Link to home
Start Free TrialLog in
Avatar of ffemtdd
ffemtdd

asked on

Manual System restore of Software Registry

Strange question I just came up with.  I am working on a system that had a corruption in the SAM file for the registry.  The system would kick an error with lsass.exe stating that the passwords did not match.  I was able to use the backups stored in the windows/repair folder to get the system running again.  I then did a manual restore of the last restore point by copying the SAM, SYSTEM, SOFTWARE, SECURITY and DEFAULT files into the c:\windows\system32\config folder.  Then the system came back with missing files.  What I would like to know is, if I were to format and reinstall windows xp, then restore a backup of the program files folder, would I be able to restore the SOFTWARE file from the last system restore point to the c:\windows\system32\config folder and get all the old software running again without having to install them all?
Avatar of M_Intuit
M_Intuit

"Then the system came back with missing files."
Does this mean the system was unable to boot? If so, manually restore from an even older restore point.

Backup the restored restore points and try it. You have a good knowledge of the process already. If it gorks out, just restore manually again.
Avatar of ffemtdd

ASKER

@ M_Intuit ... I know how to restore the files from the restore points in system volume information.  What I want to know is if the files are independant of each other and if the Software file will add the registry entries needed to get all of the previously installed software operational?

@ craylord ... No, the system booted just fine.  The error was related to a missing dll (wininet.dll)  When that file was restored another error appeared.  The next error was SHRegGetValueW.  Of course I read the instructions on this site to uninstall WinXPSP2 but when I attempted to do so I ran into an error getting into the administration account via safe mode.  I believe it was again due to a corrupted SAM file as the lsass.exe password error re-appeared.
It really just depends on the program.  Some will, some wont.  Some software adds reg entries to the current user (ntuser.dat), plus, file assosications will still be broken as they come from the System key.

It's worth a shot, but I'm guessing won't work.
ASKER CERTIFIED SOLUTION
Avatar of Purple_Tidder
Purple_Tidder
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial