5

Looking for the physical files the Windows 2008 R2 server registry. Does anyone know their location and names?

James Campbell
  • 173
  • 1
  • 1
  • 7

1 Answers1

12

HKLM\System - %windir%\system32\config\SYSTEM
HKLM\Software - %windir%\system32\config\SOFTWARE
HKLM\Security - %windir%\system32\config\SECURITY
HKLM\Sam - %windir%\system32\config\SAM
HKEY_USERS.DEFAULT - %windir%\system32\config\Default
HKEY_USERS\[SID] - %userprofile%\Ntuser.dat
HKCU\[SID]\Software\Classes - %userprofile%\AppData\Local\Microsoft\Windows\Usrclass.dat

Jason Berg
  • 18,954
  • 6
  • 38
  • 55