Friday, January 6, 2012

Loading Hive in Registry

Browsing registry HKEY_USERS should show the SID of all profiles that are on your machine, if you do not know the SID of the user your are wanting to make changes to you can load their hive.


Step 1:

Highlight HKEY_USERS and hit file > load hive

Step 2: Browse to users profile and select their ntuser.dat file, and give it a name



You can then browse their registry directory as if you were logged in as them under HKEY_CURRENT_USER

0 comments:

Post a Comment