You can use the set
command in Recovery Console to display or modify four environment variables. You can set each of the four environment variables to TRUE or FALSE. TRUE is turned on; FALSE is turned off and is always the default setting.
The Syntax for the set
set variable = true or falseNOTE:
Be sure to use a space on each side of the equal sign. If you do not, the set
command returns a "syntax error" message and does not work.
The variables, when set to TRUE, have the following meanings:
- allowwildcards: Allows you to use wildcards with some commands (such as "del *.bak".
- allowallpaths: Allows you to change directories (the cd command) to include all folders on all drives.
- allowremovablemedia: Allows you to copy files from the hard disk to a floppy disk or other recognized removable media.
- nocopyprompt: Allows you to copy files without being prompted to continue when you are overwriting an existing file.
When you attempt to use the set
command to change any of the these variables from FALSE to TRUE, you may receive the following error message:
The SET command is currently disabled. The SET command is an optional Recovery Console command that can only be enabled by using the Security Configuration and Analysis snap-in.
Before you can change any of the environment variables to TRUE, you must enable the set
command option using one of the following Windows security tools:
- The Security Configuration and Analysis snap-in in Microsoft Management Console (MMC)
- The Domain Controller Security Policy in Administrative Tools.
- The Domain Security Policy in Administrative Tools.
- The Local Security Policy in Administrative Tools.
After you start one of these security tools (as applicable to your computer's environment), look under the Local Policies, Security Options heading and locate the following two security policies pertaining to Recovery Console.
- Recovery Console: Allow Automatic Administrative Logon.
- Recovery Console: Allow floppy copy and access to all drives and all folders.
The first policy allows you to start Recovery Console without prompting for the administrative password stored in the local computer's account database. The second policy enables the set
command while you are using Recovery Console. This is the policy you want to enable, and allows you to change any of the four environment variables to TRUE during a Recovery Console session.
After you enable the security policy, it must be applied (possibly across the domain) before becoming the effective policy on the local computer. This is necessary before the set
command is truly enabled and available for use during a Recovery Console session.
You can run the following command to force a refresh of the local computer's policy after performing the policy change listed above:
secedit /refreshpolicy machine_policy
After the local policy is refreshed and the enabled Recovery Console security policy is in effect, you should be able to start Recovery Console and use the set
command to enable any of the four environment options.
For additional information about other commands or general information about Recovery Console, click the article number below to view the article in the Microsoft Knowledge Base:
Description of the Windows 2000 Recovery Console
For additional information about security policies, click the article numbers below to view the articles in the Microsoft Knowledge Base:
Using Secedit.exe to Force Group Policy to Be Applied Again
Methods Used to Apply Security Settings Throughout an Enterprise