A. Windows 2000 includes a new component which protects system files by scanning all protected system files and replaces incorrect versions with correct Microsoft versions.

It is possible to modify the behavior of this protection using the SFC.EXE utility (you must be a member of the Administrators group).


/SCANNOW Scans all protected system files immediately.
/SCANONCE Scans all protected system files once at the next boot.
/SCANBOOT Scans all protected system files at every boot.
/CANCEL Cancels all pending scans of protected system files.
/QUIET Replaces all incorrect file versions without prompting the user.
/PURGECACHE Purges the file cache and scans all protected system files immediately.
/CACHESIZE=x Sets the file cache size

Setting the Quiet options updates HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SFCDisable and the other options modify HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SFCScan.

You can disable SFC by performing the following:

  1. Start the registry editor (regedit.exe)
  2. Move to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
  3. From the Edit menu select New - DWORD value
  4. Enter a name of EnableFileProtection, press enter
  5. Double click the value and set to 0
  6. Close the registry editor