Solved

Drive mapping in XP

Posted on 2013-01-14
6
302 Views
Last Modified: 2013-01-15
Hi there.
A user in our organisation has since relocated to another dept with no access the their old computer.  They used to have a fileserver folder mapped as a drive on their profile on the old computer.  I need to transfer their files from the mapped drive, but since I can't login at the user, I have no way (that I know) of telling where the mapped drive pointed to on the server.  

Is there a config file somewhere in the user's profile that would indicate the drive mappings they were using?

Thanks :-)
0
Comment
Question by:Aaronazz
6 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 38776896
check the group policy/scripts . if they manually mapped them then you won't find the info.

thanks

 mike
0
 

Author Comment

by:Aaronazz
ID: 38776899
Unfortunately the user mapped the server folder themselves.
0
 
LVL 14

Accepted Solution

by:
Rob Miners earned 250 total points
ID: 38776944
You may be able to remote/access to the workstation and load the users ntuser.dat file to find the information.

HKEY_CURRENT_USER (HKCU)
Registry Values in the Keys control or contain configuration information that is specific to the currently logged-on User.

The settings are stored in files located under the Users directory for each User who has logged onto the computer. In windows 7 those files are the “C:\Users\(Username)\ NTUSER.DAT” file and the “C:\Users\(Username)\AppData\Local\Microsoft\Windows\ UsrClass.dat” file(s).

In XP the files can be found in "C:\Documents and Settings\(Username)\ NTUSER.DAT"

Manually Editing Profiles

http://technet.microsoft.com/en-us/library/cc722901.aspx

Windows 7 Registry Forensics

http://www.forensicmag.com/article/windows-7-registry-forensics-part-3

eXample:

In the registry editor

Use the mouse, to select "HKEY_LOCAL_MACHINE" so that it is highlighted

goto the "Registry" File Menu, choose "Load Hive"

Browse to Drive letter \Users\"User_Name" and type in ntuser.dat and press the Enter key to open the file.

Enter "$user" as the name for the key.

Highlight "$user" in the pane on the left.

navigate to $user

Once completed, ensure "$user" is highlighted and choose "Unload Hive" from the "Registry Menu".

Close regedt32.
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 
LVL 17

Assisted Solution

by:Mike T
Mike T earned 250 total points
ID: 38778289
Does the user not remember? The simplest solution is to ask them surely...

Once you have mapped the user's hive (as above) look for mountpoint under
HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Explorer .
0
 

Author Closing Comment

by:Aaronazz
ID: 38778467
Thanks for all the advice.  

I did manage to access the ntuser.dat file on the remote computer from my computer, but became a bit nervous when it came to loading the hive on it locally.  Urgency became the priority and I ended up allowing the user a password reset to allow temporary access to another staff member onsite to log into the computer to look at the path displayed next the mapped drive in "My Computer".

I wil save this method for another day.  Thanks again.
0
 
LVL 14

Expert Comment

by:Rob Miners
ID: 38779994
Good to see that you are sorted :)
0

Featured Post

Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
This article runs through the process of deploying a single EXE application selectively to a group of user.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question