Pau Lo
asked on
SAM and SYSTEM hive
With local ladmin rights - can the admin copy the SAM and SYSTEM registry hives from a windows server? If not how can copies be obtained?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
sorry you also cannot copy registry hives.
Another option you can try is this.
1. Create a restore point.
2. Open C:\System Volume Information\_restore{0145F C50-D40A-4 2A0-A56A-2 75EF2B2493 B} folder and locate the latest restore folder starting with RP**.
3. In RP** folder, open snapshot folder. Where u can find all 5 OS hives restored.
Original posting here.
http://www.firewall.cx/ftopicp-21828.html
1. Create a restore point.
2. Open C:\System Volume Information\_restore{0145F
3. In RP** folder, open snapshot folder. Where u can find all 5 OS hives restored.
Original posting here.
http://www.firewall.cx/ftopicp-21828.html
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Its a live (v important server) so powering it down is out the equation or taking drives out.
I am suprised you cant just ntbackup the config folder :( then access them from a restored backup
I am suprised you cant just ntbackup the config folder :( then access them from a restored backup
ASKER