Windows 7 How to get Registry value from old, mounted, offline Win 7 ?

[pstein]

​

​ Assume I have mounted a Windows 7 image file (ISO or Aomei Backupper or TrueImage) to drive letter T: This Windows 7 is NOT the active, currently running one but an old backup archive file. Now I want to get a certain Registry value from this image resp. old Win 7. How can I achieve this? All Registry editors I know so far allow only peeking into currently active, local Win 7 but not an offline, inactive Windows? Or did I miss something? Which files exactly contain the Registry data? Peter

 

[Neemobeer]

You can do that with regedit

• Open regedit and select either HKEY_LOCAL_MACHINE or HKEY_USERS
• Click File > Load Hive
• Select the hive you want to open and click Open
• Enter a keyname (I usually just enter something like AAAAA)
• Expand the AAAAA key, locate and export what you need
• Click on the AAAAA key and click File > Unload hive

In relation to the root of a mounted Windows operating system partition common hives are located at
\Windows\System32\config for system hives
and \Users\<username>\NTUSER.DAT is the user hive location minus the classes which is actually a separate hive file at \Users\<username>\Appdata\Local\Microsoft\Windows\UsrClass.dat

 

[luciahenry]

You can do that with regedit

• Open regedit and select either HKEY_LOCAL_MACHINE or HKEY_USERS
• Click File > Load Hive
• Select the hive you want to open and click Open
• Enter a keyname (I usually just enter something like AAAAA)
• Expand the AAAAA key, locate and export what you need
• Click on the AAAAA key and click File > Unload hive

In relation to the root of a mounted Windows operating system partition common hives are located at
\Windows\System32\config for system hives
and \Users\<username>\NTUSER.DAT is the user hive location minus the classes which is actually a separate hive file at \Users\<username>\Appdata\Local\Microsoft\Windows\UsrClass.dat

Thanks very much. It was very helpful.