You need to determine the SID of the user that's currently logged on, then connect remotely to the registry and look under HKU\<SID>
You can check the SID either through
dsquery user -name <TheUserName> | dsget user -sid
or through Sysinternals' PsGetSid (http://technet.microsoft.com/en-us/sysinternals/bb897417.aspx).
The HKEY_CURRENT_USER hive is a special hive which is only accessible by the currently logged in user to the system. To access an individual user's registry file, you can either load their NTUSER.DAT file into your HKEY_LOCAL_MACHINE hive, or as already mentioned use the HKEY_USERS along with their SID.
-tigermatt
0
Question has a verified solution.
Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.
You can check the SID either through
dsquery user -name <TheUserName> | dsget user -sid
or through Sysinternals' PsGetSid (http://technet.microsoft.com/en-us/sysinternals/bb897417.aspx).