Re: Utility to Access all Registry Keys remotely

2009-01-06 Thread James Rankin
Just don't forget to unload it afterwards - I was once editing our users' mandatory profile and left the Registry hive loaded on my machine. Since then I have decided to maintain multiple copies :-) 2009/1/5 Ben Scott mailvor...@gmail.com On Mon, Jan 5, 2009 at 1:11 PM, David James

RE: Utility to Access all Registry Keys remotely

2009-01-05 Thread Tim Evans
Regedit can do that just fine. HKCU is just a pointer to HKEY_USERS\sid for the currently logged on user. It will be different for each user that logs on to the workstation. …Tim -Original Message- From: Terri Esham [mailto:terri.es...@noaa.gov] Sent: Monday, January 05, 2009 9:31

Re: Utility to Access all Registry Keys remotely

2009-01-05 Thread Terri Esham
I didn't know that. Thanks for the information. Is there an easy way to determine which SID belongs to which user? Terri Tim Evans said the following on 1/5/2009 12:52 PM: Regedit can do that just fine. HKCU is just a pointer to HKEY_USERS\sid for the currently logged on user. It will be

RE: Utility to Access all Registry Keys remotely

2009-01-05 Thread Damien Solodow
: Re: Utility to Access all Registry Keys remotely I didn't know that. Thanks for the information. Is there an easy way to determine which SID belongs to which user? Terri Tim Evans said the following on 1/5/2009 12:52 PM: Regedit can do that just fine. HKCU is just a pointer to HKEY_USERS

Re: Utility to Access all Registry Keys remotely

2009-01-05 Thread Terri Esham
Never mind, I can use AD to find the correct SID. Thanks for your help. Terri Terri Esham said the following on 1/5/2009 1:00 PM: I didn't know that. Thanks for the information. Is there an easy way to determine which SID belongs to which user? Terri Tim Evans said the following on

RE: Utility to Access all Registry Keys remotely

2009-01-05 Thread Tim Evans
I set an environment variable USER in our login script. I just look for that value in the environment key, …Tim From: Terri Esham [mailto:terri.es...@noaa.gov] Sent: Monday, January 05, 2009 10:00 AM To: NT System Admin Issues Subject: Re: Utility to Access all Registry Keys remotely I didn't

RE: Utility to Access all Registry Keys remotely

2009-01-05 Thread David James
If you connect to the admin on that workstation share you can browse to the %systemroot%\system32\config folder and see all the hives. In regedit click on HKLM or HLC and the choose file-load hive, then open them from that admin share. If you need the ntuser.dat of a user it's in the

Re: Utility to Access all Registry Keys remotely

2009-01-05 Thread Kurt Buff
https://www.microsoft.com/sysinternals - download and install all of the tools. The one you want this time is called psgetsid. On Mon, Jan 5, 2009 at 10:00 AM, Terri Esham terri.es...@noaa.gov wrote: I didn't know that. Thanks for the information. Is there an easy way to determine which SID

Re: Utility to Access all Registry Keys remotely

2009-01-05 Thread Ben Scott
On Mon, Jan 5, 2009 at 1:11 PM, David James bigdadd...@gmail.com wrote: If you connect to the admin on that workstation share you can browse to the %systemroot%\system32\config folder and see all the hives. In regedit click on HKLM or HLC and the choose file-load hive, then open them from