Windows 7 How to get Registry value from old, mounted, offline Win 7 ?

pstein

Extraordinary Member
Assume I have mounted a Windows 7 image file (ISO or Aomei Backupper or TrueImage) to drive letter T:
This Windows 7 is NOT the active, currently running one but an old backup archive file.

Now I want to get a certain Registry value from this image resp. old Win 7.

How can I achieve this?
All Registry editors I know so far allow only peeking into currently active, local Win 7 but not an offline, inactive Windows?

Or did I miss something?

Which files exactly contain the Registry data?

Peter

 
You can do that with regedit
  • Open regedit and select either HKEY_LOCAL_MACHINE or HKEY_USERS
  • Click File > Load Hive
  • Select the hive you want to open and click Open
  • Enter a keyname (I usually just enter something like AAAAA)
  • Expand the AAAAA key, locate and export what you need
  • Click on the AAAAA key and click File > Unload hive

In relation to the root of a mounted Windows operating system partition common hives are located at
\Windows\System32\config for system hives
and \Users\<username>\NTUSER.DAT is the user hive location minus the classes which is actually a separate hive file at \Users\<username>\Appdata\Local\Microsoft\Windows\UsrClass.dat
 
You can do that with regedit
  • Open regedit and select either HKEY_LOCAL_MACHINE or HKEY_USERS
  • Click File > Load Hive
  • Select the hive you want to open and click Open
  • Enter a keyname (I usually just enter something like AAAAA)
  • Expand the AAAAA key, locate and export what you need
  • Click on the AAAAA key and click File > Unload hive

In relation to the root of a mounted Windows operating system partition common hives are located at
\Windows\System32\config for system hives
and \Users\<username>\NTUSER.DAT is the user hive location minus the classes which is actually a separate hive file at \Users\<username>\Appdata\Local\Microsoft\Windows\UsrClass.dat
Thanks very much. It was very helpful.
 
Back
Top