General WinXP Ghost Image Making Guide

Reinstalling the system is not a fun thing: first, you have to sit at the computer desk and answer the questions raised by windows installer honestly. After installation, you can't be idle, you have to install drivers and applications ... a rough plan, and you can't get it for a long time! Some friends may say that Ghost is fast and convenient. In less than five minutes, the system will be restored, but only a local backup. If it is restored on someone else's machine, it will definitely be "acclimatized." The reason is simple: the configuration of hardware, system and network can't be the same ... but after reading this article, you can easily create a master key, and you can easily use any machine of Ghost.

First of all, get ready.

Install Windows XP and use Windows Update to upgrade the latest system patches (including service Pack l and other latest Hot fix). To reduce the size. NET framework can not be installed, which can save more than 20 m space. Install DirectX9.0b, wmp9.0, ms java, GB 18030 support, etc. Better restart the system. Install the required application at the same time, but don't be greedy, because it is not recommended to install the application on the C drive, and the capacity of the Ghost image file will be too large. If you want to burn the GHOST file on a standard 700MCD-R, you need to control the C-drive file at around 1.3GB for portability. No matter how much software you install, it must be less than 1.3GB, if you have a removable hard disk. ..................

Second, install common software.

Install common application software (naked version can skip this step directly), and personally recommend the following software:

QQ2004 art style advertising show IP version.

Winamp5。 X Chinese version or foobar

MSN MESSENGER advertising multi-user patch.

WINRAR3。 X latest Chinese registered version

Flashget international registered edition

Flashfxp registered edition

The latest classic version or realone plus version of the media player.

MYIE2 or other shell browser

Commonly used input method, but not too big, space is limited.

Upgradable antivirus software

Bitspirit version 2.5.

Note: Don't install Daemon tool, the new method can't be used after being packaged, because it will be deleted as a driver. Therefore, the driver (hardware) cannot be installed.

In addition, some appropriate adjustments should be made to these softwares, such as changing the default download address of flashget and bt to d:\download, etc. You'd better run it when you have time, check whether the registration is completed and put the registration method in the installation directory. After packaging, it may become unregistered and you can use it.

Third, lose weight for Windows XP.

Whether it is necessary to burn the final Ghost image file to a CD or not, Windows XP should be reduced to minimize the capacity of the Ghost image file. The main items that can be deleted are as follows:

1. system file protection cache

It is located in the directory C:\WINDOWS\System32\Dllcache, and we can run sfe. exe/purgecache”。

2. Clear the page file

Transfer paging file (virtual memory), which can be moved to D drive or disabled, but will be restored after encapsulation. Ghost8.0 will directly block this big guy.

3. Turn off the system restore function

Select the System Restore tab in the System Properties dialog box that opens, and select the check box before Turn off System Restore on all drives.

4. Disabling hibernation can save as much space as memory.

5. Transfer the temporary folder (cache) of IE to D: \ temp; The storage location of OE is changed to d: \ my documents \ OE;

6. Relocate my document and recommend D:\ My document.

7. Optionally uninstall unnecessary windows components. Enter "%systemroot%/inf/sysoc.inf" to open this file, click "Replace" under the Edit menu in Notepad, then enter "Hide" (without quotation marks) in "Find what", then click the "Replace All" button on the right, then save the file and close it. Reopen Add and Remove Programs in Control Panel, and then click Add and Remove Windows Components. Now you can directly uninstall many components that were not allowed to be uninstalled before. Please use it with caution;

8. Close the memory dump. In the System Properties dialog box, under the Advanced tab, click the Start and Resume button, and then select None from the Write Debugging Information drop-down menu. And you can search all *. Dmp files and delete them.

9. Enter "drwtsn32" at runtime and press Enter to open the tool of Dr. Watson, and deselect "Dump all thread contexts", "Append to existing log file" and "Create fault dump file".

10. Delete large Chinese fonts. Generally, it is enough to keep the Song style (including the one in 18030), bold and imitation Song style.

We can also use other conventional "slimming" methods such as deleting help documents, deleting unnecessary input methods and font files to further reduce the size of the partition where Windows XP is located.

1 1. windows file protection is prohibited. Find the current version of HKEY _ local _ machine \ software \ Microsoft \ Windows NT \ Winlogon from the registry, and change the key value of "SFCDisable" to "FFFFFF9D". If you need to re-enable this feature, just reset it to "0".

Delete the help file. Delete the "Help" folder in the Windows directory directly, but it's best to keep a few: agt0407.hlp digital format, otherwise the source CD may be needed after the package is started, and there are only a few K left anyway. Advise friends with average level not to move.

13. Redundant input method. This cannot be completely deleted, or you will be prompted to insert the source CD after packaging! In addition to Chinese input methods, Windows XP also has Japanese and Korean input methods, which is of course useless to us. We can also selectively delete the contents of other folders except "CHSIME" and "SHARED" under the "c:\windows\ime" folder. The result is as shown in the figure:

Especially imjp8_ 1 and imkr6_ 1 need to keep folders and some dll files. If they are not very big, try to keep them. After deleting ime, it can be reduced from more than 80 m to 2.36m m..

C:\windows\ime saves a file list.

│ mscandui.dll

│ SOFTKBD.DLL

│ SPGRMR.dll

│ SPTIP.dll

│

├—CHSIME

│ └—APPLETS

│ PINTLCSA.DLL

│ PINTLCSD。 Disseminated intravascular coagulation

│ PINTLCSD.DLL

│ PINTLCSK。 Disseminated intravascular coagulation

│

├—CHTIME

│ └—Applets

├—imejp

│ └—applets

├—imejp98

├—IMJP8_ 1

│ └—APPLETS

├—IMKR6_ 1

│ ├—Applets

│ └—Dicts

│ hanja.lex

│ hanjadic.dll

│ imekr.lex

│

└—SHARED

│ imepaden.hlp

│ imepadsm.dll

│ imepadsv.exe

│ imlang.dll

│

└—RES

PADRS404.DLL

padrs4 1 1.dll

padrs4 12.dll

padrs804.dll

14. You can choose to delete the Service Pack backup file. Service Pack is a big patch file for Windows. After installing the Service Pack, the hard disk will take up some space to save the backed-up system files. You can delete the "ServicePackFiles" folder under windows.

15. Delete all $ ntuninstallq * * * * (* * * * is a number) files under windows;

16. You can choose to delete all files except Driver.cab and sp 1.cab in the "Driver Cache/i386" folder. Never delete these two, or there will be problems with the packaged system identification driver.

17. delete c:\windows\cursors\, which contains all mouse pointers.

18. delete c:\ windows \ srchast. This folder stores the search assistant of Windows XP, that is, dogs or other characters that appear when you search files. You can delete this folder directly, so you will use the classic search method of Windows 2000 mode; It is recommended to delete!

19. You can choose to clean the desktop in C:\WINDOWS\Web\Wallpaper or replace it yourself. If you want to go deeper, delete the screen saver, C:\WINDOWS\system32\*.scr.

20. delete c:\ windows \ system32 \ oobe- applicable to enterprise version, retail version or OEM version, and it is best not to touch it.

Fourth, optimize for Windows XP.

WinXP startup will have many functions that affect the speed. Although ms says it has been optimized, there are still many customization places for us. I usually do this.

1, modify the run key of the registry and cancel those things that are not commonly used, such as Windows Messenger. Enable Registry Manager: Start → Run →Regedit→ Find the key value of "HKEY _ Current _ User \ Software \ Microsoft \ Windows \ Current Version \ Run \ MSMSGS"/background, right click → Delete, the world is much quieter, and kill all those cfmon by the way.

2. Modify the registry to reduce the waiting time of pre-reading and progress bar. The effect is that the progress bar will enter the login interface after running once. Start → Run →regedit starts the registry editor and finds HKEY _ local _ machine \ system \ currentcontrolset \ control \ SessionManager \ memory management \ prefetch parameter. There is a key that can make Prefetcher change its value to "1". In addition, friends who don't change their hardware often can set the device type above the bus device to none in the system properties.

3. Turn off the special effects in the system properties, which is a simple and effective acceleration method. Click Start → Control Panel → System → Advanced → Performance → Settings → In the visual effect, adjust the settings to the best performance → OK. In this way, the desktop will be very similar to win2000. I still like the blue window of XP, so I put a check on "Use visual styles on windows and buttons" so that I can see the beautiful blue interface and speed up.

4. I use Windows commadner+Winrar to manage files. The ZIP support of Win XP is even worse for me, because no matter whether I need it or not, the boot system will open a zip support, and the already idle system resources will be less. Click Start → Run, type "REGSVR32/U zipfldr.dll" in the middle of double quotation marks, and then press enter to confirm. The sign of success is that a prompt window appears, and the content is roughly as follows: Dll UnrgisterServer in zipfldr.dll is successful.

5. It is said that a system of XP serves Qos, and this scheduling takes up a certain amount of network bandwidth, which is unbearable for a penniless person like me. The way to get rid of it is: start menu → run → type gpedit.msc, and the group policy window will appear, expand management template → network, expand QoS packet scheduler, and right-click in the right window to limit the reserved bandwidth. After completing and applying the above modifications, users can see the "QoS Packet Scheduler" in the General Properties tab of the Network Connection Properties dialog box. It means that the modification is successful, otherwise it means that the modification has failed. By the way, kill (uninstall) the Qos protocol in the network properties.

6. Enjoy a quick browse of the LAN.

Usually, when connecting to other computers, Windows XP will comprehensively check all scheduled tasks on other computers. This check will make you wait for 30 seconds or more. The way to get rid of it is to start → run →Regedit→ find HKEY _ local _ machine \ software \ Microsoft \ Windows \ current version \ resource manager \ remote computer \ namespace in the registry. Under this key value, there will be a key {d6277990-4c6a-11cf-8d87-00aa0060f5bf}. After deletion, restart the computer, and Windows XP will no longer check the scheduled tasks. Hoho ~ ~, the speed is obviously improved!

7. Close the debugger, Dr. Watson.

It seems that I haven't used this thing since the win' 90s. I can cancel it like this: open the book table, find the subkey branch of HKEY _ local _ machine \ software \ Microsoft \ Windows NT \ Current Version \ AE Debug, double-click the Auto key name below it, change its "numerical data" to 0, and finally press F5 to refresh the setting to take effect, thus canceling its operation. Following this idea, we can cancel all options with debugging function, such as memory.dmp that appears when the screen is blue, and "My computer → Properties → Advanced → Settings → Write debugging information → Do not select" and so on.

8. List of services I terminated and related explanations.

1) Alarm error alarm

2) automatic update windows automatic update

3) Background intelligent transmission service Microsoft claims to use idle network bandwidth to transmit data.

4) I don't think scrapbooks and remote computers should be used to enjoy the contents of the clipboard.

What did ComputerBrowser say to maintain the network update list?

6)DHCP client I don't need this thing

7) The distributed link tracking client saves information such as local area network connection update, and occasionally uses the local area network, occupying about 4M of memory.

8) Coordinate xxx of distributed transaction coordinator, similar to the above.

9)DNS client I don't need this thing.

10) Error Reporting Service Error Reporting

1 1) event log system records

12) fast user switching compatibility user switching

13) help and support help

14) Human-computer interface devices are said to be intelligent devices. . .

15) the imapicd-burning com service occasionally does not use this CD for engraving.

16) index service index, what is an index?

17) Internet connection firewall

18)IPSEC service I don't understand this. Ask a quack if you want to know.

19) Logical Disk Manager Management Service Configuration Disk

20)messenger seems to use this function for things like network sending.

2 1) ms software volume shadow copy provider volume copy backup

22) network login I don't want hackers to log in remotely, turn it off!

23) netmeeting Remote Desktop Sharing I don't use netmeeting.

24) Network DDE dynamic data exchange and transmission

25) The network DDE DSDM is similar to the above.

26) Network location awareness is turned off, and my machine cannot be used for * * *.

27) NTLM security support provider -telnet Hehe, turn it off!

28) Performance logs and alerts will record system status or send warnings.

29) Portable media serial number is closed!

30)Print Spooler printer, but unfortunately my computer is not connected to print ~

3 1) QoS RSVP is off!

32) Remote Desktop Help Session Manager Remote Help Service

33) Remote procedure call locator manages RPC

34) Remote Registry Remote Management Registry.

35) Removable storage

36) Routing and Remote Access I just disabled it.

37) Security Account Manager My system is just a client system without iis.

38) Smart card

39) Smart Card Assistant is closed! ! !

40)SSDP discovery service I don't need this.

4 1) system event notification If it is a server, it must be recorded.

42) System Restore Service System Restore Service

43) Task Scheduler windows Scheduling Service

44) telephone dialing service, can't you dial without dialing?

45) Remote login

46) terminal service terminal service

47) UPS, I don't have it.

48) The universal plug and play device host is too advanced to be used.

49) Files can also be transferred when the upload manager is closed.

50) shadow copy is backup again, dizzy.

5 1)webclient has never been used.

52)Windows Installer MSI service, I have turned it off.

53) Digital equipment for 53)windows image acquisition (WIA).

54) Windows Management Instrumentation driver extension is closed.

55)windows Time Service

56) Wireless zero configuration wireless network, occasionally not used.

57)WMI perfromance adapter is closed!

Some services here were shut down at the beginning, but I forgot to list all the closed services in the current system. You should handle it according to your own situation.

9. Error in closing the report, KAO! This thing makes me look like a free tester of Microsoft: click Control Panel-> System-> Advanced-> Lower right corner-> Error Reporting-> Disable Error Reporting-> OK!

10. When the computer is turned off, the unresponsive task will automatically end. The key value of "AugoEndTasks" in the registry: HKEY _ Current _ User \ Control Panel \ Desktop changed to "1".

1 1. Turn off automatic update: right-click my computer, click Properties, click automatic update, and then select Turn off automatic update in the notification settings column. I will update my computer manually.

12. Reduce the waiting time for scanning the startup disk, start → run, and type "chkntfs/t:0".

Because we want to make a general Windows XP Ghost file, the hardware configuration on the target computer is definitely not exactly the same as that on the current computer, so we need to delete the device driver on the current computer.

1. Delete the common driver

① Enter "devmgrnt.rnsc" in the Run dialog box, and then press Enter to open the Device Manager console window.

② Find the network card, right-click the name of the network card device under it, and click the "Uninstall" menu item in the pop-up menu.

③ Uninstall the device drivers such as universal serial bus controller, electronic game controller, video card and sound card in the same way. It should be noted here that if the system prompts you to restart, you must not restart the machine to avoid the system actively reloading the driver.

2. update ACPI properties

Then we need to change the ACPI attribute of the computer to the standard PC, because if there are different types of ACPI in the target computer, the newly cloned target computer will not be able to realize the soft shutdown of the computer and may crash after the first startup! The change steps are as follows:

① Right-click Computer →“ACPI Single Processor PC in the console window of Device Manager, and click Update Driver in the pop-up menu;

② Select the option of "Install from List or Designated Location (Advanced)" in the opened hardware update wizard dialog box, and click the "Next" button;

③ Select the option "Don't search, I want to choose the driver installation myself" on the next page and click the "Next" button;

④ Then select the "Standsrd PC" option and follow the on-screen prompts to go all the way to the next step, but the last prompt is whether to restart or not!

3. Update IDE controller properties

The last operation on the device driver is to change the IDE ATA/ATAPI controller. This step is very important, because as we all know, different motherboards, such as Intel, Nforce 2, VIA, etc., have very different drivers for IDE ATA/ATAPI controllers, so they cannot be used universally!

① Right-click the IDE ATA/ATAPI controller and the Intel (R) 8237 1AB/EBBUS main IDE controller in the console window of the device manager, and click the menu item "Update Driver" in the pop-up menu;

② Select the option of "Install from List or Designated Location (Advanced)" in the opened hardware update wizard dialog box, and click the "Next" button;

③ On the next page, select the option of "Do not search, I will choose the driver installation myself" and click the "Next" button;

④ Then select the "standard dual-channel PCI IDE controller" option, and follow the on-screen prompts to go all the way to the next step, but don't restart when prompted whether to restart at last.

Six, prepare the main image files

Deleting the driver on the "mother machine" cannot be said to be an immediate success. This is because each computer has a unique security identifier (SID). If the disk image is copied directly to other computers, all other computers will have the same SID. Therefore, it is necessary to delete the SID of the "parent computer" with the Sysprep tool, thus forcing the target computer to generate a new SID.

1. Automatic answer file

When the target computer resumes the clone backup, the system will start a minimum setup wizard process, prompting us to enter specific computer variables, such as administrator password, computer name, etc. However, because the driver has been removed from the clone backup, it is impossible to interact with the keyboard and mouse at this stage. However, we can create an automatic installation answer file and let this answer file automatically reply to the questions raised by the installer.

① Insert the Windows XP installation CD into the CD-ROM drive and release DEPLOY. Copy the CAB file in the \SUPPORT\TOOLS\ directory to the C:\Sysprep directory;

② Then run the setupmgr.exe file, and select "Sysprep installation" option in the installation type selection interface;

③ Fill in the necessary information according to the screen prompts, and click the "Next" button until you finally enter the dialog box for saving the configuration file. Make sure that the final installation script path is c: \ sysprep \ sysprep.inf.

Repackage

Now, you can use the Sysprep tool to delete the SID of the "parent machine". It's simple: run the Sysprep.exe program in the C:\Sysprep directory, and then click the "repackage" button in the window that opens. Next, you will be prompted to regenerate the SID at the next startup. Click "OK" button, wait a moment, and the computer will shut down automatically.

Seven, clone the main image file.

After the computer is turned off, we can make a GHOST image with Ghost8.0 (note: never make it before XP runs). After setting the path and file name of the ghost image file, select Advanced Compression and start the backup. After the backup, we have a common Windows XP image file. Words and characters