Tuesday, March 22, 2011

Adam's Edge: Mounting a Windows User Hive in Regedit

Ever need information from a user registry hive but could not successfully boot up the computer?  Here is a quick tip that you may not know about.  You can mount a single users registry hive (commonly seen as HKEY_CURRENT_USER when they're logged in and you launch regedit) outside of that users profile.

A few things you will need before you can mount the hive:

-Access to the NTUSER.dat file in question

Read More...

No comments:

Post a Comment