Description of the SET Command in Recovery Console

ID: Q235364

The information in this article applies to:

Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server

SUMMARY

This article describes the set command in Recovery Console and how to enable it before starting Recovery Console.

MORE INFORMATION

You can use the set command in Recovery Console to display or modify four environment variables. You can set each of the four environment variables to TRUE or FALSE. TRUE is turned on; FALSE is turned off and is always the default setting.

The Syntax for the set command is:

set variable = true or false

NOTE: Be sure to use a space on each side of the equal sign. If you do not, the set command returns a "syntax error" message and does not work.

The variables, when set to TRUE, have the following meanings:

allowwildcards: Allows you to use wildcards with some commands (such as "del *.bak".

allowallpaths: Allows you to change directories (the cd command) to include all folders on all drives.

allowremovablemedia: Allows you to copy files from the hard disk to a floppy disk or other recognized removable media.

nocopyprompt: Allows you to copy files without being prompted to continue when you are overwriting an existing file.

When you attempt to use the set command to change any of the these variables from FALSE to TRUE, you may receive the following error message:

The SET command is currently disabled. The SET command is an optional Recovery Console command that can only be enabled by using the Security Configuration and Analysis snap-in.

Before you can change any of the environment variables to TRUE, you must enable the set command option using one of the following Windows 2000 security tools:

The Security Configuration and Analysis snap-in in Microsoft Management Console (MMC)

The Domain Controller Security Policy in Administrative Tools.

The Domain Security Policy in Administrative Tools.

The Local Security Policy in Administrative Tools.

After you start one of these security tools (as applicable to your computer's environment), look under the Local Policies, Security Options heading and locate the following two security policies pertaining to Recovery Console.

Recovery Console: Allow Automatic Administrative Logon.

Recovery Console: Allow floppy copy and access to all drives and all folders.

The first policy allows you to start Recovery Console without prompting for the administrative password stored in the local computer's account database. The second policy enables the set command while you are using Recovery Console. This is the policy you want to enable, and allows you to change any of the four environment variables to TRUE during a Recovery Console session.

After you enable the security policy, it must be applied (possibly across the domain) before becoming the effective policy on the local computer. This is necessary before the set command is truly enabled and available for use during a Recovery Console session.

You can run the following command to force a refresh of the local computer's policy after performing the policy change listed above:

secedit /refreshpolicy machine_policy

After the local policy is refreshed and the enabled Recovery Console security policy is in effect, you should be able to start Recovery Console and use the set command to enable any of the four environment options.

REFERENCES

For additional information about other commands or general information about Recovery Console, click the article number below to view the article in the Microsoft Knowledge Base:

Q229716 Description of the Windows 2000 Recovery Console

For additional information about security policies, click the article numbers below to view the articles in the Microsoft Knowledge Base:

Q227448 Using Secedit.exe to Force Group Policy to Be Applied Again

Q216735 Methods Used to Apply Security Settings Throughout an Enterprise

Additional query words:

Keywords : kbenv kbtool
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbinfo