(2 intermediate revisions by one other user not shown)
Line 1:
'''Windows File Protection''' (WFP) is a [[software utility]] includedshipped in allwith [[Microsoft]]'s [[Windows NT]]-based [[operating system]]s beginningstarting with [[Windows 2000]].<ref>{{cite toweb prevent|url=http://its.unc.edu/tl/citations/citations56.html#9 programs|title=ITS fromTeaching replacingand criticalLearning: WindowsCITations system#56 files.|publisher= ProtectingUniversity coreof systemNorth filesCarolina prevents|work=UNC-Chapel problemsHill suchInformation asTechnology [[DLLServices hell]]Teaching withand programsLearning andCITations the|accessdate=2008-02-27}}</ref> operatingsystem.The Windowsutility 2000,provides [[Windowsa XP]]method andof [[Windowsrepairing Serverdamage 2003]]to includeor itrestoring undercached theversions of Windows system files.<ref name="wfpdesc">{{cite web |url=http://support.microsoft.com/kb/222193 |title=Description of ''the Windows File Protection'',[[Windowsfeature Me]]|publisher=Microsoft includesCorporation it|accessdate=2008-02-27 as|work=Microsoft ''SystemHelp Fileand Protection'',Support}}</ref> whereasThis utility is replaced on [[Windows Vista]] includesby [[Windows Resource Protection]].<ref>{{cite whichweb expands|url=http://msdn2.microsoft.com/en-us/library/aa382503(VS.85).aspx the|title=About technologyWindows toResource protectProtection core|publisher=Microsoft [[WindowsCorporation registry|registry]]accessdate=2008-02-27 keys|work=Microsoft andDeveloper values and prevent potentially damaging system configuration changes.Network}}</ref>
When Windows File Protection is active, replacing or deleting a system file that has no [[file lock]] to prevent it from being overwritten, causes Windows to immediately and silently restore the original copy of the file. The original version of the file is restored from a cached folder which contains backup copies of these files. For the Windows NT family, the cached folder is located at ''%WinDir%\System32\Dllcache''. Windows Me stores the cache at a different ___location.
TheDuring normal operation, Windows File Protection utilitywill providesreplace aany methodsystem tofile restoreit Windowsfinds systemmissing filesor incorrect from cached backups. Windows File Protection checks various [[file signaturessignature]]s and [[code signing]] catalogs against predefined correct versions. Any protected filesfile foundchanges which docan not matchbe replaced from the signaturescached files will because replacedWFP withto request the originalassociated versionproduct byinstallation [[CD-ROM]]. <ref>{{cite web |url=http://www.techspot.com/tweaks/wfp/ |title=Windows File Protection guide |publisher=TechSpot.com |work=Guides and Tweaks |accessdate=2008-02-27}}</ref>
Windows File protection provides support for [[network administrator]]s through Microsoft's [[MSRPC]] and [[terminal services]].<ref name="wfpdesc" />
== See also ==
Line 10 ⟶ 11:
*[[Access Control List]]
*[[Security Identifier]]
== References ==
{{Reflist}}
== External links ==
Line 18 ⟶ 22:
* [http://www.bitsum.com/aboutwfp.asp Hacking Windows File Protection]
