What is the W2K registry file called? (specifically)?

[Poorman's PC Tech]

What is it called?

 

[Spiff]

the registry files for Win9x, NT, and Win2k are called hive files. they can be found at:

%systemroot%\system32\config

 

[Chuck]

Some of it is installed in the user area too. ntuser.dat if i'm not mistaken.

 

[SUOrangeman]

user.dat and system.dat ... I think.

-SUO

 

[Chuck]

SUOrangeman,

I think that's Win9x only.

 

[WoundedWallet]

Well, I just did a test.

I opened the registry and added a value and then deleted it. I did that on the Current_User and on the Local_Machine.

From what I could understand the ntuser.dat controls the current_user(duh!) and the files on system32/config control the local_machine (hardware,sam,security,software,system)

That leaves the Classe_Root and Current_Config to be explained.

 

[SUOrangeman]

my fault.

-SUO

 

[1KrazyFool]

The Win9x reg files are user.dat and system.dat found in the %windows% folder. If there are profiles enabled under Win9x, user.dat is found in %windows%\profiles\username\user.dat. As for Win2k, I am trusting the others with ntuser.dat controlling the current_user. classes_root is found under local_machine\software\classes. Not sure why it has its own thing though. I think current_config is a dynamic reg area, with runtime data that is rebuilt at boot time (possibly login time for win2k).

 

[WoundedWallet]

Ok, just read from my trusty little black book.
"HKCC is mapped from the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet subkeys"

So there you have it. The registry files are ntuser.dat and the files inside the system32\config folder.