| «« Be Mindful of Code Entropy | An Early Firefox Marketing Push Improves 1.0 Stability »» |
|
About
I'm Ryan Lowe, a Software Engineering graduate living in Ottawa, Canada. I like agile software development and Ruby on Rails.
I write this blog in Canadian English and don't use a spell checker. Typos happen.
Projects
» Full-time Ruby on Rails freelancer
» Full-time with Rails since May 2005 » Former committer for RadRails (now Aptana) » I also have a few Rails side-projects in development: 1. wheretogoinTO.com Toronto nightlife 2. Hey Heads Up! TODO list and sharing 3. Layered Genealogy family history research 4. foos for foosball scoring 5. fanconcert for music fans (on hold) Hiring Rails developers? I can telecommute by the hour from Ottawa, Canada »» Email: rails AT ryanlowe DOT ca
BulletBlog
Now hosted on Hey! Heads Up -- check it out!
Syndication
Pings
Recent
Derek Lowe's (Ryan's older brother) words at Ryan's funeral
blog@ryanlowe.ca no more Forging Email Headers: Good, Bad or Ugly? Sarcastic Dictionary (Part 1 of Many) Tags Hierarchies Twisting Rails is Risky Business Risky Business? My Take on Early Alphas Whoa, it's August 2007 Closing Comments A Postscript to "Growth at the grassroots" »» All Blog Posts
Linkage
del.icio.us/ryanlowe
technorati/ryanlowe.ca/blog Aurora Roy Jim Andrew Trasker Travis Kibbee Karen Dr. Unk Ayana Van Bloggers Joel Spolsky Robert Scoble Tim Bray Dave Winer Raymond Chen James Robertson Ruby/Rails Bloggers rubyonrails.org weblog David Heinemeier Hansson Dave Thomas James Duncan Davidson Mike Clark Jamis Buck Signal vs. Noise Tobias Luetke Amy Hoy: (24)slash7 Jeremy Voorhis Eclipse Bloggers Planet Eclipse EclipseZone Luis de la Rosa Eclipse Foundation Kim Horne Billy Biggs Ian Skerrett Mike Milinkovich Bjorn Freeman-Benson Denis Roy
Archives
|
Adventures in Disabling VgaSave
This story is long and probably amusing to people who aren't me. I'm posting it for your enjoyment. Chalk this one up in the "worst personal IT experience so far" column... I was at a friend's place and her roommate's DVD player on her notebook computer wasn't working properly. It said something like "requires DDraw, cannot use the current display mode". So I thought maybe she didn't have the latest version of DirectX. I went to the Windows Update web site, and before I could check to see if she had installed DirectX I had to download a bunch of security updates. Install updates and reboot three times only to discover that she doesn't need a DirectX update. D'oh. So I check the video driver. Blank. Blank? Yep. I click on Adapter --> Properties and it says "VgaSave". I was like WTF? So I go to the laptop's manufacturer (Acer) to get the real video drivers, try to install them and it says that the current drivers are in use, so I have to disable them to install the new ones. OK, so I disable VgaSave. I still can't install the new drivers, and I install a notebook status tool from Acer thinking that maybe it can fix the driver problem. After installation it wants a restart, so I restart. On reboot the machine shows the product screen (Acer), then the Windows loading bar animating and then nothing. Blackness. OK, I had no idea what was wrong at this point so I try to boot into safe mode. Nope, doesn't work. Command prompt? Nope. I can't do anything. Everything else still works though. I can hear the sound, and the computer is thinking like it's booting up. So I look up VgaSave online and find this page on Wikipedia. Crap! I just screwed the pooch completely. Luckily, the computer's owner has a good sense of humour (and some blind faith)! I look up how to fix this problem. Apparently VgaSave is a fallback video service for NT operating systems. When your video card doesn't work, or you use Safe Mode, it uses VgaSave. If you disable this service you have no fallback! That's where I was. So I needed to re-enable the service and I read that I can do this through the NT Recovery Console (RC), which requires the administrator password. I boot up the RC and try a blank Administrator password. No go. I ask the notebook's owner for some possible passwords. No dice. I try stupid common ones like password, god, etc. Nope. The last Windows install on this machine was done by CompuSmart, a computer repair shop in Ottawa. They would have set the Administrator password on install, probably to blank. But blank didn't work! So I search the net more info... Apparently because of security, XP changed the way it stores passwords internally. This changed sometime between the original release of XP and now, though I couldn't pinpoint exactly when. The RC I was using was from the XP CD (SP 1a) and I thought maybe it read the passwords the old way. So I downloaded the bootdisk maker from Microsoft's web site to get the new RC. It's SIX DISKS and it takes about 5 minutes to make 'em all. I make the six disks on another machine and take them to the notebook. Using boot disks takes a long time, probably ten minutes. I get to disk 5 and it won't read. I redo the disks with the same disks and disk 5 is still toast. I redo them AGAIN with a new disk for disk 5 and I get an error that a file on the disk was corrupted: means bad boot disk maker! At this point I was calm on the outside, snapping on the inside and thanking God I'm not an IT administrator and actually do this for a living. At that point it was late so I gave up for then, and took the machine with me. So today I'm still fooling around with it some more. The blank Adminstrator password doesn't work with XP Home boot disks. It doesn't work with XP Home SP1, XP Pro SP1, XP Home SP2 boot disks. I actually made the boot disks for them all. No dice. I call up CompuSmart and ask them about the Administrator passwords for new systems. The dude said "we leave them blank". Ok. The blank passwords didn't work on any version of RC! I was stuck. At this point, I was at my last resort: use a 3rd party utility to change the Adminstrator password. Microsoft obviously does not recommend doing this -- the only ways Microsoft recommends changing the Adminstrator password is through the GUI in XP or a password reset disk. Obviously I couldn't get in the GUI -- and who actually makes recovery disks? Not students. I was out of official options. So I downloaded a neat little tool called the Offline NT Password and Registry Editor (ONTPRE). It actually boots into Linux(!), and edits the Windows registry, including the SAM file that contains all of the users and passwords. So I get into ONTPRE and check out the users. Administrator is disabled and locked. Good lord, Compusmart lied to me. My urge to tear my hair out after this ordeal is wrestled to the ground by a feeling of relief. I didn't have to reformat. That is good news. Thank you, ONTPRE! So I boot up RC (with the six boot disks, natch), use the blank Administrator password and voila, I'm in the RC. To enable VgaSave again, I just typed.
at the RC command line. Rebooted the machine and everything is back to normal. Will I try to screw with this machine some more to actually get the drivers working properly? Hell yes, because now I know how to fix it if I screw up again. Ha. :) update: after yet ANOTHER hiccup, this time installing XP service pack 2, I'm all done. I got an error midway through the installer and had an error dialog that wouldn't go away, so I had to force quit the installer. Then Windows Update thought I had the full SP2, so I had to uninstall the partial and redo the install again. You should have seen the spyware that Ad Aware found on this machine. I've never seen that much on one computer before. Now IE is hiding and Firefox is on the desktop. If you don't want spyware or random popup windows, you should use Firefox too. Posted at September 17, 2004 at 01:42 PM ESTLast updated September 17, 2004 at 01:42 PM EST Comments
there's usually Linux based bootdisks you can get to edit the registry as well as change the admin password. Here's a link that might be of some help http://home.eunet.no/~pnordahl/ntpasswd/ » Posted by: Kibbee at September 17, 2004 03:12 PMDid you read this? That's what I used. :) » Posted by: Ryan at September 17, 2004 03:17 PMKibbee doesn't really read he just looks at the words and starts typing about what he thinks is on the page. ;) » Posted by: James at September 17, 2004 09:43 PMI stopped fixing computers of non-techy people. Their shit is just too messed up and I end up getting screwed over by Futureshop at some point or another during the malfunction. http://members.rogers.com/sometimesboredinottawa/2002_09_01_archive.html#82222175 » Posted by: roy at September 17, 2004 10:41 PMTwo lessions I learned: 1. Look before you leap Why do I feel like I suddenly want to download Firefox... ;)
T. » Posted by: Travis at September 18, 2004 04:45 PMI think maybe he wrote that before he updated that. I swear that wasn't there before. » Posted by: Kibbee at September 18, 2004 04:47 PMI guess that would work ... Firefox blocks popups and IE doesn't (pre SP2). I like the crazy monkey ones myself .... I miss them. :P » Posted by: Ryan at September 18, 2004 04:48 PMKibbee: it was part of my original post. :) » Posted by: Ryan at September 18, 2004 04:52 PMI just hosed my Windows Server 2003 and the Administrator password in the Recovery console does not work!!!! I just about that tool of yours. What timing. P.S. I'm on my Linux RH 7.3 2.6.6 kernel » Posted by: roy at September 20, 2004 11:43 PMIf anyone is interested, here's how to blank out the admin password on Win 2K Advanced Server/Win2k Professional/WinXP(in theory only--not ever tested): ****Note: the boot disk described above doesn't work in this instance. You have to use the information described here in order to reset the admin password. Step 1: Download and burn the SystemRescueCD. You can get it at www.sysresccd.org. Step 2: Boot from that cd. When you get to the boot prompt, either hit or wait a few seconds for it to do it for you. Step 3: When prompted for the keyboard, I just his for the default. YMMV. Step 4: Make sure your internet access is via DHCP so you get an automatic IP. If that is the case, you have internet access! If not, you'll have to consult the documentation on how to configure it manually. The instructions on how to load the manual are given when finished booting. Step 5: If your drive is partitioned as FAT32, skip to Step 8: Step 6: enter the following command: mkdir /mnt/win Step 7: type in the following commands: captive-install-acquire (this will take some time, but it's absolutely essential as it will give you read/write access to your NTFS partitition) ****Note: if you are unfamiliar with the Unix method of mounting partitions, enter run_qtparted so you can determine which partition holds the NTFS partition you need to access. Qtparted is a clone of Partiton Magic. Next enter: mount.captive-ntfs /dev/hda1 /mnt/win ****Note: If your NTFS partition isn't located at /dev/hda1, substitute /dev/hd** where ** is what you found via qtparted--ex:/dev/hda2 /dev/hdb1, etc. Skip to Step 9 Step 8: Enter: If your FAT32 windows partition isn't at /dev/hda1, see the instructions in Step 7. Step 9: Enter the following commands: cd /mnt/win/winnt/system32/config ****Note: If using Win XP, substitute "windows" for "winnt" in the above. Before the system reboots, you will need to remove the rescue CD so you can boot into Windows. The the administrator password is now blank. If your box happened to be an Active Directory domain controller, google for instructions on how to reset the AD administrator password. It works. I've done it :) For those of you who aren't familiar with Linux commands, all I did was backup the file "SAM" as "sam.bak" and then deleted it in the following directories: c:\WINNT\system32\config I'm not 100% sure this works on XP because I've not tried it. I'm assuming that there's a backup SAM file in c:\Windows\repair on XP. You have to delete the backup SAM file or else it will be used to create the one in c:\WINNT\system32\config that you deleted. If the filesystem is FAT32, any MS-DOS based or equivalent (Win 98 boot disk) boot disk/CD will suffice. As long as you delete the 2 SAM files, you'll be good to go. If anyone tries this method for Win XP and it works, let me know. Have fun! James Blevins » Posted by: James Blevins at September 22, 2004 02:39 PMThank you Ryan you have saved my sanity. Don't worry you aren't the only one to disable stuff you shouldn't have. Urge...to kill...lowering. » Posted by: Doctor T at September 24, 2004 12:10 PMI can't believe I did the same thing last night too (Disabled VGASave). Fortunately I can remember the password. Mental Note: Must stop using computer whilst half cut... » Posted by: Steve Newson at September 28, 2004 04:44 AMHere's the URL for getting into a Win 2K Advanced Server with Active Directory installed. Once you blank the password using the instructions I posted above, do what you find at: http://www.petri.co.il/reset_domain_admin_password_in_windows_2000_ad.htm *Disclaimer--using any of the information about getting into a Windows box that I posted so you can 0wn someone else's computer without their permission is not only something I condemn, but it will give you the opportunity to know (biblically speaking) some interesting fellas in the federal pen. Don't do it! By the way, Ryan, thanks for the info on how to reenable VGASave. It worked like a charm! You really saved my butt. I disabled the service, thinking Windows would automatically pick up the correct drivers instead of VGASave if it wasn't enabled. WRONG ANSWER! Thank you for playing. We have a lovely parting gift of a perpetual BSOD--complete with memory dump! Sucker! I'm just glad I'm not the only one who has done this. Lesson learned! » Posted by: James Blevins at September 30, 2004 03:10 PMThanks Ryan, you were way more tenacious to find a fix than I would have been. Can't belive Microsoft does not at least post a simple warning that you are about to do something REALLY stupid (not that that would have stopped any of us!). Anyway should have googled your help BEFORE starting the Repair process :( and getting the same black screen! » Posted by: Mike H at October 11, 2004 09:16 AMMike: I agree. A person should NOT be able to disable VgaSave from a dialog box. » Posted by: Ryan at October 11, 2004 12:15 PMGreat stamina! Your story seems to have a happy end ... but why did the original problems 'disappear' ;) ? You had VgaSave initially enabled and had problems; then disabled VgaSave and the rest of the story is about how to enabled them again ... I also have black screens every now and then and sometimes monitor in standby or even PC crash. Finally discovered that VgaSave had resource conflicts with CPU to AGP controller (bloody 'show hidden devices' option!). I have video drivers installed though (Nvidia 56.72), but it seems VgaSave sometimes takes over. Any ideas anyone? » Posted by: Arar at October 20, 2004 04:42 AMI too played the disable Vgasave game recently and after many, many, many bad words I snapped and reinstalled XP. Long way round but at least it worked. My video display is STILL in vgasave. For now, that's the way it's going to stay. » Posted by: Patto at November 8, 2004 03:31 AMhi! i just stumbled upon this post while searching for solutions because i just did this same thing! i am confused as to how i can restart into a mode to enable vga again? i have an xp disk but i can't see the screen so how can i set the bios to boot from cd? ANY help would be appreciated as i am doing this for a friend as well and just massively messed up apparently! thanks - I went one silly step further to try and remove it to try and get XP to recognise a video card, and deleted all the registry stuff relating to it - not realising that it was my entire set of PCI registry entries that was corrupted by SP2 preventing XP from installing new drivers. I commited the same disabling blunder but I did not look to see what the name of the driver was. I have been Googling around trying to find the name of the service so that I can re-enable it. I happened upon your blog and tried the vgasave but it was already on service_auto_start. changing it to service_system_start did not fix it. does anybody else have any other ideas. I am using XP pro sp2. » Posted by: Nate at January 3, 2005 01:04 PMI'm experiencing the similar problem as Nate. Disabled vgasave, on WinXP SP2, and tried to enable it again in RC, using the command line originally posted. I'm promted that it's already set to SERVICE_SYSTEM_START, and still get the blank screen on start-up. I'd cut my losses and reinstall but I've got a few gigs of important data on there. » Posted by: Rich at January 3, 2005 05:29 PMAny luck Nate or Rich? I am having the same problem with WinXP SP2. » Posted by: Chan at January 16, 2005 10:10 PMI have a simikar issue with a new nv600GT card. Found that it is something to do with the analogue monitor (Hitachi CM801). When it is plugged in, the system will use vgasave 1 time in 4 when booting, instead of the nVidia driver. It does not have a problem if I use my LCD instead. If I use both at the same time, it fails 100% of the time. Driver and BIOS changes have not helped. It appears to be a driver timing problem, as if I delete the driver and reinstall, it works fine until I reboot again. I also have XPSP2. Possibly if you could tell windows to wait for a few more seconds to initialize? The search for an answer goes on . . . » Posted by: Psion at January 22, 2005 07:54 PMHi all!: I´m fixing my neighbor´s computer because he was getting a BSOD from time to time. So I found out about the VGASAVE thing and disabled it like Ryan and some of you did. I´ve tried twice to renable the VGASAVE and when Windows XP restarts instead of the black screen I´m getting the same BSOD my neighbour was having from time to time. I´m writing this e-mail cause I´m hopeless and I´d like to know if any of you could fix this problem. I´m suspicious about the source of the problem because I think all came up when my neighbor got two new RAM modules. I think that they have made some harm to the BIOS and so affected the AGP port. I´m gonna try right now to change the video card. Maybe at least the vgasave service starts again and I can see the scree. I´ll keep you informed Albert » Posted by: Gutilin at February 19, 2005 12:07 PMAlbert: I've heard that BSODs are often caused by improper drivers. If that's true in your case replacing the video card should help as well, but you could also try updating the original card's drivers so that they don't BSOD the machine. VGASAVE is meant to be used as a fallback mechanism for Windows when a valid driver could not be found (ie. so Windows will always come up). It's not meant to be used as a permanent video driver. » Posted by: Ryan at February 19, 2005 02:24 PMSame issue, different story. Once you get the vgasave re-enabled, and finish beating yourself bloody with a stick along the way, how the hell does one manage to install good drivers? I've got a Radeon 9600, the ATI drivers wont recognize vgasave as a Standard VGA driver, and refuses to install. It's been days of BSOD before I found this post, but I would really love to get back to utilizing my hardware for all it is worth. Anything...? Yep, I had this problem too. The drivers would not install over VGASAVE, which is why I tried to disable it in the first place. :) I can't believe I didn't blog my solution to that and my memory is a bit cloudy. I think what I did was switched from VGASAVE to one of the "Standard Windows 800x600" (or something like that) drivers and after that I could install my driver over it. Good luck! » Posted by: Ryan at March 15, 2005 06:09 AMLove your work guys, but you realise you've done this the hard way... Just choose "Last Known Good" on the advanced startup menu (f8 menu) to boot using the last known good configuration - in this case, the configuration used to boot the computer BEFORE you disabled one of the drivers. » Posted by: Joe at March 21, 2005 04:00 AMI tried that Joe and it didn't work for me. » Posted by: Ryan at March 21, 2005 04:02 AMFair enough... I guess that means vgasave is not considered an essential service so the computer is successfully getting to logon (even though we can't see it ;) and so it updates the last known good information with the damaged info. A useful 'best practice' to follow when messing with drivers is to create a backup hardware profile befreo you make changes, that way you can always get into your original configuration if your changes mes the machine. Of course we all get lazy with this sort of thing because we all know it's more fun to fix it than to avoid breaking it ;) » Posted by: Joe at March 21, 2005 04:09 PM |