Using Windows PE and Bart PE to Make a Recovery CD

1
Using Windows PE and Bart PE to Make a Recovery CD

• Robert Messner
• Manager of Educational Systems
• Delaware Technical Community College

2
Overview

• Define PE
• Discuss Bart PE
• Software Requirements to Make PE Disc
• Basics for making a recovery disc
• Time permitting - Demonstration of PE

3
PE

• Microsoft Windows Pre-installation Environment
  (Windows PE), provides a small but powerful boot
  environment that you can use for many Windows XP
  Embedded development tasks.

4
Windows PE Features

• A hardware-independent Windows environment with a
  small footprint in memory.
• A command-line interface (Cmd.exe) capable of
  running batch files, and support for Windows
  Script Host (WSH), HTML Applications (HTA), and
  ActiveX Data Objects (ADO).
• Native support to create, delete, format, and
  manage NTFS file system partitions.

5
In Summary the Key Advantages for PE Are

• Windows PE is self-contained on the CD-ROM, so
  you can boot your device without using a hard
  drive.
• It offers a Command line interface

6
What is Bart PE

• Bart's PE Builder helps you build a "BartPE"
  (Bart Preinstalled Environment) bootable Windows
  CD-Rom or DVD from the original Windows XP or
  Windows Server 2003 installation/setup CD, very
  suitable for PC maintenance tasks.
• Offers a complete Win32 environment with network
  support
• Offers a graphical user interface (800x600)
• Offers support for FAT/NTFS/CDFS filesystems

7
BartPE vs. Windows PE

• Microsoft views Windows PE as an installation
  platform.
• Bart view Windows PE as the next generation
  rescue platform.
• WindowsPE has only a command line interface
• BartPE has a graphical user interface.
• You need a special license from Microsoft to use
  Windows PE.
• The tools needed to make a BartPE installation
  are free.
• BartPE allows unlimited custom application
  plugins

8
Whats a Plug-in?

• A plug-in is a Bart PE term used to describe an
  application that has been formatted to work
  inside PE.
• A plug-in will contain all of the application
  files needed to make the program run.
• A plug-in will contain an .inf file that provides
  Bart PE the information needed to install the
  application into the PE environment.
• Most downloadable Bart PE plug-ins are shells
  with instructions to build the actual plug-in,
  but without the actual program files.

9
BartPE Requirements

• The files from your Licensed Windows Installation
  CD-Rom. Supported Windows versions are
• Windows XP Home with Service Pack 1 or higher
  slip streamed
• Windows XP Pro with Service Pack 1 or higher slip
  streamed
• Windows Server 2003, Web Edition
• Windows Server 2003, Standard Edition
• Windows Server 2003, Enterprise Edition
• PE Builder Software which runs on Windows
  2000/XP/2003/BartPE systems (freeware).
• CD/DVD writer if you want to create a bootable
  CD/DVD.

10
Important Contributors to PE

• Sherpya WinPe (http//oss.netfarm.it/winpe/)
• Developed XPE 1.0.4 plugin will change the look
  of Barts PE into a Windows XP standard look.
• Developed Firefox web browser plug-in
• FABS (http//fabs.dyndns.org/plugins.htm)
• Worked extensively to make BartPE recognize
  various graphic drivers and sound drivers.
• Paraglider (http//www.paraglidernc.com/HWPnP.html
  )
• Developed a Hardware PnP plug-in used to detect
  and install devices which have no driver
  installed.

11
Basics for making a Recovery Disc

• Software Needed
• Imaging software program
• Undelete software program
• Password recovery program
• File searching program
• Network packet analysis program
• Anti-Virus program
• Anti-Spyware program
• What Can PE do for you?

12
Imaging software program

• Freeware
• DiskTools Image Maker 1.1
• DrvImagerXP V2.2
• Shareware
• Win image V6.10
• Commercial
• Symantec Ghost 8.x
• PowerQuest Drive Image 200x

13
Undelete software program

• Freeware
• Free undelete V2.0
• Restoration V2.5.14
• Shareware
• Handy Recovery 3.0
• File RecoveryV3.0
• Commercial
• ERD Commander 200x
• Easy Recovery Pro 5.x 6.x

14
Password recovery program

• Freeware
• BIOS View
• Change Administrator Password
• CHNTPW (Change NT Password)
• Windows Password Renew 1.0-RC2
• Commercial
• ERD Commander 200x
• Locksmith
• Passware
• Advance Archive Password Recovery

15
File searching program

• Freeware
• Sysinternals tools
• SequoiaView 1.3
• A43
• Commercial
• Effective File Search

16
Network packet analysis program

• Freeware
• Packet Analyzer
• PktFilter
• Show Traffic
• Etherreal (with WinPCAP)

17
Anti-Virus program

• Freeware
• ClamWin Antivirus Scanner
• Avast!
• Avira AntiVir PersonalEd
• McAfee ScanGUI
• Commercial
• Symantec Anti-Virus
• Trend Micro Anti-Virus

18
Anti-Spyware

• Freeware
• Adaware SE Personal
• Spybot Search and Destroy
• Aranea Spywizard

19
What PE Can Do For You

• Recover data from a system with a corrupt
  operating system
• Recover data from a hard drive that will not boot
  due to virus or missing boot files
• Recover deleted data
• Boot from a CD or DVD and allow user to add or
  remove files from the hard drive
• Clean a hard drive that is infected with a virus
  or spyware
• Allow a user to replace protected system files
  that are locked when the system is booted
• Allow users to reset forgotten administrator
  passwords on NT, 2000, and XP systems.
• Perform packet analysis and determine network
  bottlenecks

20
What does PE offer?

• Familiar GUI Interface
• Standard set of tools
• Ability to run 32bit applications like Ghost32
• Ability to test hardware for failures
• Ability to boot virtually any computer from one
  CD or DVD
• Ability to overcome NTFS permissions/security

21
PE Screen Shots
Bart PE Builder Interface
22
PE Screen Shots
Bart PE Builder Plug-in Listing
23
PE Screen Shots
Bart PE Building Screen
24
PE Screen Shots
Bart PE ISO Built
25
Course Using PE Technology

• CIS-270 Computer Forensics offered at the Terry
  Campus at Delaware Technical and Community
  College.
• Students learn how to build a PE image
• Students learn how to add software packages to
  their PE image
• Students gain the knowledge to build custom
  application in PE image
• For more information on this course contact
  Charlie Miri (Department Chair for CIS)
  cmiri_at_dtcc.edu

26
Questions
My Contact InformationRobert Messner Manager
of Educational SystemsDelaware Technical
Community Collegemessner_at_dtcc.edu
27
Screen Shots of PE in Action
28
More Screen Shots
29
BartPE with Sherpya XPE Plug-in
30
BartPE with Sherpya XPE
31
BartPE, XPE, and Commercial Software Plug-in
http//www.collewijn.info/xpe/page/screenshots.php

32
Links to Download BartPE

• BartPE Builder
• http//www.nu2.nu/pebuilder/
• Plug-in Repository
• http//www.bootcd.us/BartPE_Plugins_Repository.php
  
• Bart PE Builder Forum
• http//www.911cd.net/forums//lofiversion/index.php
  ?f30.html

33
Thanks!