- Thread Author
-
- #1
|
Solution
You can do that with regedit
In relation to the root of a mounted Windows operating system partition common hives are located at
\Windows\System32\config for system hives
and \Users\<username>\NTUSER.DAT is the user hive location minus the classes which is actually a separate hive file at...
- Open regedit and select either HKEY_LOCAL_MACHINE or HKEY_USERS
- Click File > Load Hive
- Select the hive you want to open and click Open
- Enter a keyname (I usually just enter something like AAAAA)
- Expand the AAAAA key, locate and export what you need
- Click on the AAAAA key and click File > Unload hive
In relation to the root of a mounted Windows operating system partition common hives are located at
\Windows\System32\config for system hives
and \Users\<username>\NTUSER.DAT is the user hive location minus the classes which is actually a separate hive file at...
- Joined
- Jul 4, 2015
- Messages
- 8,998
You can do that with regedit
In relation to the root of a mounted Windows operating system partition common hives are located at
\Windows\System32\config for system hives
and \Users\<username>\NTUSER.DAT is the user hive location minus the classes which is actually a separate hive file at \Users\<username>\Appdata\Local\Microsoft\Windows\UsrClass.dat
- Open regedit and select either HKEY_LOCAL_MACHINE or HKEY_USERS
- Click File > Load Hive
- Select the hive you want to open and click Open
- Enter a keyname (I usually just enter something like AAAAA)
- Expand the AAAAA key, locate and export what you need
- Click on the AAAAA key and click File > Unload hive
In relation to the root of a mounted Windows operating system partition common hives are located at
\Windows\System32\config for system hives
and \Users\<username>\NTUSER.DAT is the user hive location minus the classes which is actually a separate hive file at \Users\<username>\Appdata\Local\Microsoft\Windows\UsrClass.dat
luciahenry
New Member
- Joined
- Mar 4, 2020
- Messages
- 1
Thanks very much. It was very helpful.You can do that with regedit
- Open regedit and select either HKEY_LOCAL_MACHINE or HKEY_USERS
- Click File > Load Hive
- Select the hive you want to open and click Open
- Enter a keyname (I usually just enter something like AAAAA)
- Expand the AAAAA key, locate and export what you need
- Click on the AAAAA key and click File > Unload hive
In relation to the root of a mounted Windows operating system partition common hives are located at
\Windows\System32\config for system hives
and \Users\<username>\NTUSER.DAT is the user hive location minus the classes which is actually a separate hive file at \Users\<username>\Appdata\Local\Microsoft\Windows\UsrClass.dat