howto load current user hive offline??

  • Thread starter Thread starter omko h
  • Start date Start date
O

omko h

Is there any way to load the current user of a logged out user?
I want to take a look in current_user hive of the registery of one of the
users.
the user doesn't have enough rights to start regedit.

Thanks
Omko Huizenga
 
You can load other users registry files with regedt32 (and wxp or later
also using normal regedit). First select HKEYS_USERS. Now you can see from
file menu, that "Load hive" selection is available. Use it to load other
users registry hive. Remember to unload it later.
 
If you need to edit Windows Registry and do not have permissions t
start regedit you can use 3-rd party registry editor, for exampl
*RegMagik* - it has many useful features not available in standar
regedit, for example ability to create desktop shortcuts to registr
locations and very powerful and fast Registry search

'users.aol.com/bguzner/software' (http://)


omko said:
*Is there any way to load the current user of a logged out user?
I want to take a look in current_user hive of the registery of one o
the
users.
the user doesn't have enough rights to start regedit.

Thanks
Omko Huizenga
Click to expand...


-
bguzne
 
Yes, you can load a user hive (from the local machine or a remote one, even).
This will only work well if you are logged on as an administrator.

Following is for Win2000 (WinXP is different, as it does not have two separate
programs RegEdit and RegEdt32 - but the procedure is similar, except that
RegEdit does the job of both programs)

Run RegEdt32 (not RegEdit).
Select the root of the HKEY_USERS tree - the hive will be loaded into whatever
tree you currently have selected, and the choice to load the hive will not be
active unless you have the root of a tree selected.
Under menu item Registry, there is a choice to "load hive" - you then select
the ntuser.dat file from the user's profile directory (which could be on a
remote computer - you need access rights, of course).
It then asks you for a key name - anything will do, as long as it is not the
same as something that is already loaded (the user name is usually a good
choice here).

Once the hive is loaded, you can look at/edit it like any other. You can also
load up RegEdit if you want to do searching, etc.

If you edit anything, you then need to "unload" the hive so that it will save
the changes. You should actually unload it in any case when you are done
looking at it, as it will stay loaded even if you close RegEdt32. Select the
branch for the hive, then menu Registry/Unload Hive.
If you are editing a hive from a remote machine, don't do it while the user is
logged on, or their copy will overwrite yours when they log out.

|
|If you need to edit Windows Registry and do not have permissions to
|start regedit you can use 3-rd party registry editor, for example
|*RegMagik* - it has many useful features not available in standard
|regedit, for example ability to create desktop shortcuts to registry
|locations and very powerful and fast Registry search
|
|'users.aol.com/bguzner/software' (http://)
|
|
|omko h wrote:
|> *Is there any way to load the current user of a logged out user?
|> I want to take a look in current_user hive of the registery of one of
|> the
|> users.
|> the user doesn't have enough rights to start regedit.
|>
|> Thanks
|> Omko Huizenga *
|
|
|
 
Back
Top