Tag: WinRE

Get DaRT to Launch Remote Connections Tools Automatically

Launching the Remote Connection Tool at Startup With a simple configuration file change you can modify our DaRT media to boot directly to the Remote Connection tool. When a connection is established the DaRT boot sequence will continue, leaving all the hard choices for the technician. Note: This method assumes you are using DHCP, otherwise you will need to create a script that assigns a network address before launching the Remote Connection tool. Instructions

  1. From Windows 7 start menu, run “DaRT Recovery Image”.
  2. Go through the wizard up until you get to the “Additional Files” page. Note: Don’t forget to enable Remote Connections or else starting the Remote Connection tool at startup will have no effect.
  3. The “Add additional tools” page in the wizard will allow you to customize DaRT to your heart’s content. At this point click the “Show Files…” button.
  4. Navigate to the WindowsSystem32 directory within this temporary folder
  5. Modify the “winpeshl.ini” file permission to give “modify” permissions to your current user.

Open the “winpeshl.ini” file and modify the file to look like below:

"%windir%\system32\netstart.exe -network -remount"
"cmd /C start %windir%\system32\RemoteRecovery.exe -nomessage"

Save the newly created iso file and extract the wim from it and switch it into your recovery folder as I showed HERE. Now when you startup the PC by pressing F8 and selecting Repair this Computer the remote connection screen starts automatically as shown below. The end user only needs to supply the technician with the Ticket number, IP and Port and he can connect and repair the system.


Note: If you cancel the remote connection screen at the local workstation, the script will continue as normal, prompting for a language selection and  administrator password before launching the System Recovery Options Screen.

2011/08/25 | By | 3 Replies More

Using Dart 7’s Standalone System Sweeper

Microsoft’s Standalone System Sweeper has been designed to aid users in starting an infected PC and performing offline malware scans to remove viruses, trojans, rootkits and other forms of malware effectively. It is also used if malware is hindering the user to install or start an antivirus software on the infected system, or if the applications used to detect malware are not able to find the malware on the PC.

Once you have launched Dart, select the Standalone System Sweeper

If you haven’t updated your definitions in a while, you will be prompted to check for updates.

Once your definitions have been updated start a full scan.

2011/08/25 | By | Reply More

Windows 7 Advanced Boot Options and Starting Dart 7

Note: The following instructions apply if you setup WinRE to include DaRT from my previous post Check it out here

Start your computer and tap on the F8  key to get to the Advanced Boot Options Screen then choose “Repair your computer”


Since Dart 7 has been added to your default WinRE you now have the option to start network support at the start of WinRE. Choose YES

8-24-2011 2-50-03 AM

In a Windows PE environment your drive mappings will not have the same drive letters and this can be confusing.

Choose YES to remap them

8-24-2011 2-50-13 AM

Select you Language and choose Next

8-24-2011 2-50-23 AM

You’ll notice that DART (Microsoft Diagnostics and Recovery Toolset) has been added to the WinRE menu

Select Microsoft Diagnostics and Recovery Toolset.

8-24-2011 2-51-05 AM

You now have 14 additional tools at your disposal.  My  favorites are below.

Locksmith (for those times when someone messes up their administrator passwords)

Standalone System Sweeper (for that nasty malware that’s difficult to clean while in Windows)

Remote Connections (have the user select this and you can remote in with the Dart Remote connection viewer and fix it all from your desk)

Check this blog if you want to have DaRT automaticaly start Remote Connections

8-24-2011 2-51-20 AM

I will go into more detail on how to use some of these great tools in a future blog.

2011/08/25 | By | Reply More