Windows Forum

Ask something
Discussion Locked

Registry Viewer

0 helpful
3 replies

by infosecmn

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Some changes were made to a Windows 2000 server registry. We want to see what the registry looked like last week before the changes were made. I restored the registry from backup but don't know how to look. Currently I restored it to a temp directory on the backup server. I can't open it with notepad. All the registry tools are to view your current registry. Is there any way to view a registry in this format?

Any help would be appreciated.

3 replies

by cptomlly

Since you are basically wanting to see whats different you might try RegShot. You can get it here: http://regshot.ist.md/ Its normal function is to take a "snapshot" of the registry, then take another after some program has altered it which will allow you to see what has been changed.

I'm not sure if this will work for you, since you have one set of .dat files that aren't loaded. I'm thinking that if you point the first snap at the folder where you have the backup .dat files, then point it to the current .dat If all else fails you shoud be able to load it with Regedt32 using the file/load hive option or try this program called RegDat available here: http://people.freenet.de/h.ulbrich/

This discussion is closed to new replies.