Which system file stores the information displayed by the "net user Administrator" command in Windows 7?

2

Which system file stores the information displayed by the "net user Administrator" command in Windows 7? Need to find the details of the users in a dead Windows 7 machine.

Details of the command is here.

Edit:

I have been informed by @Moab that specific user info is stored in each user account folder in the NTUSER.DAT file. However, in my case, the administrator account has never been logged on and it does not have a user account folder.

Gradient

Posted 2019-03-31T22:39:05.610

Reputation: 31

I assume it is stored in the same place as user passwords, the Windows registry. – Moab – 2019-03-31T22:48:05.103

@Moab what is that location? – Gradient – 2019-03-31T22:53:07.600

See this....https://www.thewindowsclub.com/where-are-the-windows-registry-files-located-in-windows-7

– Moab – 2019-03-31T22:57:42.837

There is also specific user info stored in each users account folder in the NTUSER.DAT file. C:\Users<User name>\ntuser.dat – Moab – 2019-03-31T22:59:44.013

Answers

0

If You were within Active Directory environment, I would say to start with analyzing ntds.dit. But since You are in probably desktop machine, I suggest to look around SAM/SYSTEM/SOFTWARE registry files, which might store informations like the one You need (like user creation date)

RedS

Posted 2019-03-31T22:39:05.610

Reputation: 1

Asked: 2019-03-31T22:39:05.610

Viewed: 76 times

Active: 2019-09-18T20:52:18.107