Welcome, Guest. Please
Login
Home
Help
Search
Login
FAQ
Radified
Ghost.Classic
Ghost.New
Bootable CD
Blog
Radified Community Forums
›
Rad Community Technical Discussion Boards (Computer Hardware + PC Software)
›
Norton Ghost 2003, Ghost v8.x + Ghost Solution Suite (GSS) Discussion Board
› Registry Edit on Ghost 10 Mounted Virtual Volume
(Moderators: Rad, Christer, NightOwl, Pleonasm, MrMagoo, El_Pescador)
‹
Previous Topic
|
Next Topic
›
Pages: 1
Registry Edit on Ghost 10 Mounted Virtual Volume (Read 31771 times)
Pleonasm
Übermensch
Offline
Posts: 1619
Back to top
Registry Edit on Ghost 10 Mounted Virtual Volume
Jul 27
th
, 2006 at 11:01am
Is there a tool or technique that would allow a user to browse the contents of the registry captured within a Ghost 10 image (Windows XP Pro SP2) that is mounted as virtual volume? In other words, can one examine the contents of the registry as it existed at the time the image was created?
Thank you for your assistance.
ple • o • nasm
n. “The use of more words than are required to express an idea”
IP Logged
Pleonasm
Übermensch
Offline
Posts: 1619
Back to top
Re: Registry Edit on Ghost 10 Mounted Virtual Volu
Reply #1 -
Jul 27
th
, 2006 at 2:56pm
Based on its description, the
Registry Tool
utility might be able to accomplish the objective.
Anyone have experience with this utility?
ple • o • nasm
n. “The use of more words than are required to express an idea”
IP Logged
Brian
Demigod
Offline
Posts: 6345
NSW, Australia
Back to top
Re: Registry Edit on Ghost 10 Mounted Virtual Volu
Reply #2 -
Jul 27
th
, 2006 at 4:27pm
Pleonasm,
I did a trial run with RegistryEditorPE and it looks promising. The plugin download and instructions are on
http://regeditpe.sourceforge.net/
You only need RegistryEditorPE.exe. Run this file (from WinXP, not BartPE) and direct it to the Windows folder of your mounted image.
IP Logged
Pleonasm
Übermensch
Offline
Posts: 1619
Back to top
Re: Registry Edit on Ghost 10 Mounted Virtual Volu
Reply #3 -
Jul 28
th
, 2006 at 10:03am
Brian, thanks for the post.
In Step #10 where it says “Registry Editor PE will begin loading the registry hives”, what does that really mean? Is Registry Editor PE loading the ‘remote’ hives into the current and active Windows registry? (Sounds dangerous.)
In Step #13 where it says “Registry Editor PE will then begin the clean-up process, which involves unloading the registry hives and user profiles and
writing them back to disk
,” wouldn’t this fail because the Ghost 10 image is read-only? Would the solution be to copy the folder “\WINDOWS\system32\config” (Windows XP Pro SP2) from the Norton Ghost 10 image to a temporary folder on the hard disk drive and ‘point’ Registry Editor PE to it?
ple • o • nasm
n. “The use of more words than are required to express an idea”
IP Logged
Brian
Demigod
Offline
Posts: 6345
NSW, Australia
Back to top
Re: Registry Edit on Ghost 10 Mounted Virtual Volu
Reply #4 -
Jul 28
th
, 2006 at 4:55pm
Pleonasm, perhaps I misread your initial post. You can browse the registry of the mounted image and you can edit the registry or make changes to files and folders in the virtual drive but any edits or changes are ephemeral and will disappear when the image is dismounted. When the image is mounted again it’s the same image you originally created.
I’ve used RegistryEditorPE (from BartPE) to delete the [MountedDevices] registry entries from a partition I had deliberately made non bootable by doing Copy Drive into a partition. The test was successful as the partition then booted.
I don’t understand how the program loads registry hives.
IP Logged
John.
Übermensch
Offline
Posts: 2072
Back to top
Re: Registry Edit on Ghost 10 Mounted Virtual Volu
Reply #5 -
Jul 28
th
, 2006 at 10:18pm
Pleonasm, while you can certainly use some other software (such as RegistryEditorPE or Registry Tool) to access a remote registry, it's really not necessary.
mount your ghost c: backup as virtual drive (e.g. f:)
start
run
regedit
select/navigate to the HKEY_LOCAL_MACHINE key
File/Load Hive
f:\windows\system32\config\
Pick the hive file (e.g. SOFTWARE) you want to load and proceed. You'll be prompted for a keyname to use. Use REMOTE_SOFTWARE for example.
You don't have to "unload hive" if you don't want to save anything, which you can't do anyway into the virtual mouted drive. To actually modify/save anything you need bartPE boot cd.
Always best to completely backup your registry before doing anything, of course.
Ghost4me Ghost 9, 10, 12, 14, 15. Windows XP, Vista, Windows 7
IP Logged
Pleonasm
Übermensch
Offline
Posts: 1619
Back to top
Re: Registry Edit on Ghost 10 Mounted Virtual Volu
Reply #6 -
Jul 29
th
, 2006 at 9:23am
Ghost4me, thanks for providing an excellent solution!
Brian, thank you for your helpful posts, too.
ple • o • nasm
n. “The use of more words than are required to express an idea”
IP Logged
Brian
Demigod
Offline
Posts: 6345
NSW, Australia
Back to top
Re: Registry Edit on Ghost 10 Mounted Virtual Volu
Reply #7 -
Aug 24
th
, 2006 at 10:29pm
Ghost4me,
Thanks. Your technique helped me find some registry entries which disappeared this morning. They were in last night's backup image so I'll restore it now.
IP Logged
Pleonasm
Übermensch
Offline
Posts: 1619
Back to top
Re: Registry Edit on Ghost 10 Mounted Virtual Volu
Reply #8 -
Aug 25
th
, 2006 at 10:12am
The ability to “look back in time” at the registry (and optionally copy selected keys) is a nice ancillary benefit of using Ghost 10.
ple • o • nasm
n. “The use of more words than are required to express an idea”
IP Logged
Brian
Demigod
Offline
Posts: 6345
NSW, Australia
Back to top
Re: Registry Edit on Ghost 10 Mounted Virtual Volu
Reply #9 -
Aug 25
th
, 2006 at 3:23pm
It is nice. I wouldn't have thought of searching the registry of a backup image if you hadn't started this thread.
IP Logged
Pages: 1
‹
Previous Topic
|
Next Topic
›
« Home
‹ Board
Top of this page
Forum Jump »
Home
» 10 most recent Posts
» 10 most recent Topics
Rad Community Technical Discussion Boards (Computer Hardware + PC Software)
- Norton Ghost 15, 14, 12, 10, 9, + Norton Save + Restore (NS+R)
- Norton Ghost 2003, Ghost v8.x + Ghost Solution Suite (GSS) Discussion Board ««
- Cloning Programs (Except Norton Ghost)
- NightOwl's Bootable CD/DVD
- PC Hardware + Software (except Cloning programs)
Rad Community Non-Technical Discussion Boards
- The Water Cooler
- YaBB Forum Software + Rad Web Site
Radified Community Forums
» Powered by
YaBB 2.4
!
YaBB
© 2000-2009. All Rights Reserved.