3.3.13 Monitor and Manage System Resources in Windows

.

Objectives

In this lab, you will use administrative tools to monitor and manage Windows system resources.

Part 1: Starting and Stopping the Routing and Remote Access service

Part 2: Working in the Computer Management Utility

Part 3: Configuring Administrative Tools

Instructions Part 1: Starting and Stopping the Routing and Remote Access service

You will explore what happens when a service is stopped and then started. In this part, you will use routing and remote access service as the example service. This service allows the local device to become a router or a remote access server.

a.Access the WinClient machine. Unlock the machine by clicking on the drop-down arrow for that specific machine’s tab and select Send Ctrl+Alt+Del.
b.Login as the Cyberopsuser using cyberops as the password.
c.Click Search Windows > Search and select Control Panel > Click Network and Sharing Center.

Note: If your Control Panel is set to View by: Category, change it to View by: Large icons or View by:

Small icons. This lab assumes that you are using one of these settings.

d.Click Change adapter settings in the left pane. Reduce the size of the Network Connections window and leave it open.

e.Navigate to the Administrative Tools. (Click Search Windows > Search for and select Control Panel > Click Administrative Tools)

.

f.In the Administrative Tools window, double-click the Performance Monitor icon.

g.In the Performance Monitor window, click Performance Monitor under the Monitoring Tools heading in the left pane is highlighted. Click the Freeze Display icon (pause button) to stop the recording.

h.Right-click the graph and select Clear to clear the graph. Leave this window open.

i.Navigate back to the Administrative Tools window and double-click Services.

.

j.Expand the width of the Services window so you have a clear view of the content. Scroll down in the right pane until you see the service Routing and Remote Access. Double-click Routing and Remote Access.

k.The Routing and Remote Access Properties (Local Computer) window opens. In the Startup type drop-down field, select Manual and then click Apply.

The Start button is now active. Do NOT click the Start button yet. Leave this window open.

l.Navigate to Performance Monitor window. Click the Unfreeze Display icon to start the recording.
m.Click the Routing and Remote Access Properties (Local Computer) window. To start the service, click Start. A window with a progress bar opens.

n.The Routing and Remote Access Properties (Local Computer) window now shows the Stop and Pause button active. Leave this window open.

o.Navigate to Network Connections window. Press the function key F5 to refresh the content.

Question:  What changes appear in the window after starting the Routing and Remote Access service? Additional network connections related to routing and remote access might appear, such as new virtual interfaces or connections.

p.Navigate to Routing and Remote Access Properties (Local Computer) window and click Stop. Note:

If Stop is greyed out, click Apply and change the service status.

q.Navigate to Network Connections window.

Question:  What changes appear in the right pane after stopping the Routing and Remote Access service? Those additional connections created by the service will disappear, and you’ll see only the standard network connections.

r.Navigate to Performance Monitor window and click the Freeze Display icon to stop the recording.

Question:  Which Counter is being recorded the most in the graph (hint: look at the graph color and Counter color)? % Processor Time

........

t.The display changes to report view.

Question:  What values are displayed by the counter? 2,804

Click the Routing and Remote Access Properties (Local Computer) window. In the Startup type field, select Disabled and click OK.

u.Click the Services window.

Question: What is the Status and Startup Type for Routing and Remote Access? Disabled

v.Click the Performance Monitor window. Click the Unfreeze Display icon to start the recording.
w.Close all open windows you opened during Step 1 of this lab.

.

.

Part 2: Working in the Computer Management Utility

The Computer Management is used to manage a local or remote computer. The tools in this utility are grouped into three categories: system tools, storage, and services and applications.

a.Navigate to Control Panel > Administrative Tools. Select Computer Management.
b.In the Computer Management window, expand the three categories (System Tools, Storage, and Service and Applications) by clicking on their respective arrows.

c.Click the arrow next to Event Viewer then click the arrow next to Windows Logs. Select System.

d.Double-click to open the Event Properties window for the first event. Click the down arrow key to locate an event for Routing and Remote Access. You should find four events that describe the order for starting and stopping the Routing and Remote Access service.

Question:  What are the descriptions for each of the four events?

1.Event 7040, Service Control Manager
 Description: The start type of the Routing and Remote Access service was changed from demand start to disabled.
 Log Name: System
 Source: Service Control Manager
 Event ID: 7040
 Logged: 8/8/2020 10:09:14 PM
 Task Category: None
2.Event 7036, Service Control Manager
 Description: The Service Control Manager event indicates that a service has changed its state.
 Log Name: System
 Source: Service Control Manager
 Event ID: 7036
 Logged: 8/8/2020 10:05:24 PM
 Task Category: None
3.Event 7036, Service Control Manager
 Description: The Service Control Manager event indicates that a service has changed its state.
 Log Name: System
 Source: Service Control Manager
 Event ID: 7036
 Logged: 8/8/2020 10:02:45 PM
 Task Category: None
4.Event 20169, RemoteAccess
 Description: The RemoteAccess event indicates an issue or change related to remote access services.
 Log Name: System
 SourceRemoteAccess
 Event ID: 20169
 Logged: 8/8/2020 10:02:42 PM
 Task Category: None

.

e.Close all open windows.

Part 3: Configuring Administrative Tools

For the rest of this lab, you will configure Advanced Administrative Tool features and monitor how this affects the computer.

a.Navigate to Control Panel > Administrative Tools > Performance Monitor. The Performance Monitor window opens. Expand Data Collector Sets. Right-click User Defined, and select New > Data Collector Set.

b.The Create new Data Collector Set window opens. In the Name field, type Memory Logs. Select the Create manually (Advanced) radio button and click Next.

c.In the What type of data do you want to include? window, check the Performance counter box then click Next.

d.In the Which performance counters would you like to log? window, click Add.

e.From the list of available counters, locate and expand Memory. Select Available MBytes and click Add>>.

f.You should see the Available MBytes counter added in the right pane. Click OK.

g.Set the Sample interval field to 4 seconds. Click Next.

h.In the Where would you like the data to be saved? screen, click Browse.

i.Browse For Folder window, select your (C:) drive which is Local Disk (C:). Select PerfLogs and click OK.

j.The Where would you like the data to be saved? window opens with the directory information that you selected in the previous step. Click Next.

k.Create the data collector set? screen, click Finish.

l.Expand User Defined and select Memory Logs. Right-click Data Collector01and select Properties.

m.DataCollector01 Properties window, change the Log format: field to Comma Separated.

n.Click the File tab.

Question:  What is the full path name to the example file?

C:\PerfLogs\WIN-8H45OWG3LCL_20180322-000001\DataCollector01.csvhere.

o.Click OK.
p.Select the Memory Logs icon in the left pane of the Performance Monitor window. Click the green arrow icon to start the data collection set. Notice a green arrow is placed on top of the Memory Logs icon.

q.To force the computer to use some of the available memory, open and close a browser.
r.Click the black square icon to stop the data collection set.

Question:  What change do you notice for the Memory Logs icon?

The Memory Logs icon now has a green play button overlay, indicating that the Memory Logs data collector set is currently running.

s.Launch File Explorer and navigate to drive C: > PerfLogs. Locate the folder that starts with your PC’s name followed by a timestamp, WINCLIENT_20200808-000001 in the example. Double-click the folder to open it, and then double-click the DataCollector01.csv file. If prompted, click Continue to permit access to the folder.

Note: If the How do you want to open this file? message is displayed, select Notepad and click OK.

Question:  What does the column farthest to the right show? The available memory in megabytes MB on the system at specific timestamps.

t.Close the DataCollector01.csv file and the window with the PerfLogs folder.
u.Select the Performance Monitor window. Right-click Memory Logs > Delete.

v.The Performance Monitor > Confirm Delete window opens. Click Yes.
w.Open drive C: > PerfLogs folder. Right-click on the folder that was created to hold the Memory log file, then click Delete.

x.If the Delete Folder window opens. Click Yes.
y.Close all open windows.

End of document