How bởi I access "HKEY_CURRENT_USER" in the registry of a remote machine? i am using Registry Workshop, và when i connect to lớn a remote machine i only have:

HKEY_CLASSES_ROOTHKEY_LOCAL_MACHINEHKEY_USERS

I need lớn have access lớn "HKEY_CURRENT_USER"



I don"t know about "Registry Workshop", not heard of it, but a user"s registry is stored in their ntuser.dat within their profile so it works slightly differently khổng lồ the rest. 

Using the standard regedit, you"d highlight your HKEY_USERS node then click on the tệp tin menu và Load Hive. You then need lớn browse to the user"s profile and mở cửa ntuser.dat (eg \computerc$docsandsettingsob tuser.dat).

The user might need lớn be logged out for it lớn work properly but I can"t remember. Don"t think so.

 

Alternatively, you can also try khổng lồ find out the user"s SID, connect remotely as you normally do and locate the SID under HKEY_USERS, but it"s been a long time since I tried that method so not sure if / how-well it works. 


View this "Best Answer" in the replies below »
Popular Topics in General Windows
*

tienkiemkyduyen.mobi Help Desk

The help desk software for IT. Free.

Track users" IT needs, easily, and with only the features you need.


Learn More »

9 Replies


· · ·

Anaheim
OP
Best Answer
Matt2477 May 6, 2011 at 05:34 UTC
1st Post

I don"t know about "Registry Workshop", not heard of it, but a user"s registry is stored in their ntuser.dat within their profile so it works slightly differently lớn the rest. 

Using the standard regedit, you"d highlight your HKEY_USERS node then click on the file menu & Load Hive. You then need lớn browse to lớn the user"s profile and mở cửa ntuser.dat (eg \computerc$docsandsettingsob tuser.dat).

The user might need to lớn be logged out for it to work properly but I can"t remember. Don"t think so.

 

Alternatively, you can also try lớn find out the user"s SID, connect remotely as you normally do và locate the SID under HKEY_USERS, but it"s been a long time since I tried that method so not sure if / how-well it works. 


9
· · ·
*

Habanero
OP
b0b
This person is a verified professional.
Verify your tài khoản to enable IT peers to see that you are a professional.
May 6, 2011 at 05:44 UTC

 

Matt2477 wrote:

Alternatively, you can also try to lớn find out the user"s SID, connect remotely as you normally do and locate the SID under HKEY_USERS, but it"s been a long time since I tried that method so not sure if / how-well it works. 

+1 to the above. Get the user"s SID, if you connect remotely to the user"s registry that SID và a menu of other accounts" SIDs should show up under HKEY_USERS.


4
· · ·
*

Serrano
OP
MarkusDarkus
This person is a verified professional.
Verify your trương mục to enable IT peers lớn see that you are a professional.
May 6, 2011 at 06:36 UTC

Matts method is ok but it does not find the current user.

To vì chưng that, connect lớn the remote machine and Go to lớn "HKEY_USERS". The current user will be the longest key without "_Classes" on the end. If you have more than 1 long key then you can find out which key is which by browsing khổng lồ "HKLMSYSTEMCurrentControlSetControlhivelist" and matching the keys. The username will be part of the path in the value & you can see all who are logged on.

 

Simples!


22
· · ·
Habanero
OP
b0b
This person is a verified professional.
Verify your account to enable IT peers to see that you are a professional.
May 6, 2011 at 07:14 UTC

 

MarkusDarkus wrote:

Matts method is ok but it does not find the current user.

To bởi vì that, connect to lớn the remote machine & Go to "HKEY_USERS". The current user will be the longest key without "_Classes" on the end. If you have more than 1 long key then you can find out which key is which by browsing to lớn "HKLMSYSTEMCurrentControlSetControlhivelist" & matching the keys. The username will be part of the path in the value & you can see all who are logged on.

 

Simples!

Eg the SID?


0
· · ·
Serrano
OP
kluber IT Jul 11, 2012 at 04:40 UTC
1st Post

Bumped into this, it does the trick!


0
· · ·
Pimiento
OP
miguelangelrosaliolara May 9, 2014 at 18:22 UTC
1st Post

Matt2477: Thankx, it was really helpfull your method.

Att: Migueltron


0
· · ·
Pimiento
OP
gushoppes Feb 1, năm 2016 at 17:07 UTC
1st Post

This thread might be old but it was very helpful. I did find an alternative method that worked which Matt2477 mentioned. Knowing the username or profile name, I found this way a bit easier since I just grabbed the user"s sid & didn"t have to lớn hunt for the user.dat file. This aided me as I did not have permissions lớn connect khổng lồ "documents and settings" lớn find the user.dat on the remote machine. 

I just ran this powershell command to produce the sid. 

Get-ADUser -Identity "username" | select sid

I was then able to lớn browse "HKLM he matching sid you just found" and drill down khổng lồ the key I was looking for, & made the registry change I needed khổng lồ make khổng lồ the remote machine"s local user profile.

Hope this helps someone. 


4
· · ·
Pimiento
OP
benjaminwatson Apr 26, năm 2016 at 15:40 UTC
1st Post
MarkusDarkus - Thanks so much for jumpstarting my memory to the simple but effective way lớn determine SID distinction!

MarkusDarkus wrote:

Matts method is ok but it does not find the current user.

To vì that, connect to the remote machine & Go to lớn "HKEY_USERS". The current user will be the longest key without "_Classes" on the end. If you have more than 1 long key then you can find out which key is which by browsing to lớn "HKLMSYSTEMCurrentControlSetControlhivelist" and matching the keys. The username will be part of the path in the value và you can see all who are logged on.

 

Simples!


0
· · ·
· · ·
Datil
OP
deanmoncaster
This person is a verified professional.
Verify your tài khoản to enable IT peers to lớn see that you are a professional.
Oct 12, 2017 at 09:50 UTC

Here i am......in 2017 và it still works in windows 10.

Perfect :D


2

This topic has been locked by an administrator và is no longer open for commenting.