Need offline registry editor
I thought I have every utility known to man but :) I seem to be missing an offline registry editor. I restore an image backup (Windows 11) to a computer and it boots with the black screen of death. According to articles I have read I just need to boot something that has an offline registry editor and disable one service. Is there any way to do this with a Windows Boot Media? If not can someone recommend a good offline registry editor?
its probably in HKLM
boot into installation media
select repair / command prompt
Highlight the HKLM key
Go to File > Load Hive
Browse to Z:\Windows\system32\config
Open the hive called "Services"
browse to the service you want to disable
set the start dword to 4 (disabled) or 3 (manual)
save exit reboot
ASKER
Booting the installation media and selecting "repair" brings up "troubleshoot". Troubleshoot brings up a lot of things but none of them are a registry editor.
I can open a command prompt and run regedit but the Load Hive option is greyed out.
So I am curious David. What are you booting? I am booting the Windows 11 installation media.....
If you don't have Bitlocker or another endpoint solution protecting the non-booting drive then putting it in a USB enclosure would allow you to edit it on a Windows PC.
ASKER
True but I am sure there has to be an offline registry editor on some kind of bootable media...... somewhere......
"I can open a command prompt and run regedit but the Load Hive option is greyed out. "
You need to have HKLM highlighted in the left pane otherwise Load Hive is greyed out in the File menu.
(As described above in the link)
ASKER
The link above does not work for me. So I highlight HKLM in the left. Then select Load Hive. Navigate to C:\Windows\System32\Config and select the "system" hive?
When I do that it asks for a Key Name. What is it looking for as far as a Key Name? When you open a remote registry is shows up below the current registry. I am a little lost at this point............
ASKER
Something is a little off. I see the mount point under HKLM but when I expand it I see CurrentControlSet001 and CurrentControlSet002 but no CurrentControlSet. That is what I need to modify. HKLM\System\CurrentControlSet\Services.
I've edited the link above (I think there's a bug)
That should take you through connecting the offline hive
Which is the Key you need to edit?
ASKER
I searched for and found the article that your link probably pointed to. I am now stuck at the post immediately above you lase post about not being able to find CurrentControlSet
Could you post the Key you need to edit? Then it's easier to direct you to the correct Hive. It you're looking at HKCU you may need ntuser.dat.
I have been doing offline reg edits since Windows NT 4. You load the regigtry hive into a new key. See comment from McKnife.
ASKER
The one stated up above. HKLM\System\CurrentControlSet\Services\viostor. You are correct. It is was HKCU I would need to load ntuser.dat. The hive I loaded was system.
Sorry, I missed your earlier post. Can you find it OK when loading ntuser.dat?
ASKER
The computer is not running and not on the network hence it needs to be on some kind of bootable media. I simply need to change a service startup type to disabled.