Solved

Drive mapping in XP

Posted on 2013-01-14
6
305 Views
Last Modified: 2013-01-15
Hi there.
A user in our organisation has since relocated to another dept with no access the their old computer.  They used to have a fileserver folder mapped as a drive on their profile on the old computer.  I need to transfer their files from the mapped drive, but since I can't login at the user, I have no way (that I know) of telling where the mapped drive pointed to on the server.  

Is there a config file somewhere in the user's profile that would indicate the drive mappings they were using?

Thanks :-)
0
Comment
Question by:Aaronazz
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 38776896
check the group policy/scripts . if they manually mapped them then you won't find the info.

thanks

 mike
0
 

Author Comment

by:Aaronazz
ID: 38776899
Unfortunately the user mapped the server folder themselves.
0
 
LVL 14

Accepted Solution

by:
Rob Miners earned 250 total points
ID: 38776944
You may be able to remote/access to the workstation and load the users ntuser.dat file to find the information.

HKEY_CURRENT_USER (HKCU)
Registry Values in the Keys control or contain configuration information that is specific to the currently logged-on User.

The settings are stored in files located under the Users directory for each User who has logged onto the computer. In windows 7 those files are the “C:\Users\(Username)\ NTUSER.DAT” file and the “C:\Users\(Username)\AppData\Local\Microsoft\Windows\ UsrClass.dat” file(s).

In XP the files can be found in "C:\Documents and Settings\(Username)\ NTUSER.DAT"

Manually Editing Profiles

http://technet.microsoft.com/en-us/library/cc722901.aspx

Windows 7 Registry Forensics

http://www.forensicmag.com/article/windows-7-registry-forensics-part-3

eXample:

In the registry editor

Use the mouse, to select "HKEY_LOCAL_MACHINE" so that it is highlighted

goto the "Registry" File Menu, choose "Load Hive"

Browse to Drive letter \Users\"User_Name" and type in ntuser.dat and press the Enter key to open the file.

Enter "$user" as the name for the key.

Highlight "$user" in the pane on the left.

navigate to $user

Once completed, ensure "$user" is highlighted and choose "Unload Hive" from the "Registry Menu".

Close regedt32.
0
PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

 
LVL 18

Assisted Solution

by:Mike T
Mike T earned 250 total points
ID: 38778289
Does the user not remember? The simplest solution is to ask them surely...

Once you have mapped the user's hive (as above) look for mountpoint under
HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Explorer .
0
 

Author Closing Comment

by:Aaronazz
ID: 38778467
Thanks for all the advice.  

I did manage to access the ntuser.dat file on the remote computer from my computer, but became a bit nervous when it came to loading the hive on it locally.  Urgency became the priority and I ended up allowing the user a password reset to allow temporary access to another staff member onsite to log into the computer to look at the path displayed next the mapped drive in "My Computer".

I wil save this method for another day.  Thanks again.
0
 
LVL 14

Expert Comment

by:Rob Miners
ID: 38779994
Good to see that you are sorted :)
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question