Start Menu: Application launcher, pinned apps, recently used, power options
• Action Center: Notifications and quick settings (Windows 10)
• Quick Settings: Notifications and settings panel (Windows 11)
• Task View: Virtual desktop management and timeline
• File Explorer: Navigate files and folders, Quick Access, OneDrive integration

4.2 Windows 10 vs Windows 11 UI Differences

4.3 Keyboard Shortcuts

• Windows + E: Open File Explorer
• Windows + I: Open Settings
• Windows + L: Lock computer
• Windows + D: Show/hide desktop
• Windows + Tab: Open Task View
• Windows + R: Open Run dialog
• Windows + X: Quick Link menu
• Windows + Shift + S: Screenshot (Snipping Tool)
• Ctrl + Shift + Esc: Open Task Manager
• Alt + Tab: Switch between open windows
• Windows + Arrow Keys: Snap windows

5. Control Panel vs Settings

5.1 Control Panel Applets

• Programs and Features: Uninstall applications, Windows features on/off
• Device Manager: Manage hardware devices and drivers
• Power Options: Configure power plans and sleep settings
• System: View system info, remote settings, system protection
• Administrative Tools: Event Viewer, Services, Computer Management, Task Scheduler
• Network and Sharing Center: View network status, change adapter settings
• Sound: Configure audio devices and sound scheme
• Mail: Configure Outlook profiles
• Indexing Options: Manage search indexing locations

5.2 Settings App Categories

• System: Display, sound, notifications, power, storage, multitasking
• Devices: Bluetooth, printers, mouse, pen, AutoPlay
• Network & Internet: Wi-Fi, Ethernet, VPN, airplane mode, proxy
• Personalization: Background, colors, lock screen, themes, Start, taskbar
• Apps: Apps & features, default apps, offline maps, startup apps
• Accounts: Your info, email & accounts, sign-in options, family & other users
• Time & Language: Date & time, region, language
• Gaming: Game bar, captures, Game Mode
• Ease of Access: Narrator, magnifier, high contrast, closed captions
• Privacy: Location, camera, microphone, activity history, diagnostics
• Update & Security: Windows Update, recovery, backup, activation, troubleshoot

6. User Account Types and Management

6.1 Account Types

6.2 Local vs Microsoft Account

6.3 User Account Control (UAC)

• Prompts for elevation when administrative tasks are performed
• Four levels: Always notify, notify only when apps make changes (default), notify without dimming, never notify
• Reduces malware impact by limiting application privileges
• Shield icon indicates actions requiring elevation

7. File and Folder Management

7.1 File Explorer Navigation

• Quick Access: Pinned folders and recent files
• This PC: Local drives and devices
• Network: Shared network resources
• Libraries: Virtual folders grouping content (Documents, Music, Pictures, Videos)
• OneDrive: Cloud storage integration

7.2 File and Folder Properties

• General: Size, location, attributes (Read-only, Hidden, Archive)
• Security: NTFS permissions (Read, Write, Modify, Full Control)
• Sharing: Network sharing settings and permissions
• Previous Versions: Restore from shadow copies
• Details: Metadata (author, date, tags)

7.3 NTFS Permissions

7.4 Permission Inheritance

• Child objects inherit permissions from parent by default
• Explicit permissions override inherited permissions
• Deny permissions override Allow permissions
• Effective permissions: Cumulative of all group memberships

7.5 File Attributes

• Read-only (R): File cannot be modified or deleted
• Hidden (H): File not displayed in normal view
• System (S): Protected operating system file
• Archive (A): File has been modified since last backup
• Set via File Properties or attrib command

8. Disk Management

8.1 Disk Management Tool

• Access: diskmgmt.msc or Computer Management
• Functions: Initialize disks, create/delete/format partitions, assign drive letters, extend/shrink volumes
• View disk status, partition layout, file systems
• Convert basic to dynamic disks

8.2 Partition Types

8.3 MBR vs GPT

8.4 Volume Types

8.5 Disk Status Indicators

• Healthy: Normal operation
• Online: Disk accessible and functional
• Offline: Disk not accessible
• Foreign: Dynamic disk moved from another system
• Formatting: Format operation in progress
• Failed: Disk errors, data may be lost
• Unallocated: Space not assigned to a partition

9. System Tools and Utilities

9.1 Task Manager

• Access: Ctrl+Shift+Esc or right-click taskbar
• Processes: View and end running processes, CPU/memory/disk usage
• Performance: Real-time system performance graphs
• App history: Resource usage over time
• Startup: Manage startup programs and impact
• Users: View logged-in users and their processes
• Details: Advanced process information, set priority, affinity
• Services: View and manage Windows services

9.2 Microsoft Management Console (MMC)

• Framework for administrative tools using snap-ins
• Access: mmc.exe
• Common snap-ins: Device Manager, Disk Management, Event Viewer, Services, Group Policy Editor
• Create custom consoles by adding snap-ins
• Save custom consoles as .msc files

9.3 Computer Management

• Access: compmgmt.msc or right-click This PC
• Includes: Task Scheduler, Event Viewer, Shared Folders, Local Users and Groups, Performance Monitor, Device Manager, Disk Management, Services
• Centralized location for system administration tasks

9.4 Event Viewer

• Access: eventvwr.msc
• Logs: Application, Security, Setup, System, Forwarded Events
• Event levels: Information, Warning, Error, Critical
• View details: Event ID, source, date/time, description
• Custom views and filtering for troubleshooting

9.5 Device Manager

• Access: devmgmt.msc
• View and manage hardware devices
• Update, roll back, disable, uninstall drivers
• View device properties, resources, and conflicts
• Symbols: Yellow triangle (problem), red X (disabled), down arrow (disabled), question mark (unknown)
• Scan for hardware changes to detect new devices

9.6 Services

• Access: services.msc
• Startup types: Automatic, Automatic (Delayed Start), Manual, Disabled
• Service status: Running, Stopped, Paused
• Dependencies: View services that depend on or are required by others
• Recovery options: Actions on service failure

9.7 Resource Monitor

• Access: resmon.exe or from Task Manager Performance tab
• Real-time monitoring: CPU, Memory, Disk, Network
• Detailed process information and resource usage
• Identify bottlenecks and performance issues

9.8 Performance Monitor

• Access: perfmon.msc
• Monitor performance counters in real-time
• Create Data Collector Sets for logging
• Generate performance reports
• Create custom views and alerts

10. System Configuration

10.1 System Configuration Utility (msconfig)

• General: Startup selection (Normal, Diagnostic, Selective)
• Boot: Safe mode options, boot timeout, number of processors, max memory
• Services: Enable/disable services, hide Microsoft services
• Startup: Opens Task Manager Startup tab (Windows 8 and later)
• Tools: Launch common administrative tools

10.2 Safe Mode Options

10.3 Advanced Boot Options

• Access: Shift + Restart or interrupt boot process 3 times
• Startup Settings: Safe Mode options, Enable low-resolution video, Debugging mode, Disable driver signature enforcement
• Startup Repair: Automatically fix boot problems
• System Restore: Restore to previous restore point
• System Image Recovery: Restore from complete system backup
• Command Prompt: Access recovery command line

10.4 System Properties

• Access: sysdm.cpl or System > Advanced system settings
• Computer Name: Change computer name and domain/workgroup
• Hardware: Device Manager, Device Installation Settings
• Advanced: Performance settings, user profiles, startup and recovery
• System Protection: Configure restore points and system protection
• Remote: Remote Assistance and Remote Desktop settings

11. Windows Registry

11.1 Registry Structure

11.2 Registry Data Types

11.3 Registry Editor (regedit)

• Access: regedit.exe
• Navigate keys and subkeys in tree structure
• Create, modify, delete keys and values
• Export/import registry sections for backup
• Search for keys, values, and data
• Backup before making changes

12. Networking in Windows

12.1 Network Locations

12.2 Network and Sharing Center

• View network status and connections
• Change adapter settings
• Change advanced sharing settings (discovery, file/printer sharing, password-protected sharing)
• Set up new connection or network
• Troubleshoot network problems

12.3 Network Adapter Properties

• TCP/IPv4: IP address, subnet mask, default gateway, DNS servers
• TCP/IPv6: IPv6 address and settings
• Client for Microsoft Networks: Allows connection to shared resources
• File and Printer Sharing for Microsoft Networks: Shares local resources
• Link-Layer Topology Discovery: Network discovery protocol

12.4 IP Configuration

• Static IP: Manual assignment of IP, subnet, gateway, DNS
• DHCP: Automatic IP assignment from DHCP server
• APIPA: Automatic Private IP Addressing (169.254.x.x) when DHCP fails
• IPv4 address classes: Class A (1-126), Class B (128-191), Class C (192-223)
• Private IP ranges: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16

12.5 HomeGroup (Windows 7-10)

• Simplified home network file sharing (removed in Windows 10 1803+)
• Share libraries, printers, and devices
• Password-protected access
• Replaced by standard workgroup sharing in newer Windows 10

12.6 Workgroup vs Domain

12.7 Proxy Settings

• Access: Settings > Network & Internet > Proxy
• Automatic proxy setup: Automatically detect or use setup script
• Manual proxy setup: Specify proxy server address and port
• Bypass proxy for local addresses option

12.8 VPN Configuration

• Access: Settings > Network & Internet > VPN
• VPN types: PPTP, L2TP/IPsec, SSTP, IKEv2
• Configure server address, credentials, and connection properties
• Split tunneling: Route only specific traffic through VPN

13. Windows Updates

13.1 Windows Update Settings

• Access: Settings > Update & Security > Windows Update
• Check for updates manually
• View update history and uninstall updates
• Advanced options: Receive updates for other Microsoft products, pause updates
• Active hours: Prevent restarts during specified times
• Delivery Optimization: P2P update sharing across local network or internet

13.2 Update Types

13.3 Update Channels

• General Availability Channel: Standard release for all users
• Windows Insider Program: Preview builds (Dev, Beta, Release Preview channels)
• Long-Term Servicing Channel (LTSC): Enterprise edition, 5-10 year support, feature updates only

13.4 Windows Server Update Services (WSUS)

• Centralized update management for enterprise
• Administrators approve updates before deployment
• Bandwidth management and reporting
• Target specific computer groups

14. System Recovery and Backup

14.1 System Restore

• Creates restore points before major changes
• Restores system files, registry, and programs to previous state
• Does not affect personal files
• Access: rstrui.exe or System Properties > System Protection
• Configure restore point settings and disk space usage
• Create manual restore points before system changes

14.2 File History

• Automatic backup of files in libraries, desktop, contacts, favorites
• Requires external drive or network location
• Access: Settings > Update & Security > Backup or Control Panel > File History
• Configure backup frequency and retention
• Restore files from previous versions

14.3 Backup and Restore (Windows 7)

• Legacy backup tool available in Windows 10
• Create system image backups
• Schedule automatic backups
• Back up to external drive, network location, or DVDs
• Create system repair disc

14.4 Recovery Options

14.5 Windows Recovery Environment (WinRE)

• Access: Shift + Restart, interrupt boot 3 times, or boot from installation media
• Startup Repair: Fix boot problems automatically
• Command Prompt: Run recovery commands (bootrec, chkdsk, sfc)
• System Restore: Restore to previous restore point
• System Image Recovery: Restore complete system from image
• UEFI Firmware Settings: Access BIOS/UEFI settings

14.6 Recovery Drive

• USB drive for troubleshooting and recovering PC
• Create: Settings > Update & Security > Recovery > Create a recovery drive
• Requires 16GB+ USB drive
• Option to backup system files for reinstallation
• Boot from recovery drive to access WinRE

15. Command Line Tools

15.1 Basic Commands

15.2 Network Commands

15.3 System Commands

15.4 PowerShell Basics

• Launch: powershell.exe or Windows PowerShell from Start menu
• Cmdlets: Verb-Noun format (Get-Process, Set-ExecutionPolicy)
• Get-Help: Display help for cmdlets
• Get-Command: List available cmdlets
• Get-Process: Display running processes
• Get-Service: Display Windows services
• Stop-Process: Terminate process
• Restart-Computer: Restart computer
• Set-ExecutionPolicy: Control script execution (Restricted, RemoteSigned, Unrestricted)
• Pipeline: Chain cmdlets with | operator

16. Windows Security Features

16.1 Windows Defender (Windows Security)

• Built-in antivirus and antimalware protection
• Real-time protection scans files and programs
• Cloud-delivered protection and automatic sample submission
• Controlled folder access (ransomware protection)
• Virus & threat protection, account protection, firewall, device security, app & browser control
• Quick scan, full scan, custom scan, offline scan options

16.2 Windows Defender Firewall

• Blocks unauthorized incoming connections
• Separate profiles: Domain, Private, Public
• Inbound rules: Control incoming traffic
• Outbound rules: Control outgoing traffic
• Advanced Security (wf.msc): Create custom rules, monitor connections
• Allow apps through firewall in Settings

16.3 BitLocker Drive Encryption

• Full disk encryption (Pro, Enterprise, Education editions only)
• Requires TPM 1.2 or 2.0 (or USB startup key without TPM)
• Encrypt OS drive, fixed drives, removable drives
• Recovery key for password reset
• BitLocker To Go: Encryption for removable drives
• Manage from Control Panel > BitLocker Drive Encryption

16.4 Encrypting File System (EFS)

• File and folder level encryption on NTFS volumes
• Available on Pro, Enterprise, Education editions
• Encrypted files shown in green in File Explorer
• Enable via file Properties > Advanced > Encrypt contents
• Certificate-based, tied to user account
• Export encryption certificate for backup

16.5 Windows Hello

• Biometric authentication (fingerprint, facial recognition, iris scan)
• PIN as alternative to password
• Requires compatible hardware
• Configure in Settings > Accounts > Sign-in options
• More secure than traditional passwords

16.6 Credential Manager

• Stores and manages saved credentials
• Web Credentials: Websites and apps
• Windows Credentials: Network resources, RDP
• Access: Control Panel > Credential Manager
• Add, edit, remove stored credentials

17. Remote Access

17.1 Remote Desktop Protocol (RDP)

• Connect to remote Windows computers
• Host requires Pro, Enterprise, or Education edition
• Enable: Settings > System > Remote Desktop or System Properties > Remote
• Default port: 3389 TCP
• Client: Remote Desktop Connection (mstsc.exe)
• Support for audio, printers, clipboard, file transfer
• Network Level Authentication (NLA) for enhanced security

17.2 Remote Assistance

• Interactive remote support, user must approve actions
• Helper can view and control with permission
• Invitation-based connection (email, file, Easy Connect)
• Enable: System Properties > Remote > Allow Remote Assistance
• Launch: msra.exe
• Session password for security

17.3 Quick Assist

• Built-in remote assistance tool (Windows 10/11)
• No configuration required, internet-based
• Generate code for one-time access
• Screensharing and remote control
• Launch from Start menu or Win+Ctrl+Q

18. Windows Virtualization

18.1 Hyper-V

• Type 1 hypervisor for running virtual machines
• Requires Pro, Enterprise, or Education edition (64-bit only)
• Hardware requirements: SLAT-capable CPU, 4GB RAM minimum, virtualization enabled in BIOS
• Enable: Turn Windows features on or off > Hyper-V
• Hyper-V Manager: Create and manage VMs
• Virtual switches: External, Internal, Private networking
• Snapshots for VM backup and rollback

18.2 Windows Sandbox

• Isolated desktop environment for testing untrusted software
• Disposable, changes discarded on close
• Requires Pro or Enterprise edition, virtualization enabled
• Enable: Turn Windows features on or off > Windows Sandbox
• Launch from Start menu
• Uses Windows containerization technology

19. Group Policy

19.1 Group Policy Overview

• Centralized configuration management for domain-joined computers
• Local Group Policy on standalone computers (Pro and above)
• Access: gpedit.msc (not available on Home edition)
• Computer Configuration: Applies to computer regardless of user
• User Configuration: Applies to user regardless of computer
• Policies process order: Local > Site > Domain > OU (LSDOU)

19.2 Common Group Policy Settings

• Software installation and removal
• Security settings (password policy, account lockout, user rights)
• Scripts (startup, shutdown, logon, logoff)
• Folder redirection
• Administrative templates (registry-based settings)
• Windows Update configuration
• Internet Explorer and Edge settings

19.3 Group Policy Tools

• gpupdate /force: Force immediate policy refresh
• gpresult /r: Display applied policies summary
• gpresult /h report.html: Generate detailed HTML report
• Resultant Set of Policy (RSoP): View effective policy settings

20. Windows Domain and Active Directory

20.1 Domain Join

• Requires Pro, Enterprise, or Education edition
• Join domain: Settings > Accounts > Access work or school > Connect
• Or System Properties > Computer Name > Change > Domain
• Requires domain credentials and network connectivity to domain controller
• Computer must be on same network or VPN connected

20.2 Active Directory Benefits

• Centralized user and computer management
• Single sign-on with domain credentials
• Group Policy for configuration management
• Centralized authentication and authorization
• Resource sharing and permissions management
• Organizational units for logical grouping

20.3 Domain vs Azure AD

21. Windows Printing

21.1 Printer Management

• Add printer: Settings > Devices > Printers & scanners > Add a printer
• Print Management console: printmanagement.msc (Pro and above)
• Manage print queue, pause/resume/cancel print jobs
• Set default printer
• Printer properties: Sharing, ports, advanced settings, security

21.2 Printer Sharing

• Enable: Printer Properties > Sharing tab > Share this printer
• Assign share name
• Install additional drivers for different OS versions
• Set permissions for printer access
• Connect to shared printer: \\computername\printername

21.3 Print Spooler Service

• Service name: Spooler
• Manages print queue and print jobs
• Restart if printing issues occur
• Print spool location: C:\Windows\System32\spool\PRINTERS

22. Accessibility Features

22.1 Ease of Access Tools

23. Task Scheduler

23.1 Task Scheduler Overview

• Access: taskschd.msc
• Automate programs and scripts on schedule or trigger
• View and manage scheduled tasks
• Task Library: Organized folders of tasks
• Create Basic Task or Create Task for advanced options

23.2 Task Triggers

• On a schedule: Daily, weekly, monthly, one time
• At log on: When any user or specific user logs on
• At startup: When computer starts
• On idle: When computer is idle for specified time
• On an event: When specific event is logged
• On workstation lock/unlock

23.3 Task Actions

• Start a program: Run executable or script
• Send an email: Send email notification (deprecated)
• Display a message: Show message box (deprecated)

23.4 Task Conditions and Settings

• Start task only if computer is on AC power
• Start task only if computer is idle
• Wake computer to run task
• Run with highest privileges
• Run whether user is logged on or not
• Stop task if it runs longer than specified time

24. Windows PowerShell and Scripting

24.1 PowerShell Execution Policy

24.2 Common PowerShell Cmdlets

• Get-Help: Display cmdlet help and syntax
• Get-Command: List available cmdlets
• Get-Service: Display Windows services
• Start-Service / Stop-Service: Control services
• Get-Process: Display running processes
• Stop-Process: Terminate process
• Get-EventLog: Read event logs
• Get-ChildItem: List files and folders (like dir)
• Copy-Item: Copy files and folders
• Remove-Item: Delete files and folders
• New-Item: Create files and folders
• Set-ExecutionPolicy: Change script execution policy
• Get-ExecutionPolicy: View current execution policy

24.3 Batch Files

• Text files with .bat or .cmd extension
• Contain command-line commands executed sequentially
• Variables: %variable% (user-defined) or %1 %2 (parameters)
• Common commands: echo, pause, rem, goto, if, for
• @echo off: Hide command echoing

25. Performance Optimization

25.1 Startup Programs

• Manage: Task Manager > Startup tab
• Disable unnecessary programs to improve boot time
• Startup impact: High, Medium, Low, Not measured
• Startup folder: shell:startup for current user, shell:common startup for all users

25.2 Disk Cleanup

• Access: cleanmgr.exe
• Remove: Temporary files, recycle bin, thumbnails, system files, old Windows installations
• Clean up system files option for additional items
• Storage Sense: Automatic cleanup (Settings > System > Storage)

25.3 Disk Defragmentation and Optimization

• Access: dfrgui.exe or drive Properties > Tools
• Defragment HDDs to improve performance
• Optimize SSDs with TRIM command
• Scheduled optimization runs weekly by default
• Analyze before optimizing to check fragmentation level

25.4 Virtual Memory (Pagefile)

• Uses hard drive as RAM overflow
• Configure: System Properties > Advanced > Performance Settings > Advanced > Virtual Memory
• Default: System managed size
• Custom size: Initial and maximum size in MB
• Recommended: 1.5x to 3x physical RAM
• Pagefile location: C:\pagefile.sys

25.5 ReadyBoost

• Use USB flash drive or SD card as cache
• Enable: Removable drive Properties > ReadyBoost tab
• Benefits older systems with limited RAM and HDD
• Minimal benefit on systems with SSD or 4GB+ RAM

25.6 Power Options

• Access: powercfg.cpl
• Power plans: Balanced, Power Saver, High Performance
• Customize: Display timeout, sleep timeout, hibernate
• Advanced settings: Processor power management, PCI Express, hard disk timeout
• Create custom power plan for specific needs

26. Windows Search and Indexing

26.1 Windows Search

• Search bar on taskbar or Win+S
• Search files, apps, settings, web results
• Search operators: kind:, date:, from:, size:
• Filters in File Explorer: Date modified, type, size

26.2 Indexing Options

• Access: Control Panel > Indexing Options
• Modify indexed locations for faster search
• Advanced: Rebuild index, change index location, file types
• Troubleshoot search issues by rebuilding index
• Index file types: Index properties only or properties and file contents

27. Windows Error Reporting and Troubleshooting

27.1 Reliability Monitor

• Access: perfmon /rel or Control Panel > Security and Maintenance > Reliability Monitor
• Timeline view of system stability
• Track application crashes, Windows failures, warnings
• Reliability index: 1 (least stable) to 10 (most stable)

27.2 Problem Reports

• Windows Error Reporting (WER) sends crash data to Microsoft
• View problem history: Control Panel > Security and Maintenance > Problem Reports
• Check for solutions to reported problems
• Configure: Control Panel > System > Advanced system settings > Error Reporting

27.3 Built-in Troubleshooters

• Access: Settings > Update & Security > Troubleshoot
• Automated diagnostics for common issues
• Categories: Windows Update, Internet Connections, Audio, Printer, Network Adapter, Power, HomeGroup
• Additional troubleshooters available online

27.4 Blue Screen of Death (BSOD)

• Stop error indicates critical system failure
• Stop code and error message provide failure information
• Memory dump files: C:\Windows\Minidump
• Analyze with WinDbg or BlueScreenView
• Common causes: Driver issues, hardware failure, memory problems, overheating

28. Windows Boot Process

28.1 Boot Sequence (UEFI)

• 1. Power-On Self Test (POST)
• 2. UEFI firmware initialization
• 3. Boot Manager (bootmgfw.efi) loaded from EFI System Partition (ESP)
• 4. Windows Boot Loader (winload.efi) starts
• 5. Kernel (ntoskrnl.exe) and HAL (hal.dll) loaded
• 6. System registry hive loaded
• 7. Device drivers loaded
• 8. Session Manager (smss.exe) starts subsystems
• 9. Winlogon.exe and services start
• 10. User logon screen appears

28.2 Boot Configuration Data (BCD)

• Stores boot configuration parameters
• Edit with bcdedit command (requires admin privileges)
• View current configuration: bcdedit /v
• Backup BCD: bcdedit /export C:\backup.bcd
• Restore BCD: bcdedit /import C:\backup.bcd

28.3 Boot Recovery Commands

• bootrec /fixmbr: Repair Master Boot Record
• bootrec /fixboot: Write new boot sector
• bootrec /scanos: Scan for Windows installations
• bootrec /rebuildbcd: Rebuild BCD store
• Run from Command Prompt in WinRE