|
The Registry
DEFINITION: The Windows 9x/NT/2000/ME/XP Registry
is a complex, unified, system wide, continually referenced
during operation database, used for centrally storing, locating,
editing and administering system, hardware, software and user
configuration information, following a hierarchical structure.
It was introduced to replace the text/ASCII based MS -DOS
configuration (.BAT, .SYS) and MS Windows initialization (.INI)
files.
Structure of Registry in windows 9X is Different from that
of Windows NT,2000 and XP.
Windows 95/98/ME :In these operating systems Registry
is stored in these 5 files, with the Hidden, Read-only attributes
for write-protection purposes, usually located in the %WinDir%
folder (default is C:\Windows) .
- SYSTEM.DAT = stores persistent hardware and software
settings related to the system it resides on, contained
in the (HKEY_CLASSES_ROOT = Windows 95 and 98 only) and
HKEY_LOCAL_MACHINE Hive keys.
- USER.DAT = stores user specific and software settings
contained in the HKEY_CURRENT_USER Hive key. If more than
one user, then multiple user profiles enable each user to
have their own separate USER.DAT file, located in %WinDir%\Profiles\%UserName%.
When a user logs on, Windows OS (down)loads both USER.DAT
files: the one from the local machine %WinDir% (global user
settings), and the most recent one from the local machine
%WinDir%\Profiles\%UserName%, or from the central (host)
server if user profiles reside on a network (local user
settings).
- CLASSES.DAT = stores persistent data contained
in the HKEY_CLASSES_ROOT Hive key, found only on Windows
ME.
- SYSTEM.DA0 and USER.DA0 = automatically created
backups of SYSTEM.DAT and USER.DAT from the last successful
Windows GUI startup, and found only on Windows 95
Windows NT/2000/XP :Registration Database is contained
in these 5 files located in the %SystemRoot%\System32\Config
folder (default is C:\Winnt\System32\Config for Windows NT/2000
or C:\Windows\System32\Config for Windows XP):
- DEFAULT = stores the HKEY_USERS\.Default key.
- SAM = stores the HKEY_LOCAL_MACHINE\Sam key.
- SECURITY = stores the HKEY_LOCAL_MACHINE\Security
key.
- SOFTWARE = stores the HKEY_LOCAL_MACHINE\Software
key.
- SYSTEM = stores the HKEY_LOCAL_MACHINE\System key
and the HKEY_CURRENT_CONFIG Hive key,
these files located in the %SystemRoot%\Profiles\%UserName%
folder:
- NTUSER.DAT and USRCLASS.DAT (Windows XP only) =
store the HKEY_CURRENT_USER Hive key,
Editing Registry
Always make sure that you know what you are doing when changing
the registry or else just one little mistake can crash the
whole system. That's why it's always good to back it up!
To view the registry (or to back it up), you need to use
the Registry Editor tool. There are two versions of Registry
Editor:
:To modify the Registry, you need to use a Registry Editor:
- Regedit.exe (Windows 95/98/ME/NT/2000/XP) = located
in %WinBootDir% (%SystemRoot%) has the most menu items and
more choices for the menu items. You can search for keys
and subkeys in the registry.
- Regedt32.exe (Windows NT/2000/XP) = located in
%SystemRoot%\System32,enables you to search for strings,
values, keys, and subkeys. This feature is useful if you
want to find specific data.
Registry Structure
For ease of use, the Registry is divided into
five separate structures that represent the Registry database
in its entirety. These five groups are known as Keys, and
are discussed below:
HKEY_CURRENT_USER
This registry key contains the configuration information for
the user that is currently logged in. The users folders, screen
colors, and control panel settings are |