Link to home
Start Free TrialLog in
Avatar of Netexperts
NetexpertsFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Retrieving registry data from a slave drive

Hi Guys
I've tried looking through previous posts but none of them seem to work.
I've got a clients drive that is currently set as a slave in another system due to booting problems and he's requested i wipe the drive and re-install all the software.
I have the media but need the serial keys from various programs but as the drive is a slave i cannot seem to access the hive.
Can anyone tell me how to access the registry on the slave drive so that i can retireve the keys and also if there's any way of getting the Outlook account settings (username, pop and smtp server details etc).

Thanks in advance.
Avatar of cpottercpotter
cpottercpotter
Flag of United States of America image

I have used a UBCD4WIN Disk for this, boot the PC with the external drive from the CD. Now run the System Information for Windows "System Info" remote from the CD. It'll show you the keys of the installed software.

http://ubcd4win.com
To save all the Outlook data, files are stored in two locations. Copy these two folders from the external drive and when the computer has been reformatted, copy them back into their respective locations.

C:\Documents and Settings\User Name\Application Data\Microsoft\Outlook\
C:\Documents and Settings\User Name\Local Settings\Application Data\Microsoft\Outlook\

As far as reading the registry, I am a huge fan of UBCD4Win and second cpottercpotter's recommendation. It takes a little bit to build a disk, but worth the time.
Avatar of younghv
That has been asked a lot here on EE.
Do a site search for "offline registry editing".

I know that there are a couple of posts from "Krompton" and (I think) LeeTutor that do a great job of explaining.

Here is one sample I found:

https://www.experts-exchange.com/questions/21746300/Edit-registry-on-slaved-harddrive.html
ASKER CERTIFIED SOLUTION
Avatar of younghv
younghv
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I would agree that if you find anything from LeeTutor on this, follow his recommendations. That guy is the EE God!  =)
loading remote hives is probably the biggest pain in the ass the M$ ever dreamed up.  Still, that's what they want, they don't really want you to recover a setup.  Pay more to install, that is their revenue mantra.

Anyway, this will NOT help you one bit.  All the logins and passwords to any and all programs that are stored in the registry are almost always encrypted.  Getting the hive loaded will probably a royal waste of time.  Try it if you want.  I'll bet you will be disappointed.  The program directories or emails are likely to have PW data more easily available than the registry.

Go to C:\Documents and Settings\user name\Start Menu\Programs  copy all there to another locale.
Go to C:\Documents and Settings\All USers\Start Menu\Programs    copy all there to another locale
Go to C:\Documents and Settings\username\Application Data  copy all there to another locale.
That will tell you what software to install.
Then copy all his My Documents directory to another place for safe keeping.

Now reinstall the OS, and rebuild the programs based on what you copied

Did you know, you can recover his setup from the restore points in System Volume information????

ALL of what you need to can get from the hard drive directories. The remote REG is almost useless.
I beg to differ....

If you load a reg hive, you can extract software serials AND passwords, yes I said passwords, by vewing Protected Storage....

Protected Storage PassView v1.63: Recover Protected Storage passwords
http://www.nirsoft.net/utils/pspv.html

You can have it open other users reg hives to extract data....

NOTE, you should be able to get Outlook, OE, and stored IE passwords with no effort...
Avatar of Netexperts

ASKER

Many Thanks,
This will solve all my problems. Not sure who will get the points but this is the solution i've used.
Many Thanks again !!!
Your welcome!